last executing test programs: 4m32.411354171s ago: executing program 4 (id=670): syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) socket$kcm(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101300, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 4m31.277281347s ago: executing program 4 (id=684): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x80000, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0xa) 4m31.242147749s ago: executing program 4 (id=686): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240), &(0x7f0000000200), 0x0, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r1], &(0x7f0000000200), &(0x7f0000000580)=[0x0], &(0x7f0000000040), 0x0, 0x1000000000000}) 4m30.88443591s ago: executing program 4 (id=690): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x8048802) 4m30.845649872s ago: executing program 4 (id=691): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000b00)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@nobarrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@errors_remount}, {@nomblk_io_submit}, {@bh}, {@prjquota}]}, 0x1, 0x55f, &(0x7f0000000580)="$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") bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x9730, &(0x7f0000009800)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd27, 0x4, {{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x20, 0x2f}, {@in=@multicast1, 0x1, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x8727e}, {0x0, 0xffffdffff7fffffb, 0x6, 0x5}, {0x1, 0x9, 0x8}, 0x80000000, 0x3506, 0xa, 0x4, 0x0, 0x21}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000300)={{r1}}) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r7, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x80, 0x800000}, {0x2a83, 0x0, 0x0, 0x0, 0x0, 0xc1}]}) r8 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={0x80, r8, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_LINK={0x34, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x80}}, 0x20040040) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f, 0x9, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r7, &(0x7f0000001680)={0x2020}, 0x2020) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000002c0), &(0x7f0000000380)=0xc) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000f80)=ANY=[], 0x150) 4m29.958620123s ago: executing program 4 (id=704): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 4m14.153140922s ago: executing program 32 (id=704): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 56.358501932s ago: executing program 3 (id=2429): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x4}, 0x2f) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@random="79ee7ca42eea", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 56.324634683s ago: executing program 3 (id=2430): openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000580)=0xc) 56.294107365s ago: executing program 3 (id=2432): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0026}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 56.230447859s ago: executing program 3 (id=2436): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendto$packet(r0, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0x6f, 0x40000, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 56.105628136s ago: executing program 3 (id=2438): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd28, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x10000000, 0x3, 0xf}}]}, {0xffffffe1}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x13, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x7}}}]}, {0xffffffffffffffad}, {0x52}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xffffffffffffffff) 55.900594929s ago: executing program 3 (id=2440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r9, 0x3b}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="d0", 0x1}], 0x1}, 0xc804) 44.984716725s ago: executing program 2 (id=2451): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10022, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000300)="09000000e700140000007ef52f555f2a0c67127025c1d97bfbf719143baa4b1f", 0x20, 0x24000801, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) 44.926155609s ago: executing program 2 (id=2452): bind$inet6(0xffffffffffffffff, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000004240)=0x4, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)=""/217, 0xd9}, 0x5dd2}], 0x1, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) 44.851485633s ago: executing program 2 (id=2453): write$dsp(0xffffffffffffffff, &(0x7f0000002180)="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", 0xffffffea) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_FORWARD(r1, 0x40084149, &(0x7f0000000580)=0xc) 44.851182983s ago: executing program 2 (id=2454): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) read$dsp(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000000101040000000400000000000000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003002001000000000000000000000000000214000400fe8800000000000000000000000000010c000280050001000000000008000740000000000c"], 0xa0}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000fc0100000000000000000000000000004e22000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff3400000002fc00480500000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fc01000000000000000000000000000102000000000000000008000000080000fcffffff000000000000000000000000000000000000000032000000000000007f00000100"/287], 0x23c}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) syz_open_dev$dri(0x0, 0x7, 0x220042) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffbfda, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000380)="80fd01fff140", 0x6}], 0x1, 0x2, 0xfffffffe) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) 44.481751115s ago: executing program 2 (id=2455): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d"], 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x8800) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x20000010) 44.432766447s ago: executing program 2 (id=2456): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f250040297300000109021200010000000009"], 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 40.420757322s ago: executing program 33 (id=2440): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r9, 0x3b}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)="d0", 0x1}], 0x1}, 0xc804) 29.382431436s ago: executing program 34 (id=2456): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f250040297300000109021200010000000009"], 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 3.979991108s ago: executing program 1 (id=2563): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) read$dsp(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000000101040000000400000000000000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003002001000000000000000000000000000214000400fe8800000000000000000000000000010c000280050001000000000008000740000000000c"], 0xa0}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000fc0100000000000000000000000000004e22000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff3400000002fc00480500000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fc01000000000000000000000000000102000000000000000008000000080000fcffffff000000000000000000000000000000000000000032000000000000007f00000100"/287], 0x23c}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) syz_open_dev$dri(0x0, 0x7, 0x220042) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffbfda, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000380)="80fd01fff140", 0x6}], 0x1, 0x2, 0xfffffffe) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) 2.829453736s ago: executing program 0 (id=2572): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2.626329837s ago: executing program 7 (id=2576): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r0, &(0x7f0000002180)="af13fd52f9a2526dc9f8df99e8f25d5ecd30dd5681ace8d8d598e67ddeab54ac80711c8c7297963db98acaccd24ef95e27f1b0bf79725bec82703304fee2da84a2332d9d02c0881ff34953107e41ddb8b5afcf01c00d52507ef7b1d2820c2ee2b4b3f7f431abdd8d6153f700000000000000000000000039d9e6cda24531c5b126a8b85100057ae9284c98731185786e75ed66c1fe99d69f4dbfa98e779482a6f6", 0xa1) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000580)=0xc) 2.530984573s ago: executing program 6 (id=2579): mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x2010, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1a04"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) 2.522853433s ago: executing program 1 (id=2580): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0026}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) 2.488047815s ago: executing program 0 (id=2581): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @loopback, 0x2}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x4}, 0x2f) syz_emit_ethernet(0x0, 0x0, 0x0) 2.455451177s ago: executing program 1 (id=2583): vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000380)={0x0, &(0x7f0000000100)}) close(r0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 2.437813788s ago: executing program 0 (id=2584): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0xfff2}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.360700872s ago: executing program 6 (id=2587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000001980)=[{&(0x7f00000019c0)=""/44, 0x2c}], 0x1, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1.526251281s ago: executing program 7 (id=2588): connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000001f580), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="04005e801c005e8008000700c5f133694bbd07cb55000000080003006e8f000030005e800800020003000000080002491acf00000c0001"], 0x8c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) 1.391943909s ago: executing program 7 (id=2590): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0xffffffff, 0x0, 0xb49, 0x9, 0x8000000000000001, 0x0, 0x3}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) read$dsp(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a0000000000101040000000400000000000000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c000180140003002001000000000000000000000000000214000400fe8800000000000000000000000000010c000280050001000000000008000740000000000c"], 0xa0}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001280)=ANY=[@ANYBLOB="3c0200001900010000000000fbdbdf25e0000001000000000000000000000000fc0100000000000000000000000000004e22000bffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500e0000002000000000000000000000000000000003c00000000000000ffffffff000000000000000000000000ff3400000002fc00480500000000000000000000ac1414aa000000000000000000000000000000003c0000000a000000fc01000000000000000000000000000102000000000000000008000000080000fcffffff000000000000000000000000000000000000000032000000000000007f00000100"/287], 0x23c}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) syz_open_dev$dri(0x0, 0x7, 0x220042) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0xffffffffffffbfda, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x0, 0x1, 0x0, 0x0, r7}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) pwritev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000380)="80fd01fff140", 0x6}], 0x1, 0x2, 0xfffffffe) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="02090000020000000000000000006ed50d169fd1259a4008814b921f312bdff9490675285f56e698679723b433298a597a017f02c5d6eb"], 0x10}}, 0x0) 1.354917441s ago: executing program 6 (id=2591): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.352262871s ago: executing program 0 (id=2592): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0xff, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) fsopen(&(0x7f0000000200)='omfs\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x7a, &(0x7f0000000580)=ANY=[], 0x0) 1.266368326s ago: executing program 1 (id=2593): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0026}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) 1.231674829s ago: executing program 1 (id=2594): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$sequencer(r0, &(0x7f00000000c0)=ANY=[@ANYRES64], 0x24) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4801}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000005c0), 0x4) close(0xffffffffffffffff) open(0x0, 0x8aa00, 0x50) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000180)=0x4) fallocate(r5, 0x84, 0x0, 0x1000f4) unshare(0x8000000) r6 = semget(0x0, 0x0, 0x3) semtimedop(r6, &(0x7f0000000080)=[{0x0, 0x5, 0x1000}], 0x1, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x8020000) 1.230595518s ago: executing program 0 (id=2604): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0026}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373"], 0x44}}, 0x0) 1.087282847s ago: executing program 0 (id=2595): keyctl$read(0x7ffffffe, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_tables_matches\x00') preadv(0xffffffffffffffff, 0x0, 0x0, 0x740, 0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, 0x0, 0x0, 0x400, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/snmp\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES8, @ANYRES16], 0x0) 787.365564ms ago: executing program 6 (id=2596): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x8800) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x20000010) 741.178887ms ago: executing program 6 (id=2597): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 659.410982ms ago: executing program 6 (id=2598): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) write$dsp(r0, &(0x7f0000002180)="af13fd52f9a2526dc9f8df99e8f25d5ecd30dd5681ace8d8d598e67ddeab54ac80711c8c7297963db98acaccd24ef95e27f1b0bf79725bec82703304fee2da84a2332d9d02c0881ff34953107e41ddb8b5afcf01c00d52507ef7b1d2820c2ee2b4b3f7f431abdd8d6153f700000000000000000000000039d9e6cda24531c5b126a8b85100057ae9284c98731185786e75ed66c1fe99d69f4dbfa98e779482a6f6", 0xa1) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000580)=0xc) 417.996356ms ago: executing program 5 (id=2601): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000001980)=[{&(0x7f00000019c0)=""/44, 0x2c}], 0x1, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 381.076498ms ago: executing program 7 (id=2602): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8f, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0xfff2}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 318.006742ms ago: executing program 1 (id=2603): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a00090504020000000000090581aa", @ANYBLOB="f784"], 0x0) 247.166746ms ago: executing program 5 (id=2605): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0xff, 0x2, 0x7fff7ffc}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) fsopen(&(0x7f0000000200)='omfs\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000080), &(0x7f0000000280)}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x7a, &(0x7f0000000580)=ANY=[], 0x0) 213.436528ms ago: executing program 5 (id=2606): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x4, 0x7fff0026}]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d616373"], 0x44}}, 0x0) 193.815479ms ago: executing program 7 (id=2607): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @multicast}, 0x14) 155.424541ms ago: executing program 5 (id=2608): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}, 0x1, 0x0, 0x0, 0x84}, 0x8800) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}}, 0x20000010) 129.910683ms ago: executing program 5 (id=2609): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) setrlimit(0x7, &(0x7f0000000400)) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0xffffffffffffffff) 63.145356ms ago: executing program 5 (id=2610): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}}], 0x4000000000002d9, 0x10022, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000300), 0x0, 0x24000801, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}, 0x14) 0s ago: executing program 7 (id=2611): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1/file2/file3\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1/file2/file3/file4\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0/file1/file2/file3/file5\x00', 0x8000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file6\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0/file1\x00', &(0x7f0000000340)='./file0/file6\x00', 0x0, 0x5000, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file6/file2\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000440)={0x2004}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) renameat2(r0, &(0x7f0000000540)='file3/file5\x00', r0, &(0x7f0000000580)='file3/file4/file5\x00', 0x0) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, 0x0) kernel console output (not intermixed with test programs): rocess `syz.3.919'. [ 245.204653][ T7334] loop1: detected capacity change from 0 to 1024 [ 245.206569][ T7334] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.207636][ T7334] EXT4-fs: Ignoring removed bh option [ 245.210161][ T7334] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 245.318817][ T7334] loop1: detected capacity change from 0 to 32768 [ 245.341463][ T7334] XFS (loop1): Mounting V5 Filesystem [ 245.353955][ T7334] XFS (loop1): Ending clean mount [ 245.871898][ T7357] device syzkaller0 entered promiscuous mode [ 245.929762][ T7359] device vlan2 entered promiscuous mode [ 245.930976][ T7359] device bridge0 entered promiscuous mode [ 246.052018][ T4321] XFS (loop1): Unmounting Filesystem [ 246.054421][ T7366] device syzkaller0 entered promiscuous mode [ 246.116094][ T7370] netlink: 'syz.2.930': attribute type 21 has an invalid length. [ 246.117541][ T7370] netlink: 164 bytes leftover after parsing attributes in process `syz.2.930'. [ 246.385960][ T7378] IPv6: ADDRCONF(NETDEV_CHANGE): rose1: link becomes ready [ 246.388449][ T7378] bond0: (slave rose0): Error: Device can not be enslaved while up [ 246.784135][ T7395] loop1: detected capacity change from 0 to 1024 [ 246.788371][ T7395] EXT4-fs: Ignoring removed nomblk_io_submit option [ 246.790501][ T7395] EXT4-fs: Ignoring removed bh option [ 246.792930][ T7395] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 246.849287][ T7397] device syzkaller0 entered promiscuous mode [ 246.924583][ T7395] loop1: detected capacity change from 0 to 32768 [ 246.958236][ T7395] XFS (loop1): Mounting V5 Filesystem [ 246.978465][ T7395] XFS (loop1): Ending clean mount [ 247.416544][ T7413] device syzkaller0 entered promiscuous mode [ 247.559555][ T7427] bond0: (slave rose0): Error: Device can not be enslaved while up [ 247.592180][ T7430] netlink: 'syz.3.947': attribute type 21 has an invalid length. [ 247.593696][ T7430] netlink: 164 bytes leftover after parsing attributes in process `syz.3.947'. [ 247.652957][ T4321] XFS (loop1): Unmounting Filesystem [ 247.785346][ T7441] device syzkaller0 entered promiscuous mode [ 248.369669][ T7452] IPv6: ADDRCONF(NETDEV_CHANGE): rose2: link becomes ready [ 248.372481][ T7452] bond0: (slave rose0): Error: Device can not be enslaved while up [ 248.435562][ T7456] netlink: 'syz.2.958': attribute type 21 has an invalid length. [ 248.437722][ T7456] netlink: 164 bytes leftover after parsing attributes in process `syz.2.958'. [ 248.488554][ T7460] loop2: detected capacity change from 0 to 1024 [ 248.490512][ T7460] EXT4-fs: Ignoring removed nomblk_io_submit option [ 248.491748][ T7460] EXT4-fs: Ignoring removed bh option [ 248.493281][ T7460] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 248.566772][ T7462] device syzkaller0 entered promiscuous mode [ 248.618737][ T7460] loop2: detected capacity change from 0 to 32768 [ 248.656875][ T7460] XFS (loop2): Mounting V5 Filesystem [ 248.676306][ T7460] XFS (loop2): Ending clean mount [ 248.795990][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.797157][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.115186][ T7484] device syzkaller0 entered promiscuous mode [ 249.249004][ T7494] netlink: 'syz.5.969': attribute type 21 has an invalid length. [ 249.250574][ T7494] netlink: 164 bytes leftover after parsing attributes in process `syz.5.969'. [ 249.252850][ T7491] bond0: (slave rose0): Error: Device can not be enslaved while up [ 249.351422][ T4331] XFS (loop2): Unmounting Filesystem [ 249.713876][ T7518] device syzkaller0 entered promiscuous mode [ 250.104820][ T7524] bond0: (slave rose0): Error: Device can not be enslaved while up [ 250.122318][ T7528] device syzkaller0 entered promiscuous mode [ 250.177749][ T7530] netlink: 'syz.1.983': attribute type 21 has an invalid length. [ 250.179046][ T7530] netlink: 164 bytes leftover after parsing attributes in process `syz.1.983'. [ 250.205521][ T7533] loop1: detected capacity change from 0 to 1024 [ 250.206996][ T7533] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.208068][ T7533] EXT4-fs: Ignoring removed bh option [ 250.213396][ T7533] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 250.259303][ T6711] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 250.388745][ T7543] device syzkaller0 entered promiscuous mode [ 250.456578][ T7533] loop1: detected capacity change from 0 to 32768 [ 250.480533][ T7533] XFS (loop1): Mounting V5 Filesystem [ 250.512133][ T7533] XFS (loop1): Ending clean mount [ 250.595457][ T7551] bond0: (slave rose0): Error: Device can not be enslaved while up [ 250.968536][ T7568] netlink: 'syz.0.994': attribute type 21 has an invalid length. [ 250.969779][ T7568] netlink: 164 bytes leftover after parsing attributes in process `syz.0.994'. [ 251.069655][ T4321] XFS (loop1): Unmounting Filesystem [ 251.382965][ T7585] device syzkaller0 entered promiscuous mode [ 251.612282][ T7593] bond0: (slave rose0): Error: Device can not be enslaved while up [ 251.720474][ T7601] netlink: 'syz.2.1007': attribute type 21 has an invalid length. [ 251.721837][ T7601] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1007'. [ 251.752426][ T7603] device syzkaller0 entered promiscuous mode [ 251.811080][ T7607] loop1: detected capacity change from 0 to 1024 [ 251.812665][ T7607] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.813950][ T7607] EXT4-fs: Ignoring removed bh option [ 251.815358][ T7607] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 251.936715][ T7607] loop1: detected capacity change from 0 to 32768 [ 251.954077][ T7607] XFS (loop1): Mounting V5 Filesystem [ 251.967280][ T7607] XFS (loop1): Ending clean mount [ 252.383164][ T7629] device syzkaller0 entered promiscuous mode [ 252.588399][ T7633] bond0: (slave rose0): Error: Device can not be enslaved while up [ 252.672768][ T4321] XFS (loop1): Unmounting Filesystem [ 252.701505][ T7640] netlink: 'syz.5.1018': attribute type 21 has an invalid length. [ 252.702838][ T7640] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1018'. [ 252.762553][ T7646] device syzkaller0 entered promiscuous mode [ 253.286785][ T7663] device syzkaller0 entered promiscuous mode [ 253.619684][ T7675] loop3: detected capacity change from 0 to 1024 [ 253.623886][ T7675] EXT4-fs: Ignoring removed nomblk_io_submit option [ 253.625568][ T7676] bond0: (slave rose0): Error: Device can not be enslaved while up [ 253.630973][ T7675] EXT4-fs: Ignoring removed bh option [ 253.635108][ T7675] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 253.781108][ T7675] loop3: detected capacity change from 0 to 32768 [ 253.817619][ T7684] netlink: 'syz.5.1033': attribute type 21 has an invalid length. [ 253.818984][ T7684] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1033'. [ 253.832667][ T7675] XFS (loop3): Mounting V5 Filesystem [ 253.868645][ T7675] XFS (loop3): Ending clean mount [ 253.882940][ T7691] device syzkaller0 entered promiscuous mode [ 254.474979][ T4322] XFS (loop3): Unmounting Filesystem [ 254.597989][ T7704] device syzkaller0 entered promiscuous mode [ 254.825362][ T7722] bond0: (slave rose0): Error: Device can not be enslaved while up [ 254.917600][ T7725] netlink: 'syz.2.1044': attribute type 21 has an invalid length. [ 254.919051][ T7725] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1044'. [ 255.322061][ T7733] device syzkaller0 entered promiscuous mode [ 255.543047][ T7735] loop5: detected capacity change from 0 to 1024 [ 255.544521][ T7735] EXT4-fs: Ignoring removed nomblk_io_submit option [ 255.566732][ T7735] EXT4-fs: Ignoring removed bh option [ 255.574908][ T7735] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 255.618929][ T6711] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 255.707828][ T7746] device syzkaller0 entered promiscuous mode [ 255.824847][ T7735] loop5: detected capacity change from 0 to 32768 [ 255.859675][ T7753] bond0: (slave rose0): Error: Device can not be enslaved while up [ 255.932692][ T7763] netlink: 'syz.2.1056': attribute type 1 has an invalid length. [ 255.944314][ T7735] XFS (loop5): Mounting V5 Filesystem [ 255.977460][ T7735] XFS (loop5): Ending clean mount [ 255.981038][ T7763] 8021q: adding VLAN 0 to HW filter on device bond4 [ 256.020341][ T7763] bond4: (slave dummy0): making interface the new active one [ 256.022906][ T7763] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 256.024287][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 256.076780][ T7294] bond4: (slave dummy0): link status definitely down, disabling slave [ 256.078450][ T7294] bond4: now running without any active interface! [ 256.404981][ T6706] XFS (loop5): Unmounting Filesystem [ 256.441212][ T7778] tipc: Enabling of bearer rejected, failed to enable media [ 256.443151][ T7778] device syzkaller0 entered promiscuous mode [ 256.804191][ T7804] bond0: (slave rose0): Error: Device can not be enslaved while up [ 256.853015][ T7806] netlink: 'syz.0.1070': attribute type 1 has an invalid length. [ 256.863116][ T7806] 8021q: adding VLAN 0 to HW filter on device bond5 [ 256.867525][ T7806] bond4: (slave dummy0): Releasing active interface [ 256.888635][ T7806] bond5: (slave dummy0): making interface the new active one [ 256.890889][ T7806] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 256.902588][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 256.966900][ T7073] bond5: (slave dummy0): link status definitely down, disabling slave [ 256.968470][ T7073] bond5: now running without any active interface! [ 257.054626][ T7813] loop1: detected capacity change from 0 to 1024 [ 257.056606][ T7813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 257.057634][ T7813] EXT4-fs: Ignoring removed bh option [ 257.059095][ T7813] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 257.181107][ T7813] loop1: detected capacity change from 0 to 32768 [ 257.205404][ T7813] XFS (loop1): Mounting V5 Filesystem [ 257.243626][ T7813] XFS (loop1): Ending clean mount [ 257.326728][ T7834] tipc: Enabling of bearer rejected, failed to enable media [ 257.336296][ T7834] device syzkaller0 entered promiscuous mode [ 257.758955][ T7846] netlink: 'syz.2.1081': attribute type 1 has an invalid length. [ 257.770512][ T7846] 8021q: adding VLAN 0 to HW filter on device bond5 [ 257.775231][ T7846] bond4: (slave dummy0): Releasing active interface [ 257.818845][ T7846] bond5: (slave dummy0): making interface the new active one [ 257.821002][ T7846] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 257.824845][ T7844] IPv6: ADDRCONF(NETDEV_CHANGE): rose5: link becomes ready [ 257.827291][ T7294] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 257.830332][ T7844] bond0: (slave rose0): Error: Device can not be enslaved while up [ 257.877326][ T6939] bond5: (slave dummy0): link status definitely down, disabling slave [ 257.879200][ T6939] bond5: now running without any active interface! [ 257.913916][ T4321] XFS (loop1): Unmounting Filesystem [ 258.151469][ T27] audit: type=1326 audit(258.140:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.5.1090" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89375928 code=0x7ffc0000 [ 258.160952][ T27] audit: type=1326 audit(258.140:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.5.1090" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89375928 code=0x7ffc0000 [ 258.165361][ T27] audit: type=1326 audit(258.140:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.5.1090" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=226 compat=0 ip=0xffff89375928 code=0x7ffc0000 [ 258.170257][ T27] audit: type=1326 audit(258.140:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.5.1090" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89375928 code=0x7ffc0000 [ 258.180384][ T27] audit: type=1326 audit(258.140:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.5.1090" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89375928 code=0x7ffc0000 [ 258.188473][ T27] audit: type=1326 audit(258.150:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.5.1090" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff89375928 code=0x7ffc0000 [ 258.193087][ T27] audit: type=1326 audit(258.150:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.5.1090" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89375928 code=0x7ffc0000 [ 258.201857][ T27] audit: type=1326 audit(258.150:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.5.1090" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89375928 code=0x7ffc0000 [ 258.207546][ T27] audit: type=1326 audit(258.160:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.5.1090" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=33 compat=0 ip=0xffff89375928 code=0x7ffc0000 [ 258.215380][ T27] audit: type=1326 audit(258.160:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7870 comm="syz.5.1090" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89375928 code=0x7ffc0000 [ 258.313773][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1091'. [ 258.344326][ T7879] tipc: Enabling of bearer rejected, failed to enable media [ 258.349019][ T7879] device syzkaller0 entered promiscuous mode [ 258.588748][ T7881] bond0: (slave rose0): Error: Device can not be enslaved while up [ 258.673418][ T7887] loop0: detected capacity change from 0 to 1024 [ 258.690755][ T7887] EXT4-fs: Ignoring removed nomblk_io_submit option [ 258.691924][ T7887] EXT4-fs: Ignoring removed bh option [ 258.694093][ T7887] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 258.806108][ T7887] loop0: detected capacity change from 0 to 32768 [ 258.833013][ T7887] XFS (loop0): Mounting V5 Filesystem [ 258.845333][ T7887] XFS (loop0): Ending clean mount [ 258.847827][ T7897] netlink: 'syz.3.1096': attribute type 1 has an invalid length. [ 258.856810][ T7897] 8021q: adding VLAN 0 to HW filter on device bond3 [ 258.872267][ T7897] bond3: (slave dummy0): making interface the new active one [ 258.877131][ T7897] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 258.917069][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 258.966651][ T5249] bond3: (slave dummy0): link status definitely down, disabling slave [ 258.968218][ T5249] bond3: now running without any active interface! [ 259.405084][ T7914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.408116][ T7914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.481696][ T7918] tipc: Enabling of bearer rejected, failed to enable media [ 259.483603][ T7918] device syzkaller0 entered promiscuous mode [ 259.531446][ T4326] XFS (loop0): Unmounting Filesystem [ 259.628053][ T7924] bond0: (slave rose0): Error: Device can not be enslaved while up [ 259.705514][ T7926] netlink: 'syz.5.1107': attribute type 1 has an invalid length. [ 259.712975][ T7926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.732237][ T7926] bond0: (slave dummy0): making interface the new active one [ 259.734339][ T7926] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 259.736091][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 259.817019][ T5134] bond0: (slave dummy0): link status definitely down, disabling slave [ 259.818586][ T5134] bond0: now running without any active interface! [ 259.842611][ T4369] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 259.844364][ T4369] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 259.873445][ T7936] fido_id[7936]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 260.217756][ T7959] loop5: detected capacity change from 0 to 1024 [ 260.221756][ T7955] bond0: (slave rose0): Error: Device can not be enslaved while up [ 260.226739][ T7959] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.229048][ T7959] EXT4-fs: Ignoring removed bh option [ 260.232893][ T7959] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 260.304822][ T7962] tipc: Enabling of bearer rejected, failed to enable media [ 260.314020][ T7962] device syzkaller0 entered promiscuous mode [ 260.325390][ T7964] netlink: 'syz.3.1120': attribute type 1 has an invalid length. [ 260.338165][ T7964] 8021q: adding VLAN 0 to HW filter on device bond4 [ 260.393421][ T7964] bond3: (slave dummy0): Releasing active interface [ 260.398820][ T7959] loop5: detected capacity change from 0 to 32768 [ 260.432004][ T7959] XFS (loop5): Mounting V5 Filesystem [ 260.438424][ T7964] bond4: (slave dummy0): making interface the new active one [ 260.441389][ T7964] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 260.460903][ T7959] XFS (loop5): Ending clean mount [ 260.881833][ T5314] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 260.906191][ T5314] bond4: (slave dummy0): link status definitely down, disabling slave [ 260.915381][ T5314] bond4: now running without any active interface! [ 261.077227][ T6706] XFS (loop5): Unmounting Filesystem [ 261.185232][ T7999] bond0: (slave rose0): Error: Device can not be enslaved while up [ 261.257830][ T4369] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 261.260183][ T4369] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 261.299835][ T8007] netlink: 'syz.1.1133': attribute type 1 has an invalid length. [ 261.310970][ T8007] 8021q: adding VLAN 0 to HW filter on device bond4 [ 261.323544][ T8005] fido_id[8005]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 261.323633][ T8007] bond3: (slave dummy0): Releasing active interface [ 261.379623][ T8007] bond4: (slave dummy0): making interface the new active one [ 261.381814][ T8007] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 261.389148][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 261.415153][ T8013] tipc: Enabling of bearer rejected, failed to enable media [ 261.417597][ T8013] device syzkaller0 entered promiscuous mode [ 261.577085][ T7073] bond4: (slave dummy0): link status definitely down, disabling slave [ 261.579050][ T7073] bond4: now running without any active interface! [ 261.651328][ T8019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.652864][ T8019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.818689][ T8025] loop1: detected capacity change from 0 to 1024 [ 261.820211][ T8025] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.821501][ T8025] EXT4-fs: Ignoring removed bh option [ 261.825711][ T8025] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 261.973508][ T4392] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 261.975335][ T4392] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 261.998698][ T8025] loop1: detected capacity change from 0 to 32768 [ 262.007891][ T8036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.011498][ T8036] bond0: (slave rose0): Enslaving as an active interface with an up link [ 262.012854][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 262.045428][ T8025] XFS (loop1): Mounting V5 Filesystem [ 262.054563][ T8048] netlink: 'syz.3.1144': attribute type 1 has an invalid length. [ 262.059804][ T8039] fido_id[8039]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 262.081355][ T8025] XFS (loop1): Ending clean mount [ 262.089110][ T8048] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.139607][ T8048] bond4: (slave dummy0): Releasing active interface [ 262.195075][ T8048] bond5: (slave dummy0): making interface the new active one [ 262.202264][ T8048] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 262.508674][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 262.524306][ T8070] tipc: Enabling of bearer rejected, failed to enable media [ 262.531833][ T8066] device syzkaller0 entered promiscuous mode [ 262.683109][ T4321] XFS (loop1): Unmounting Filesystem [ 262.737094][ T7073] bond5: (slave dummy0): link status definitely down, disabling slave [ 262.738862][ T7073] bond5: now running without any active interface! [ 263.084653][ T4369] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 263.088285][ T4369] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 263.142127][ T8123] fido_id[8123]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 263.491161][ T8129] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 263.558441][ T8135] netlink: 'syz.0.1157': attribute type 1 has an invalid length. [ 263.564920][ T8135] 8021q: adding VLAN 0 to HW filter on device bond6 [ 263.570950][ T8135] bond5: (slave dummy0): Releasing active interface [ 263.732283][ T8140] loop3: detected capacity change from 0 to 1024 [ 263.735375][ T8140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.736938][ T8140] EXT4-fs: Ignoring removed bh option [ 263.754197][ T8140] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 263.783292][ T8142] tipc: Enabling of bearer rejected, failed to enable media [ 263.785335][ T8142] device syzkaller0 entered promiscuous mode [ 263.866733][ T8140] loop3: detected capacity change from 0 to 32768 [ 263.875489][ T8140] XFS (loop3): Mounting V5 Filesystem [ 263.898077][ T8140] XFS (loop3): Ending clean mount [ 263.925712][ T4369] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 264.105738][ T4369] usb 1-1: Using ep0 maxpacket: 16 [ 264.282007][ T4369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 264.288074][ T4369] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 264.292638][ T4369] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.293983][ T4369] usb 1-1: Product: syz [ 264.294607][ T4369] usb 1-1: Manufacturer: syz [ 264.295385][ T4369] usb 1-1: SerialNumber: syz [ 264.303655][ T4369] usb 1-1: config 0 descriptor?? [ 264.308314][ T4369] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 264.310659][ T4369] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 264.390670][ T7] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 264.392494][ T7] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 264.433090][ T8167] fido_id[8167]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 264.505658][ T8171] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 264.598179][ T4322] XFS (loop3): Unmounting Filesystem [ 264.608190][ T8180] netlink: 'syz.5.1168': attribute type 1 has an invalid length. [ 264.641316][ T8180] 8021q: adding VLAN 0 to HW filter on device bond1 [ 264.654866][ T8180] bond0: (slave dummy0): Releasing active interface [ 264.912399][ T4369] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 264.936984][ T8194] tipc: Enabling of bearer rejected, failed to enable media [ 264.938888][ T8194] device syzkaller0 entered promiscuous mode [ 265.321135][ T4369] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 265.322982][ T4369] em28xx 1-1:0.0: board has no eeprom [ 265.511746][ T4384] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 265.513466][ T4384] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 265.678570][ T4369] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 265.679831][ T4369] em28xx 1-1:0.0: dvb set to bulk mode. [ 265.681505][ T22] em28xx 1-1:0.0: Binding DVB extension [ 265.686425][ T8218] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 265.714071][ T8220] loop1: detected capacity change from 0 to 1024 [ 265.720100][ T8220] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.721308][ T8220] EXT4-fs: Ignoring removed bh option [ 265.723089][ T8220] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 265.761213][ T8222] netlink: 'syz.2.1181': attribute type 1 has an invalid length. [ 265.767434][ T8222] 8021q: adding VLAN 0 to HW filter on device bond6 [ 265.771725][ T8222] bond5: (slave dummy0): Releasing active interface [ 265.854410][ T8220] loop1: detected capacity change from 0 to 32768 [ 265.872548][ T8220] XFS (loop1): Mounting V5 Filesystem [ 265.879061][ T8229] device syzkaller0 entered promiscuous mode [ 265.904490][ T8220] XFS (loop1): Ending clean mount [ 266.574922][ T4321] XFS (loop1): Unmounting Filesystem [ 266.643401][ T8138] em28xx 1-1:0.0: reading from i2c device at 0xfe00 failed (error=-5) [ 266.663087][ T7] usb 1-1: USB disconnect, device number 5 [ 266.664536][ T7] em28xx 1-1:0.0: Disconnecting em28xx [ 266.689009][ T22] em28xx 1-1:0.0: Registering input extension [ 266.690397][ T7] em28xx 1-1:0.0: Closing input extension [ 266.708991][ T7] em28xx 1-1:0.0: Freeing device [ 266.818203][ T8264] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 266.882826][ T4384] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 266.884533][ T4384] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 266.972108][ T8274] netlink: 'syz.5.1194': attribute type 1 has an invalid length. [ 266.984843][ T8274] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.075842][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1196'. [ 267.204812][ T8289] netlink: 'syz.5.1198': attribute type 27 has an invalid length. [ 267.315120][ T8299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.321454][ T8299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.355919][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.357801][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.742805][ T8289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.768375][ T8289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.805130][ T22] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 267.807757][ T22] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 268.093972][ T8289] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.095820][ T8289] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.097317][ T8289] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.098834][ T8289] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.336954][ T8289] device vlan2 left promiscuous mode [ 268.337953][ T8289] device bridge0 left promiscuous mode [ 268.361521][ T8292] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 268.363051][ T8292] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.405864][ T8292] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 268.410610][ T8301] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 268.418437][ T8311] netlink: 'syz.1.1206': attribute type 1 has an invalid length. [ 268.424702][ T8311] 8021q: adding VLAN 0 to HW filter on device bond5 [ 268.428472][ T8312] bond4: (slave dummy0): Releasing active interface [ 268.537159][ T8324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.548155][ T8324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.260943][ T14] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 269.263479][ T14] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 269.413065][ T8348] device syzkaller0 entered promiscuous mode [ 269.608872][ T8350] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 269.669326][ T8354] netlink: 'syz.2.1220': attribute type 1 has an invalid length. [ 269.684799][ T8354] 8021q: adding VLAN 0 to HW filter on device bond7 [ 270.020878][ T4392] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 270.022685][ T4392] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 270.274610][ T8382] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 270.538922][ T14] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 270.540786][ T14] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 270.709132][ T8414] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 270.927265][ T8426] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1247'. [ 271.117123][ T4384] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 271.118933][ T4384] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 271.383515][ T8447] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 271.469536][ T8455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1258'. [ 271.653133][ T4384] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 271.655355][ T4384] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 272.289666][ T8491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 272.475214][ T4369] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 272.484265][ T4369] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 272.550592][ T8504] fido_id[8504]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 272.767504][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1283'. [ 272.894230][ T8530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.897106][ T8530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.925753][ T14] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 272.927727][ T14] hid-generic 0000:0000:0000.0021: hidraw0: HID v0.00 Device [syz1] on syz0 [ 273.598540][ T8561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'. [ 273.638991][ T4369] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 273.640663][ T4369] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 273.742914][ T8568] fido_id[8568]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 274.059100][ T8591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 274.432051][ T4384] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 274.433911][ T4384] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 274.616811][ T8612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.618359][ T8612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.792343][ T8626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1319'. [ 274.836828][ T3898] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 274.838486][ T3898] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 274.931352][ T8632] fido_id[8632]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 275.010181][ T51] block nbd0: Attempted send on invalid socket [ 275.011322][ T51] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 275.298929][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1333'. [ 275.373972][ T3898] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 275.376336][ T3898] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 275.479537][ T8671] fido_id[8671]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 275.639660][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1345'. [ 275.674072][ T3898] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 275.676787][ T3898] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 275.851421][ T8717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.851722][ T8713] bond5: (slave dummy0): Releasing active interface [ 275.853018][ T8717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.021947][ T8739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.026388][ T8739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.052405][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1360'. [ 276.100551][ T14] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 276.102336][ T14] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 276.717351][ T8775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.718874][ T8775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.720977][ T3898] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 276.722542][ T3898] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 276.729867][ T8776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1372'. [ 276.768678][ T8775] device syzkaller0 entered promiscuous mode [ 276.791769][ T8777] fido_id[8777]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 277.590777][ T4384] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 277.592606][ T4384] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 277.647697][ T8812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1386'. [ 278.079744][ T8842] netlink: 'syz.3.1395': attribute type 21 has an invalid length. [ 278.090911][ T8842] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1395'. [ 278.364747][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1398'. [ 278.917833][ T8867] netlink: 'syz.5.1406': attribute type 21 has an invalid length. [ 278.919210][ T8867] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1406'. [ 278.971894][ T8873] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1409'. [ 279.325462][ T8892] device syzkaller0 entered promiscuous mode [ 279.580549][ T8899] netlink: 'syz.1.1418': attribute type 21 has an invalid length. [ 279.582041][ T8899] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1418'. [ 279.803059][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1423'. [ 279.920982][ T8921] netlink: 6 bytes leftover after parsing attributes in process `syz.5.1428'. [ 279.989874][ T8927] netlink: 'syz.5.1431': attribute type 21 has an invalid length. [ 279.991139][ T8927] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1431'. [ 280.029216][ T8931] loop5: detected capacity change from 0 to 7 [ 280.039030][ T8931] Dev loop5: unable to read RDB block 7 [ 280.040006][ T8931] loop5: unable to read partition table [ 280.040958][ T8931] loop5: partition table beyond EOD, truncated [ 280.041918][ T8931] loop_reread_partitions: partition scan of loop5 (úù) failed (rc=-5) [ 280.055825][ T8936] device syzkaller0 entered promiscuous mode [ 280.085866][ T8931] loop5: detected capacity change from 7 to 0 [ 280.320847][ T8945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1438'. [ 280.438062][ T8951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.439537][ T8951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.900500][ T8960] netlink: 'syz.2.1444': attribute type 10 has an invalid length. [ 280.953037][ T8960] team0: Port device geneve0 added [ 280.995772][ T8965] netlink: 'syz.2.1446': attribute type 21 has an invalid length. [ 281.215829][ T8974] device syzkaller0 entered promiscuous mode [ 281.585108][ T8997] netlink: 'syz.0.1458': attribute type 21 has an invalid length. [ 281.904601][ T9015] device syzkaller0 entered promiscuous mode [ 281.959400][ T9017] random: crng reseeded on system resumption [ 282.288892][ T9025] netlink: 'syz.3.1469': attribute type 21 has an invalid length. [ 282.290564][ T9025] netlink: 'syz.3.1469': attribute type 22 has an invalid length. [ 282.510614][ T9041] device syzkaller0 entered promiscuous mode [ 282.738328][ T9052] netlink: 'syz.1.1482': attribute type 21 has an invalid length. [ 282.847477][ T9056] __nla_validate_parse: 9 callbacks suppressed [ 282.847494][ T9056] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1484'. [ 283.063854][ T9075] device syzkaller0 entered promiscuous mode [ 283.407776][ T9078] validate_nla: 1 callbacks suppressed [ 283.407794][ T9078] netlink: 'syz.5.1493': attribute type 21 has an invalid length. [ 283.410025][ T9078] netlink: 'syz.5.1493': attribute type 22 has an invalid length. [ 283.560671][ T9081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1495'. [ 283.700097][ T9086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1497'. [ 283.872586][ T9092] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.1500' sets config #-1505206194 [ 283.974381][ T9106] device syzkaller0 entered promiscuous mode [ 284.139019][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'. [ 284.230185][ T9118] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1509'. [ 284.576843][ T9139] device syzkaller0 entered promiscuous mode [ 284.586897][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1520'. [ 284.787676][ T9144] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1521'. [ 285.070292][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1531'. [ 285.405081][ T9183] device syzkaller0 entered promiscuous mode [ 285.597203][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1538'. [ 285.910439][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1543'. [ 286.000388][ T9207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.004638][ T9207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.220130][ T9220] device syzkaller0 entered promiscuous mode [ 286.983495][ T9250] device syzkaller0 entered promiscuous mode [ 287.885221][ T9273] binder: 9272:9273 tried to acquire reference to desc 0, got 1 instead [ 287.888666][ T9273] binder: 9272:9273 got reply transaction with bad transaction stack, transaction 13 has target 9272:0 [ 287.891031][ T9273] binder: 9272:9273 transaction reply to 0:0 failed 14/29201/-71, size 0-0 line 2961 [ 287.892977][ T7] binder: release 9272:9273 transaction 13 out, still active [ 287.894305][ T7] binder: undelivered TRANSACTION_COMPLETE [ 287.895197][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 287.900414][ T9276] device syzkaller0 entered promiscuous mode [ 287.903605][ T7] binder: send failed reply for transaction 13, target dead [ 287.983725][ T9278] 8021q: adding VLAN 0 to HW filter on device bond7 [ 287.987568][ T9281] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 287.989018][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 288.534559][ T9301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.538369][ T9301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.039992][ T9304] __nla_validate_parse: 6 callbacks suppressed [ 289.040003][ T9304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1583'. [ 289.074451][ T9306] device gretap0 entered promiscuous mode [ 289.077034][ T9306] device gretap0 left promiscuous mode [ 289.136331][ T9309] 8021q: adding VLAN 0 to HW filter on device bond8 [ 289.139462][ T9310] tipc: Enabled bearer , priority 0 [ 289.142565][ T9309] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 289.144180][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 289.152993][ T9310] tipc: Resetting bearer [ 289.268212][ T9307] tipc: Disabling bearer [ 289.639089][ T9340] 8021q: adding VLAN 0 to HW filter on device bond8 [ 289.643429][ T9340] bond7: (slave dummy0): Releasing backup interface [ 289.689297][ T9340] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 289.690797][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): bond8: link becomes ready [ 289.900739][ T9347] bond0: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 289.963258][ T9349] tipc: Started in network mode [ 289.967583][ T9349] tipc: Node identity 9a83f8ff735f, cluster identity 4711 [ 289.968826][ T9349] tipc: Enabled bearer , priority 0 [ 289.975213][ T9349] tipc: Resetting bearer [ 290.096557][ T9348] tipc: Disabling bearer [ 290.376729][ T9353] netlink: 'syz.5.1605': attribute type 20 has an invalid length. [ 290.556367][ T9366] 8021q: adding VLAN 0 to HW filter on device bond3 [ 290.562588][ T9366] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 290.571098][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 290.591102][ C0] vcan0: j1939_tp_rxtimer: 0x0000000057160b98: rx timeout, send abort [ 290.593508][ C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000057160b98: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 290.705117][ T9372] device syzkaller0 entered promiscuous mode [ 290.809210][ T9369] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1609'. [ 301.834936][ T9421] loop0: detected capacity change from 0 to 1024 [ 301.860861][ T9421] EXT4-fs: Ignoring removed nomblk_io_submit option [ 301.862034][ T9421] EXT4-fs: Ignoring removed bh option [ 301.864662][ T9425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.867326][ T9425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.872757][ T9421] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 301.991819][ T9439] device syzkaller0 entered promiscuous mode [ 302.013707][ T9436] 8021q: adding VLAN 0 to HW filter on device bond6 [ 302.019998][ T9436] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 302.022530][ T4797] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 302.050013][ T9421] loop0: detected capacity change from 0 to 32768 [ 302.069113][ T9421] XFS (loop0): Mounting V5 Filesystem [ 302.083814][ T9421] XFS (loop0): Ending clean mount [ 302.590330][ T9464] usb usb8: usbfs: process 9464 (syz.5.1641) did not claim interface 0 before use [ 302.701629][ T4326] XFS (loop0): Unmounting Filesystem [ 310.245831][ T2062] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 310.247506][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.248484][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 313.556409][ T9515] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1654'. [ 313.567121][ T9515] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1654'. [ 313.571086][ T9517] netlink: 'syz.1.1655': attribute type 1 has an invalid length. [ 313.592241][ T9517] 8021q: adding VLAN 0 to HW filter on device bond6 [ 313.604496][ T9517] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 313.608956][ T7073] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 313.723909][ T9533] device syzkaller0 entered promiscuous mode [ 313.725727][ T14] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 313.907574][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 313.909187][ T14] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 313.910521][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.912753][ T14] usb 1-1: config 0 descriptor?? [ 313.914974][ T14] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 314.132594][ T9556] netlink: 'syz.1.1669': attribute type 1 has an invalid length. [ 314.139248][ T14] usb 1-1: USB disconnect, device number 6 [ 314.153670][ T9556] 8021q: adding VLAN 0 to HW filter on device bond7 [ 314.167911][ T9556] bond6: (slave dummy0): Releasing backup interface [ 314.208175][ T9556] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 314.209924][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 314.453891][ T9570] device syzkaller0 entered promiscuous mode [ 314.969511][ T9593] netlink: 'syz.0.1681': attribute type 1 has an invalid length. [ 314.980657][ T9593] 8021q: adding VLAN 0 to HW filter on device bond9 [ 314.995346][ T9593] bond8: (slave dummy0): Releasing backup interface [ 315.038358][ T9593] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 315.039885][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 315.253213][ T9605] device syzkaller0 entered promiscuous mode [ 315.524648][ T9618] device syzkaller0 entered promiscuous mode [ 315.545863][ T9620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.548869][ T9620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.880937][ T9629] netlink: 'syz.2.1692': attribute type 1 has an invalid length. [ 315.897840][ T9629] 8021q: adding VLAN 0 to HW filter on device bond9 [ 315.914723][ T9629] bond8: (slave dummy0): Releasing backup interface [ 315.948255][ T9629] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 315.949693][ T9632] tipc: Started in network mode [ 315.950543][ T9632] tipc: Node identity , cluster identity 4711 [ 315.951514][ T9632] tipc: Failed to set node id, please configure manually [ 315.952591][ T9632] tipc: Enabling of bearer rejected, failed to enable media [ 315.953894][ T8069] IPv6: ADDRCONF(NETDEV_CHANGE): bond9: link becomes ready [ 316.060893][ T9637] loop1: detected capacity change from 0 to 1024 [ 316.062561][ T9637] EXT4-fs: Ignoring removed nomblk_io_submit option [ 316.082306][ T9637] EXT4-fs: Ignoring removed bh option [ 316.087892][ T9637] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 316.182826][ T9649] device syzkaller0 entered promiscuous mode [ 316.289123][ T9637] loop1: detected capacity change from 0 to 32768 [ 316.334795][ T9637] XFS (loop1): Mounting V5 Filesystem [ 316.350775][ T9637] XFS (loop1): Ending clean mount [ 316.903328][ T4321] XFS (loop1): Unmounting Filesystem [ 317.180757][ T9684] netlink: 'syz.0.1708': attribute type 1 has an invalid length. [ 317.208298][ T9684] 8021q: adding VLAN 0 to HW filter on device bond10 [ 317.226008][ T9684] bond9: (slave dummy0): Releasing backup interface [ 317.293152][ T9684] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 317.301603][ T4423] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 317.379372][ T9693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.381962][ T9693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.447913][ T9698] netlink: 'syz.0.1714': attribute type 4 has an invalid length. [ 317.464685][ T9698] netlink: 'syz.0.1714': attribute type 4 has an invalid length. [ 317.518784][ T9699] device syzkaller0 entered promiscuous mode [ 317.611795][ T9706] loop2: detected capacity change from 0 to 1024 [ 317.619478][ T9706] EXT4-fs: Ignoring removed nomblk_io_submit option [ 317.621967][ T9706] EXT4-fs: Ignoring removed bh option [ 317.629099][ T9706] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 317.806997][ T9706] loop2: detected capacity change from 0 to 32768 [ 317.835769][ T9706] XFS (loop2): Mounting V5 Filesystem [ 317.873964][ T9706] XFS (loop2): Ending clean mount [ 317.977934][ T9729] netlink: 'syz.3.1724': attribute type 1 has an invalid length. [ 317.986681][ T9729] 8021q: adding VLAN 0 to HW filter on device bond7 [ 317.997588][ T9729] bond6: (slave dummy0): Releasing backup interface [ 318.281442][ T9729] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 318.282894][ T5249] IPv6: ADDRCONF(NETDEV_CHANGE): bond7: link becomes ready [ 318.476026][ T4331] XFS (loop2): Unmounting Filesystem [ 318.914221][ T9763] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1737'. [ 318.920124][ T9763] bond10: (slave dummy0): Releasing backup interface [ 319.063717][ T9769] loop5: detected capacity change from 0 to 1024 [ 319.065243][ T9769] EXT4-fs: Ignoring removed nomblk_io_submit option [ 319.066687][ T9769] EXT4-fs: Ignoring removed bh option [ 319.074852][ T9769] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 319.267440][ T9769] loop5: detected capacity change from 0 to 32768 [ 319.273733][ T9769] XFS (loop5): Mounting V5 Filesystem [ 319.286484][ T9769] XFS (loop5): Ending clean mount [ 319.744192][ T9799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1749'. [ 319.759713][ T9799] bond7: (slave dummy0): Releasing backup interface [ 319.822868][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1751'. [ 319.927802][ T6706] XFS (loop5): Unmounting Filesystem [ 320.122492][ T9818] fuse: Unknown parameter '0xffffffffffffffff' [ 320.472613][ T9819] device syzkaller0 entered promiscuous mode [ 320.951266][ T9850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1762'. [ 320.953890][ T9850] bond9: (slave dummy0): Releasing backup interface [ 321.049607][ T9853] loop3: detected capacity change from 0 to 1024 [ 321.051526][ T9853] EXT4-fs: Ignoring removed nomblk_io_submit option [ 321.052778][ T9853] EXT4-fs: Ignoring removed bh option [ 321.054256][ T9853] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 321.174198][ T9853] loop3: detected capacity change from 0 to 32768 [ 321.182495][ T9853] XFS (loop3): Mounting V5 Filesystem [ 321.198351][ T9853] XFS (loop3): Ending clean mount [ 321.292111][ T9866] netlink: 'syz.1.1765': attribute type 22 has an invalid length. [ 321.734596][ T9877] device syzkaller0 entered promiscuous mode [ 321.912148][ T4322] XFS (loop3): Unmounting Filesystem [ 322.054808][ T9892] netlink: 'syz.2.1776': attribute type 22 has an invalid length. [ 322.613721][ T9907] device syzkaller0 entered promiscuous mode [ 322.871405][ T9912] loop0: detected capacity change from 0 to 1024 [ 322.879840][ T9912] EXT4-fs: Ignoring removed nomblk_io_submit option [ 322.884385][ T9912] EXT4-fs: Ignoring removed bh option [ 322.888911][ T9912] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 323.144954][ T9912] loop0: detected capacity change from 0 to 32768 [ 323.189882][ T9932] netlink: 'syz.2.1788': attribute type 22 has an invalid length. [ 323.204268][ T9912] XFS (loop0): Mounting V5 Filesystem [ 323.245682][ T9912] XFS (loop0): Ending clean mount [ 323.723850][ T4326] XFS (loop0): Unmounting Filesystem [ 323.979370][ T9951] device syzkaller0 entered promiscuous mode [ 324.222776][ T9955] usb usb1: check_ctrlrecip: process 9955 (syz.5.1797) requesting ep 01 but needs 81 [ 324.224368][ T9955] usb usb1: usbfs: process 9955 (syz.5.1797) did not claim interface 0 before use [ 324.302751][ T9959] bond3: (slave dummy0): Releasing backup interface [ 324.354189][ T9964] netlink: 'syz.3.1800': attribute type 22 has an invalid length. [ 324.401082][ T4336] Bluetooth: hci2: unexpected event for opcode 0x041b [ 324.406766][ T9970] loop5: detected capacity change from 0 to 1024 [ 324.413252][ T9970] EXT4-fs: Ignoring removed nomblk_io_submit option [ 324.414323][ T9970] EXT4-fs: Ignoring removed bh option [ 324.417509][ T9970] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 324.537422][ T9970] loop5: detected capacity change from 0 to 32768 [ 324.582470][ T9970] XFS (loop5): Mounting V5 Filesystem [ 324.610783][ T9970] XFS (loop5): Ending clean mount [ 324.627591][ T9986] device syzkaller0 entered promiscuous mode [ 325.131637][ T9994] device syzkaller0 entered promiscuous mode [ 325.267971][ T6706] XFS (loop5): Unmounting Filesystem [ 325.490332][T10007] netlink: 'syz.1.1813': attribute type 22 has an invalid length. [ 325.783116][T10025] loop0: detected capacity change from 0 to 1024 [ 325.785295][T10025] EXT4-fs: Ignoring removed nomblk_io_submit option [ 325.786529][T10025] EXT4-fs: Ignoring removed bh option [ 325.794430][T10025] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 325.850061][T10027] device syzkaller0 entered promiscuous mode [ 325.900779][T10029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.903766][T10029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.974194][T10025] loop0: detected capacity change from 0 to 32768 [ 326.005711][T10025] XFS (loop0): Mounting V5 Filesystem [ 326.035489][T10025] XFS (loop0): Ending clean mount [ 326.514997][T10055] netlink: 'syz.1.1826': attribute type 22 has an invalid length. [ 326.562213][T10057] bond7: (slave dummy0): Releasing backup interface [ 326.641214][ T4326] XFS (loop0): Unmounting Filesystem [ 326.939015][T10070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.946523][T10070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.178565][T10083] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1836'. [ 327.180782][T10082] device syzkaller0 entered promiscuous mode [ 327.183221][T10083] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1836'. [ 327.292784][T10090] loop2: detected capacity change from 0 to 1024 [ 327.294413][T10090] EXT4-fs: Ignoring removed nomblk_io_submit option [ 327.302624][T10090] EXT4-fs: Ignoring removed bh option [ 327.305288][T10090] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 327.462132][T10094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1851'. [ 327.469741][T10096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.471173][T10096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.497020][T10090] loop2: detected capacity change from 0 to 32768 [ 327.532939][T10090] XFS (loop2): Mounting V5 Filesystem [ 327.571405][T10090] XFS (loop2): Ending clean mount [ 328.098920][T10119] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1847'. [ 328.111597][T10119] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1847'. [ 328.152259][ T4331] XFS (loop2): Unmounting Filesystem [ 328.219987][T10127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1853'. [ 328.950134][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 328.950147][ T27] audit: type=1326 audit(328.940:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1857" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89375928 code=0x7ffc0000 [ 328.954605][ T27] audit: type=1326 audit(328.940:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1857" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89375928 code=0x7ffc0000 [ 328.963367][ T27] audit: type=1326 audit(328.950:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1857" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=97 compat=0 ip=0xffff89375928 code=0x7ffc0000 [ 329.020053][ T27] audit: type=1326 audit(329.010:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1857" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89375928 code=0x7ffc0000 [ 329.023788][ T27] audit: type=1326 audit(329.010:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1857" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89375928 code=0x7ffc0000 [ 329.061090][ T27] audit: type=1326 audit(329.050:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1857" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff89375928 code=0x7ffc0000 [ 329.064757][ T27] audit: type=1326 audit(329.050:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1857" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89375928 code=0x7ffc0000 [ 329.070347][ T27] audit: type=1326 audit(329.050:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1857" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89375928 code=0x7ffc0000 [ 329.094772][ T27] audit: type=1326 audit(329.050:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1857" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff89375928 code=0x7ffc0000 [ 329.105020][ T27] audit: type=1326 audit(329.050:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10144 comm="syz.5.1857" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89375928 code=0x7ffc0000 [ 329.497376][T10162] loop3: detected capacity change from 0 to 1024 [ 329.509323][T10162] EXT4-fs: Ignoring removed nomblk_io_submit option [ 329.514934][T10162] EXT4-fs: Ignoring removed bh option [ 329.518045][T10162] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 329.606941][T10167] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1864'. [ 329.612315][T10168] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1865'. [ 329.754237][T10162] loop3: detected capacity change from 0 to 32768 [ 329.797510][T10162] XFS (loop3): Mounting V5 Filesystem [ 329.844276][T10162] XFS (loop3): Ending clean mount [ 330.351306][ T4322] XFS (loop3): Unmounting Filesystem [ 330.389096][T10205] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1876'. [ 330.443089][T10209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1877'. [ 330.805684][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 330.990260][ T7] usb 1-1: config 64 has an invalid interface number: 146 but max is 0 [ 330.991641][ T7] usb 1-1: config 64 has no interface number 0 [ 330.992515][ T7] usb 1-1: config 64 interface 146 has no altsetting 0 [ 330.997388][ T7] usb 1-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43 [ 330.998836][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.000091][ T7] usb 1-1: Product: syz [ 331.000742][ T7] usb 1-1: Manufacturer: syz [ 331.001415][ T7] usb 1-1: SerialNumber: syz [ 331.291291][ T7] ftdi_sio 1-1:64.146: FTDI USB Serial Device converter detected [ 331.293512][ T7] ftdi_sio ttyUSB0: unknown device type: 0x5343 [ 331.308957][ T7] usb 1-1: USB disconnect, device number 7 [ 331.310808][ T7] ftdi_sio 1-1:64.146: device disconnected [ 331.614505][T10235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.620987][T10235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.644521][T10237] loop1: detected capacity change from 0 to 1024 [ 331.654894][T10237] EXT4-fs: Ignoring removed nomblk_io_submit option [ 331.656648][T10237] EXT4-fs: Ignoring removed bh option [ 331.661381][T10237] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 331.774432][T10237] loop1: detected capacity change from 0 to 32768 [ 331.804243][T10237] XFS (loop1): Mounting V5 Filesystem [ 331.822521][T10237] XFS (loop1): Ending clean mount [ 332.291964][T10261] __nla_validate_parse: 1 callbacks suppressed [ 332.291976][T10261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1890'. [ 332.299054][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1889'. [ 332.497393][ T4321] XFS (loop1): Unmounting Filesystem [ 333.099328][T10282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.106975][T10282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.111393][T10282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1896'. [ 333.409796][T10295] syz.0.1903 (10295): drop_caches: 1 [ 333.429978][T10295] syz.0.1903 (10295): drop_caches: 1 [ 333.472539][T10298] loop0: detected capacity change from 0 to 1024 [ 333.479672][T10298] EXT4-fs: Ignoring removed nomblk_io_submit option [ 333.481837][T10298] EXT4-fs: Ignoring removed bh option [ 333.490012][T10298] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 333.608357][T10298] loop0: detected capacity change from 0 to 32768 [ 333.637739][T10298] XFS (loop0): Mounting V5 Filesystem [ 333.661155][T10298] XFS (loop0): Ending clean mount [ 334.112574][T10314] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1906'. [ 334.225413][T10323] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 334.337557][ T4326] XFS (loop0): Unmounting Filesystem [ 334.369686][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1914'. [ 334.811501][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1918'. [ 335.150184][T10357] loop3: detected capacity change from 0 to 1024 [ 335.151786][T10357] EXT4-fs: Ignoring removed nomblk_io_submit option [ 335.153095][T10357] EXT4-fs: Ignoring removed bh option [ 335.154566][T10357] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 335.375106][T10357] loop3: detected capacity change from 0 to 32768 [ 335.427495][T10357] XFS (loop3): Mounting V5 Filesystem [ 335.446965][T10357] XFS (loop3): Ending clean mount [ 335.908736][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1929'. [ 336.009970][ T4322] XFS (loop3): Unmounting Filesystem [ 336.259990][T10391] loop7: detected capacity change from 0 to 16384 [ 336.422695][T10404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.424276][T10404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.588209][T10415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'. [ 336.645762][T10418] loop1: detected capacity change from 0 to 1024 [ 336.650812][T10418] EXT4-fs: Ignoring removed nomblk_io_submit option [ 336.652003][T10420] netlink: 'syz.0.1941': attribute type 2 has an invalid length. [ 336.665949][T10418] EXT4-fs: Ignoring removed bh option [ 336.667184][T10418] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 336.933368][T10418] loop1: detected capacity change from 0 to 32768 [ 336.957489][T10418] XFS (loop1): Mounting V5 Filesystem [ 336.989748][T10418] XFS (loop1): Ending clean mount [ 337.495315][ T4321] XFS (loop1): Unmounting Filesystem [ 337.805010][T10454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1952'. [ 338.389999][ T27] kauditd_printk_skb: 8 callbacks suppressed [ 338.390060][ T27] audit: type=1326 audit(338.350:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5775928 code=0x7ffc0000 [ 338.415967][ T27] audit: type=1326 audit(338.350:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5775928 code=0x7ffc0000 [ 338.420204][ T27] audit: type=1326 audit(338.350:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5775928 code=0x7ffc0000 [ 338.424676][ T27] audit: type=1326 audit(338.350:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffffb5775928 code=0x7ffc0000 [ 338.525783][ T27] audit: type=1326 audit(338.350:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5775928 code=0x7ffc0000 [ 338.530779][ T27] audit: type=1326 audit(338.350:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5775928 code=0x7ffc0000 [ 338.535204][ T27] audit: type=1326 audit(338.350:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5775928 code=0x7ffc0000 [ 338.580913][ T27] audit: type=1326 audit(338.350:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=437 compat=0 ip=0xffffb5775928 code=0x7ffc0000 [ 338.593055][ T27] audit: type=1326 audit(338.350:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5775928 code=0x7ffc0000 [ 338.622378][ T27] audit: type=1326 audit(338.350:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10473 comm="syz.2.1960" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5775928 code=0x7ffc0000 [ 338.772669][T10486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1963'. [ 339.317280][T10507] ipt_REJECT: TCP_RESET invalid for non-tcp [ 340.249178][T10517] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1975'. [ 340.250696][T10517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1975'. [ 340.280193][T10516] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1974'. [ 340.455511][T10531] netlink: 'syz.0.1981': attribute type 11 has an invalid length. [ 340.472251][T10531] netlink: 'syz.0.1981': attribute type 11 has an invalid length. [ 341.027710][T10551] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1990'. [ 341.029472][T10551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1990'. [ 341.447720][T10561] tipc: Cannot configure node identity twice [ 341.742883][T10565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.750992][T10565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.754504][T10567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.771542][T10567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.222261][ T4336] Bluetooth: hci5: command 0x0405 tx timeout [ 343.299960][T10587] netlink: 29 bytes leftover after parsing attributes in process `syz.0.2000'. [ 343.391972][T10589] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2001'. [ 343.393533][T10589] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2001'. [ 344.356372][T10617] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2012'. [ 344.358077][T10617] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2012'. [ 345.017559][T10636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.019602][T10636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.378367][T10646] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2024'. [ 345.379904][T10646] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2024'. [ 345.650139][T10666] binder: 10665:10666 ioctl 89f2 0 returned -22 [ 345.651716][T10666] binder: 10665:10666 tried to acquire reference to desc 0, got 1 instead [ 345.653652][T10666] binder: 10665:10666 ioctl 400454cd 324 returned -22 [ 345.656389][ T4377] binder: release 10665:10666 transaction 19 out, still active [ 345.657764][ T4377] binder: undelivered TRANSACTION_COMPLETE [ 345.665488][ T4377] binder: send failed reply for transaction 19, target dead [ 345.706041][ T4369] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 345.720916][T10670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.723405][T10670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.886999][ T4369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 345.888756][ T4369] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.890330][ T4369] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 345.891637][ T4369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.896291][ T4369] usb 1-1: config 0 descriptor?? [ 345.902445][ T4369] hub 1-1:0.0: USB hub found [ 346.100408][ T4369] hub 1-1:0.0: 1 port detected [ 346.263338][T10681] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2038'. [ 346.265097][T10681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2038'. [ 346.342410][T10683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.343944][T10683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.574038][T10693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.575857][T10693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.837456][T10696] can0: slcan on ttyS3. [ 347.066809][T10696] can0 (unregistered): slcan off ttyS3. [ 347.071103][T10697] can0: slcan on ttyS3. [ 347.136788][ T5085] hub 1-1:0.0: activate --> -90 [ 347.435522][ T4377] usb 1-1: USB disconnect, device number 8 [ 347.437670][ T4392] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 347.440085][ T4392] hub_port_connect: 403 callbacks suppressed [ 347.440099][ T4392] usb 1-1-port1: connect-debounce failed [ 347.535701][ T5085] IPv6: ADDRCONF(NETDEV_CHANGE): can0: link becomes ready [ 348.155625][ T4336] Bluetooth: hci5: command 0x0406 tx timeout [ 348.445707][ T4377] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 348.752661][T10760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.754364][T10760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.288650][T10764] netlink: 'syz.2.2062': attribute type 1 has an invalid length. [ 349.308954][T10764] device bond10 entered promiscuous mode [ 349.309943][T10764] 8021q: adding VLAN 0 to HW filter on device bond10 [ 349.325400][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'. [ 349.328017][T10769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.329719][T10769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.976957][T10764] bond10 (unregistering): Released all slaves [ 350.084559][T10786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.085918][T10695] can0 (unregistered): slcan off ttyS3. [ 350.088944][T10786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.224691][T10854] syz.0.2079 sent an empty control message without MSG_MORE. [ 351.699681][T10862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.701222][T10862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.901236][T10875] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2088'. [ 353.589887][T10902] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2099'. [ 353.671741][T10914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.678908][T10914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.041651][T10938] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2112'. [ 354.269991][T10948] binder: 10947:10948 tried to acquire reference to desc 0, got 1 instead [ 354.276267][T10948] binder: 10947:10948 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 354.278323][T10948] binder: 10948 RLIMIT_NICE not set [ 354.279236][T10948] binder: undelivered transaction 30, put_user failed [ 354.280347][T10948] binder: 10947:10948 ioctl c0306201 20000300 returned -14 [ 354.288674][ T4377] binder: undelivered TRANSACTION_COMPLETE [ 354.345027][ T4377] kernel write not supported for file /1126/net/snmp (pid: 4377 comm: kworker/0:3) [ 355.108711][T10972] Illegal XDP return value 4294967274 on prog (id 4) dev syz_tun, expect packet loss! [ 355.222175][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2129'. [ 355.309202][ T4377] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 355.531228][ T4377] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 355.533229][ T4377] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.534838][ T4377] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 355.537908][ T4377] usb 1-1: config 0 interface 0 has no altsetting 0 [ 355.540878][ T4377] usb 1-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 355.546289][ T4377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.548445][ T4377] usb 1-1: config 0 descriptor?? [ 355.985362][T11003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.991282][T11003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.174659][ T4377] macally 0003:060B:0001.002A: unknown main item tag 0x5 [ 356.177136][ T4377] macally 0003:060B:0001.002A: item 0 4 0 11 parsing failed [ 356.178650][ T4377] macally: probe of 0003:060B:0001.002A failed with error -22 [ 356.319083][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2145'. [ 356.631181][ T4377] usb 1-1: USB disconnect, device number 10 [ 356.679144][T11027] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2149'. [ 357.755177][T11071] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2166'. [ 357.769180][T11071] netlink: 'syz.2.2166': attribute type 7 has an invalid length. [ 357.770497][T11071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2166'. [ 358.936381][T11108] netlink: 'syz.1.2181': attribute type 11 has an invalid length. [ 359.349660][T11120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2187'. [ 359.394608][T11123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.405876][T11123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.057860][T11141] netlink: 'syz.0.2195': attribute type 11 has an invalid length. [ 360.552204][T11152] binder: 11142:11152 ioctl 4018620d 0 returned -22 [ 360.612463][T11161] binder: 11160:11161 got transaction to invalid handle, 1 [ 360.613950][T11161] binder: 11161:11160 cannot find target node [ 360.615609][T11161] binder: 11160:11161 transaction call to 0:0 failed 32/29201/-22, size 0-0 line 3045 [ 360.618982][T10881] binder: undelivered TRANSACTION_ERROR: 29201 [ 360.651639][T11163] mkiss: ax0: crc mode is auto. [ 360.749096][T11170] netlink: 'syz.1.2206': attribute type 11 has an invalid length. [ 360.862718][T11172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.870314][T11172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.978496][T11178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.980031][T11178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.235872][T11191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.237544][T11191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.283936][T10881] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 361.411587][T11193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.413122][T11193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.463831][T10881] usb 1-1: Using ep0 maxpacket: 16 [ 361.466069][T10881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 361.467737][T10881] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 361.469267][T10881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34039, setting to 1024 [ 361.471328][T10881] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 361.477372][T10881] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 361.478740][T10881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.479945][T10881] usb 1-1: Product: syz [ 361.480544][T10881] usb 1-1: Manufacturer: syz [ 361.481207][T10881] usb 1-1: SerialNumber: syz [ 361.485493][T10881] usb 1-1: config 0 descriptor?? [ 361.487200][T11182] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 361.496141][T10881] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 361.497222][T10881] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 361.498192][T10881] mcba_usb 1-1:0.0 can0: failed tx_urb -90 [ 361.499129][T10881] mcba_usb 1-1:0.0 can0: Failed to send cmd (169) [ 361.500020][T10881] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 361.559134][T11198] netlink: 'syz.1.2218': attribute type 11 has an invalid length. [ 361.583068][T11198] netlink: 'syz.1.2218': attribute type 11 has an invalid length. [ 361.694603][T10881] usb 1-1: USB disconnect, device number 11 [ 361.696078][T10881] mcba_usb 1-1:0.0 can0: device disconnected [ 361.990285][T11223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.997450][T11223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.729825][T11250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.739554][T11250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.742443][T11247] tipc: Started in network mode [ 362.750003][T11247] tipc: Node identity 7a9b44bf45ef, cluster identity 4711 [ 362.757293][T11247] tipc: Enabled bearer , priority 0 [ 362.767286][T11244] tipc: Resetting bearer [ 362.875379][T11244] tipc: Disabling bearer [ 363.250243][T11261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.254546][T11261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.564994][T11269] capability: warning: `syz.2.2236' uses 32-bit capabilities (legacy support in use) [ 363.579433][T11269] tmpfs: Unknown parameter 'usrquota' [ 363.662007][T11273] netlink: 'syz.1.2238': attribute type 11 has an invalid length. [ 363.851887][T11282] device syzkaller0 entered promiscuous mode [ 363.877521][T11287] tipc: Enabled bearer , priority 0 [ 363.879081][T11287] device syzkaller0 entered promiscuous mode [ 363.894761][T11287] tipc: Resetting bearer [ 371.668984][ T2062] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 371.670628][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.671636][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 374.861006][T11286] tipc: Resetting bearer [ 374.905932][T11314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.911359][T11314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.914502][T11286] tipc: Disabling bearer [ 374.943160][ T4392] tipc: Node number set to 1064584383 [ 374.948468][T11317] netlink: 'syz.5.2251': attribute type 11 has an invalid length. [ 376.276755][T11349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.282627][T11349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.331770][T11355] device syzkaller0 entered promiscuous mode [ 376.340242][T11357] netlink: 'syz.0.2263': attribute type 11 has an invalid length. [ 387.378635][T11361] tipc: Enabling of bearer rejected, failed to enable media [ 387.494868][T11402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.496339][T11402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.545786][T11408] xt_connbytes: Forcing CT accounting to be enabled [ 387.561622][T11405] netlink: 'syz.3.2274': attribute type 11 has an invalid length. [ 387.589662][T11405] netlink: 'syz.3.2274': attribute type 11 has an invalid length. [ 387.686723][T11411] tipc: Cannot configure node identity twice [ 387.797295][T11417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.811987][T11417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.819330][T11431] device syzkaller0 entered promiscuous mode [ 389.305790][T11434] tipc: Enabled bearer , priority 0 [ 389.307563][T11434] device syzkaller0 entered promiscuous mode [ 389.330796][T11434] tipc: Resetting bearer [ 389.334878][T11433] tipc: Resetting bearer [ 389.380647][T11433] tipc: Disabling bearer [ 389.409586][T11444] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2286'. [ 389.485977][T11448] netlink: 'syz.1.2288': attribute type 11 has an invalid length. [ 389.551860][T11448] netlink: 'syz.1.2288': attribute type 11 has an invalid length. [ 389.763443][ T27] audit: type=1326 audit(645.767:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11449 comm="syz.3.2289" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b75928 code=0x0 [ 390.893491][T11470] device syzkaller0 entered promiscuous mode [ 391.090241][T11485] tipc: Enabled bearer , priority 0 [ 391.094822][T11479] device syzkaller0 entered promiscuous mode [ 391.149305][T11490] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2300'. [ 391.165956][T11490] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2300'. [ 391.168700][T11482] tipc: Resetting bearer [ 391.174376][T11476] tipc: Resetting bearer [ 391.234304][T11496] netlink: 'syz.2.2303': attribute type 11 has an invalid length. [ 391.243099][T11476] tipc: Disabling bearer [ 391.256974][T11492] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2301'. [ 391.268219][T11496] netlink: 'syz.2.2303': attribute type 11 has an invalid length. [ 391.485067][ T27] audit: type=1326 audit(647.488:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11499 comm="syz.1.2305" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffaad75928 code=0x0 [ 392.498265][ C0] sched: RT throttling activated [ 403.413200][T11522] device syzkaller0 entered promiscuous mode [ 403.462116][T11536] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2314'. [ 403.527803][T11536] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2314'. [ 403.552439][T11541] tipc: Enabled bearer , priority 0 [ 403.556222][T11543] netlink: 'syz.0.2317': attribute type 11 has an invalid length. [ 403.556299][T11541] device syzkaller0 entered promiscuous mode [ 403.686990][T11550] tipc: Resetting bearer [ 403.694686][T11540] tipc: Resetting bearer [ 403.781294][ T27] audit: type=1326 audit(659.784:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11544 comm="syz.3.2319" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4b75928 code=0x0 [ 404.882615][T11540] tipc: Disabling bearer [ 404.885518][ T7] tipc: Node number set to 3923572991 [ 404.930517][T11553] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2320'. [ 404.949258][T11567] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2325'. [ 404.951479][T11567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2325'. [ 404.982991][T11563] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 404.984088][T11563] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 404.985104][T11563] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 404.986010][T11563] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 404.986900][T11563] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 404.987755][T11563] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 405.000758][T11563] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 405.012121][T11571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.014183][T11571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.051433][T11575] netlink: 'syz.0.2328': attribute type 1 has an invalid length. [ 405.059061][T11575] 8021q: adding VLAN 0 to HW filter on device bond11 [ 405.063952][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'. [ 405.066614][T11575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'. [ 405.371989][ T4369] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 405.571858][ T4369] usb 1-1: Using ep0 maxpacket: 32 [ 405.576568][ T4369] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 405.578994][ T4369] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 405.580717][ T4369] usb 1-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0 [ 405.582605][ T4369] usb 1-1: Manufacturer: syz [ 405.590021][ T4369] usb 1-1: config 0 descriptor?? [ 405.954701][ T4377] usb 1-1: USB disconnect, device number 12 [ 406.060295][T11595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.064837][T11595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.268563][T11595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.270051][T11595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.421618][T11597] device syzkaller0 entered promiscuous mode [ 406.488400][T11599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2336'. [ 406.490707][T11599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2336'. [ 406.546562][T11601] tipc: Enabled bearer , priority 0 [ 406.548387][T11601] device syzkaller0 entered promiscuous mode [ 406.608271][T11601] tipc: Resetting bearer [ 406.619506][T11600] tipc: Resetting bearer [ 406.663039][T11600] tipc: Disabling bearer [ 406.747320][T11608] netlink: 'syz.2.2340': attribute type 1 has an invalid length. [ 406.752943][T11608] 8021q: adding VLAN 0 to HW filter on device bond10 [ 406.758106][T11612] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2341'. [ 406.999304][T11631] device syzkaller0 entered promiscuous mode [ 407.011223][ T4330] Bluetooth: hci5: command 0x0c1a tx timeout [ 407.012308][ T4330] Bluetooth: hci3: command 0x0c1a tx timeout [ 407.013239][ T4330] Bluetooth: hci2: command 0x0c1a tx timeout [ 407.014267][ T4330] Bluetooth: hci1: command 0x0c1a tx timeout [ 407.015266][ T4330] Bluetooth: hci0: command 0x0c1a tx timeout [ 407.151022][ T3898] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 407.330936][ T3898] usb 1-1: Using ep0 maxpacket: 32 [ 407.333577][ T3898] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 407.335908][ T3898] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 407.337413][ T3898] usb 1-1: New USB device strings: Mfr=115, Product=0, SerialNumber=0 [ 407.338679][ T3898] usb 1-1: Manufacturer: syz [ 407.343153][ T3898] usb 1-1: config 0 descriptor?? [ 407.467976][T11645] tipc: Started in network mode [ 407.468936][T11645] tipc: Node identity fe1d9a3ec9fc, cluster identity 4711 [ 407.470149][T11645] tipc: Enabled bearer , priority 0 [ 407.475213][T11645] device syzkaller0 entered promiscuous mode [ 407.544980][T11646] tipc: Resetting bearer [ 407.551451][T11644] tipc: Resetting bearer [ 407.621355][T11644] tipc: Disabling bearer [ 407.776571][T11656] device syzkaller0 entered promiscuous mode [ 407.811745][T10881] usb 1-1: USB disconnect, device number 13 [ 407.949011][T11661] netlink: 'syz.3.2359': attribute type 1 has an invalid length. [ 407.967939][T11661] 8021q: adding VLAN 0 to HW filter on device bond8 [ 408.066803][T11668] device syzkaller0 entered promiscuous mode [ 408.296714][T11680] tipc: Started in network mode [ 408.297800][T11680] tipc: Node identity 868500112eac, cluster identity 4711 [ 408.299329][T11680] tipc: Enabled bearer , priority 0 [ 408.324199][T11680] device syzkaller0 entered promiscuous mode [ 408.385109][T11680] tipc: Resetting bearer [ 408.390286][T11679] tipc: Resetting bearer [ 408.442358][T11679] tipc: Disabling bearer [ 408.445136][T11685] device syzkaller0 entered promiscuous mode [ 408.542651][T11691] netlink: 'syz.3.2371': attribute type 1 has an invalid length. [ 408.554526][T11691] 8021q: adding VLAN 0 to HW filter on device bond9 [ 408.583857][T11694] __nla_validate_parse: 6 callbacks suppressed [ 408.583868][T11694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2372'. [ 408.639871][T11696] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2374'. [ 408.644977][T11698] device syzkaller0 entered promiscuous mode [ 408.656879][T11696] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2374'. [ 408.765560][T11707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.768665][T11707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.922525][T11716] tipc: Enabled bearer , priority 0 [ 408.924630][T11716] device syzkaller0 entered promiscuous mode [ 408.969384][T11716] tipc: Resetting bearer [ 408.979966][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2383'. [ 408.993818][T11715] tipc: Resetting bearer [ 409.041244][T11715] tipc: Disabling bearer [ 409.047487][T11723] device syzkaller0 entered promiscuous mode [ 409.049635][T11725] netlink: 'syz.5.2385': attribute type 1 has an invalid length. [ 409.057513][T11725] 8021q: adding VLAN 0 to HW filter on device bond4 [ 409.090057][ T4336] Bluetooth: hci5: command 0x0406 tx timeout [ 409.129072][T11731] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2386'. [ 409.162802][T11731] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2386'. [ 409.314578][T11739] device syzkaller0 entered promiscuous mode [ 409.588523][T11748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2394'. [ 409.662401][T11755] netlink: 'syz.2.2398': attribute type 1 has an invalid length. [ 409.677985][T11755] 8021q: adding VLAN 0 to HW filter on device bond11 [ 409.685215][T11758] tipc: Enabled bearer , priority 0 [ 409.696541][T11758] device syzkaller0 entered promiscuous mode [ 409.735278][T11758] tipc: Resetting bearer [ 409.747345][T11756] tipc: Resetting bearer [ 409.850248][T11756] tipc: Disabling bearer [ 409.860082][T11760] device syzkaller0 entered promiscuous mode [ 409.873484][T11763] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2400'. [ 409.875372][T11763] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2400'. [ 409.932856][T11767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.934388][T11767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.987512][T11767] device syzkaller0 entered promiscuous mode [ 410.109305][T11769] device syzkaller0 entered promiscuous mode [ 410.685532][T11790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2407'. [ 420.899862][T11797] netlink: 'syz.1.2409': attribute type 1 has an invalid length. [ 420.904184][T11807] __nla_validate_parse: 1 callbacks suppressed [ 420.904201][T11807] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2411'. [ 420.934549][T11811] tipc: Enabling of bearer rejected, failed to enable media [ 420.987677][T11828] device syzkaller0 entered promiscuous mode [ 421.028683][T11835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.044358][T11835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.112805][T11837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2418'. [ 421.121963][T11835] device syzkaller0 entered promiscuous mode [ 421.850951][T11855] netlink: 'syz.2.2423': attribute type 1 has an invalid length. [ 421.859159][T11857] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2424'. [ 421.862995][T11855] 8021q: adding VLAN 0 to HW filter on device bond12 [ 421.866299][T11857] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2424'. [ 421.868415][T11855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2423'. [ 421.870521][T11855] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2423'. [ 421.894078][T11860] device syzkaller0 entered promiscuous mode [ 422.011551][T11864] tipc: Enabled bearer , priority 0 [ 422.013107][T11864] device syzkaller0 entered promiscuous mode [ 422.070674][T11864] tipc: Resetting bearer [ 422.086265][T11863] tipc: Resetting bearer [ 422.127552][T11863] tipc: Disabling bearer [ 422.159732][T11873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2431'. [ 422.179814][T11879] device syzkaller0 entered promiscuous mode [ 422.206159][T11885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.206469][T11881] netlink: 'syz.3.2436': attribute type 1 has an invalid length. [ 422.208374][T11884] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2435'. [ 422.210448][T11885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.219842][T11881] 8021q: adding VLAN 0 to HW filter on device bond10 [ 422.221819][T11884] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2435'. [ 422.276600][T11881] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2436'. [ 422.337974][T11885] device syzkaller0 entered promiscuous mode [ 433.078386][ T2062] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 433.079977][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.080939][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 433.191431][T11911] device syzkaller0 entered promiscuous mode [ 433.200951][T11940] tipc: Enabling of bearer rejected, failed to enable media [ 433.276788][T11956] __nla_validate_parse: 2 callbacks suppressed [ 433.276798][T11956] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2447'. [ 433.971021][T11988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2455'. [ 433.993407][T11991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.997728][T11991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.051821][ T4336] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 438.053855][ T4336] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 438.055425][ T4336] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 438.057774][ T4336] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 438.059648][ T4336] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 438.060891][ T4336] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 440.114645][ T4336] Bluetooth: hci4: command 0x0409 tx timeout [ 442.203732][ T4336] Bluetooth: hci4: command 0x041b tx timeout [ 443.985078][T11956] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2447'. [ 443.988569][T11958] netlink: 'syz.0.2448': attribute type 1 has an invalid length. [ 443.995341][T11966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2448'. [ 443.996882][T11968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2448'. [ 444.008227][T11996] device syzkaller0 entered promiscuous mode [ 444.282665][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 444.740531][T12039] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2466'. [ 446.351568][ T4336] Bluetooth: hci4: command 0x0419 tx timeout [ 449.082173][ T4330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 449.084433][ T4330] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 449.085945][ T4330] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 449.088283][ T4330] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 449.089725][ T4330] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 449.093909][ T4330] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 451.149059][ T4336] Bluetooth: hci2: command 0x0409 tx timeout [ 453.238028][ T4336] Bluetooth: hci2: command 0x041b tx timeout [ 455.199138][T12018] tipc: Enabled bearer , priority 0 [ 455.200522][T12024] device syzkaller0 entered promiscuous mode [ 455.249532][T12037] tipc: Resetting bearer [ 455.253900][T12012] tipc: Resetting bearer [ 455.307173][ T4336] Bluetooth: hci2: command 0x040f tx timeout [ 455.307450][T12012] tipc: Disabling bearer [ 455.310067][T12045] netlink: 'syz.5.2468': attribute type 1 has an invalid length. [ 455.483907][T12073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2476'. [ 455.595511][T12080] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2478'. [ 455.650356][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.659850][T12080] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2478'. [ 455.685539][T12083] netlink: 'syz.5.2479': attribute type 1 has an invalid length. [ 455.694283][T12083] 8021q: adding VLAN 0 to HW filter on device bond5 [ 455.757929][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.779848][T12088] tipc: Enabled bearer , priority 0 [ 455.781477][T12088] device syzkaller0 entered promiscuous mode [ 455.878079][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.882849][T12003] chnl_net:caif_netlink_parms(): no params data found [ 455.889434][T12088] tipc: Resetting bearer [ 455.894293][T12087] tipc: Resetting bearer [ 455.937439][T12087] tipc: Disabling bearer [ 456.018452][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.035014][T12048] chnl_net:caif_netlink_parms(): no params data found [ 456.137343][T12003] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.143072][T12003] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.147923][T12003] device bridge_slave_0 entered promiscuous mode [ 456.153532][T12003] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.155924][T12003] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.161058][T12003] device bridge_slave_1 entered promiscuous mode [ 456.162673][T12048] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.163993][T12048] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.168392][T12048] device bridge_slave_0 entered promiscuous mode [ 456.208721][T12048] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.211384][T12048] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.214195][T12048] device bridge_slave_1 entered promiscuous mode [ 456.244640][T12003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.253585][T12003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.287664][T12048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.301552][T12003] team0: Port device team_slave_0 added [ 456.304588][T12048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.313647][ T56] tipc: Left network mode [ 456.315353][T12003] team0: Port device team_slave_1 added [ 456.336117][T12048] team0: Port device team_slave_0 added [ 456.341595][T12048] team0: Port device team_slave_1 added [ 456.345101][T12003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.346323][T12003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.364202][T12003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.399988][T12003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.401392][T12003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.405756][T12003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.412444][T12048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.413739][T12048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.420042][T12048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.655509][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2487'. [ 456.663889][T12048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.665587][T12048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.674812][T12048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.718020][T12003] device hsr_slave_0 entered promiscuous mode [ 456.746800][T12003] device hsr_slave_1 entered promiscuous mode [ 456.786198][T12003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.787438][T12003] Cannot create hsr debugfs directory [ 456.887380][T12048] device hsr_slave_0 entered promiscuous mode [ 456.940188][T12048] device hsr_slave_1 entered promiscuous mode [ 456.976566][T12048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.977826][T12048] Cannot create hsr debugfs directory [ 457.042769][T12139] netlink: 'syz.0.2489': attribute type 1 has an invalid length. [ 457.054219][T12139] 8021q: adding VLAN 0 to HW filter on device bond12 [ 457.212756][T12167] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2494'. [ 457.270034][T12167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2494'. [ 457.280780][T12157] tipc: Enabled bearer , priority 0 [ 457.282027][T12162] device syzkaller0 entered promiscuous mode [ 457.330071][T12155] tipc: Resetting bearer [ 457.395958][ T4330] Bluetooth: hci2: command 0x0419 tx timeout [ 457.446863][T12155] tipc: Disabling bearer [ 457.531399][T12174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2496'. [ 457.587898][T12048] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 457.617101][T12048] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 457.698760][T12048] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 457.783265][T12048] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 457.863943][T12003] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 457.907279][T12003] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 458.242021][T12003] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 458.277388][T12003] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 458.336871][T12205] netlink: 'syz.5.2500': attribute type 1 has an invalid length. [ 458.343259][T12205] 8021q: adding VLAN 0 to HW filter on device bond6 [ 458.434085][T12225] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2503'. [ 458.540664][T12241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2505'. [ 458.740959][T12225] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2503'. [ 458.759211][T12249] device syzkaller0 entered promiscuous mode [ 458.770504][T12048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.900261][ T56] device hsr_slave_0 left promiscuous mode [ 458.925840][ T56] device hsr_slave_1 left promiscuous mode [ 459.006062][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.007379][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.009198][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.010421][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.011854][ T56] device bridge_slave_1 left promiscuous mode [ 459.013910][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.036019][ T56] device bridge_slave_0 left promiscuous mode [ 459.037280][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.176198][ T56] device veth1_macvtap left promiscuous mode [ 459.177384][ T56] device veth0_macvtap left promiscuous mode [ 459.178332][ T56] device veth1_vlan left promiscuous mode [ 459.179318][ T56] device veth0_vlan left promiscuous mode [ 459.886323][ T56] bond10 (unregistering): Released all slaves [ 460.565330][ T56] bond9 (unregistering): Released all slaves [ 461.255024][ T56] bond8 (unregistering): Released all slaves [ 461.874885][ T56] bond7 (unregistering): Released all slaves [ 462.526613][ T56] bond6 (unregistering): Released all slaves [ 463.274725][ T56] bond5 (unregistering): Released all slaves [ 463.963813][ T56] bond4 (unregistering): Released all slaves [ 464.613724][ T56] bond3 (unregistering): Released all slaves [ 465.283266][ T56] bond2 (unregistering): Released all slaves [ 465.943045][ T56] bond1 (unregistering): Released all slaves [ 468.062815][ T56] team0 (unregistering): Port device team_slave_1 removed [ 468.222173][ T56] team0 (unregistering): Port device team_slave_0 removed [ 468.381013][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.601820][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.120919][ T56] bond0 (unregistering): Released all slaves [ 470.466489][T12048] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.470166][T12269] netlink: 'syz.0.2510': attribute type 1 has an invalid length. [ 470.594557][ T7294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 470.596195][ T7294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 470.597642][ T7294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 470.599150][ T7294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 470.604562][ T7294] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.605693][ T7294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.607175][ T7294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 470.610934][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 470.612695][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 470.614137][T11464] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.615261][T11464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.637130][T12048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 470.638959][T12048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 470.646197][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 470.647985][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 470.654808][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 470.659002][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 470.665082][T12307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2514'. [ 470.672518][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 470.674281][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 470.675841][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 470.677473][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 470.679094][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 470.683673][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 470.693177][T12003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.699582][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 470.701462][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 470.711036][T12003] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.745483][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 470.747120][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 470.748419][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 470.755010][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 470.766305][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.767535][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.773020][T12313] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2516'. [ 470.774821][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 470.776527][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 470.777920][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.779045][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.781604][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 470.787392][T12313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2516'. [ 470.797131][T12003] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 470.808583][T12003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 470.826579][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 470.828643][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 470.831534][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 470.836857][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 470.843050][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 470.845943][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 470.854308][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 470.858255][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 470.861814][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 470.863554][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 470.867816][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 470.879777][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 470.888259][ T7292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 470.889795][ T7292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 470.905856][T12048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.977425][ T7292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 470.978773][ T7292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 470.991111][T12003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.180331][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 471.182133][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 471.183526][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 471.185161][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 471.186769][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 471.188243][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 471.190694][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 471.192125][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 471.195027][T12003] device veth0_vlan entered promiscuous mode [ 471.202266][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 471.203819][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 471.205396][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 471.206857][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 471.214637][T12003] device veth1_vlan entered promiscuous mode [ 471.220804][T12048] device veth0_vlan entered promiscuous mode [ 471.231293][T12048] device veth1_vlan entered promiscuous mode [ 471.244484][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 471.246113][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 471.247511][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 471.253266][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 471.254801][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 471.256748][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 471.269655][T12003] device veth0_macvtap entered promiscuous mode [ 471.272304][T12003] device veth1_macvtap entered promiscuous mode [ 471.283480][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 471.285074][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 471.286576][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 471.288050][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 471.296446][T12048] device veth0_macvtap entered promiscuous mode [ 471.310858][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.312874][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.314512][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.316222][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.317876][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.323642][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.326352][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.328334][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.332228][T12003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.334098][T12048] device veth1_macvtap entered promiscuous mode [ 471.336646][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 471.338203][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 471.340446][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 471.342360][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 471.352356][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.354268][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.360699][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.362334][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.363931][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.365436][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.366945][T12003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.368507][T12003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.373080][T12003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.376454][T12003] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.377889][T12003] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.384363][T12003] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.385826][T12003] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.388164][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 471.389834][ T1654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 471.394752][T12048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.396490][T12048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.398001][T12048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.400438][T12048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.402018][T12048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.403628][T12048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.405370][T12048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.407047][T12048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.408568][T12048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.410394][T12048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.413754][T12048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.415943][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 471.417552][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 471.469874][T12048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.471656][T12048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.473298][T12048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.474980][T12048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.476496][T12048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.485349][T12048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.487220][T12048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.491007][T12048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.494848][T12048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.496914][T12048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.505315][T12048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.508590][ T7292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 471.510474][ T7292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 471.526924][T12366] netlink: 'syz.0.2521': attribute type 1 has an invalid length. [ 471.535517][T12366] 8021q: adding VLAN 0 to HW filter on device bond13 [ 471.549573][ T7292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.550984][ T7292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.554133][ T7292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.555519][ T7292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.565040][ T7292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 471.566580][ T7292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 471.569917][T12048] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.571418][T12048] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.572775][T12048] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.574280][T12048] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.592752][T12368] tipc: Enabled bearer , priority 0 [ 471.607808][T12368] device syzkaller0 entered promiscuous mode [ 471.731457][T12367] tipc: Resetting bearer [ 471.753499][T12385] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2524'. [ 471.799059][T12392] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2527'. [ 471.899710][T12367] tipc: Disabling bearer [ 471.921001][T11464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.922383][T11464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.928445][ T1654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.934864][ T1654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.938085][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 471.956951][T11464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 472.071163][T12411] device syzkaller0 entered promiscuous mode [ 472.080372][T12409] netlink: 'syz.0.2531': attribute type 1 has an invalid length. [ 472.098213][T12409] 8021q: adding VLAN 0 to HW filter on device bond14 [ 472.163501][T12409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2531'. [ 472.166554][T12409] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2531'. [ 472.268754][T12430] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2532'. [ 472.405695][T12439] netlink: 'syz.0.2534': attribute type 11 has an invalid length. [ 472.493452][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2535'. [ 472.692011][T12450] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2538'. [ 473.063913][ T27] audit: type=1326 audit(729.108:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12456 comm="syz.5.2541" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff89375928 code=0x0 [ 473.797092][T12468] netlink: 'syz.6.2542': attribute type 1 has an invalid length. [ 473.856363][T12470] netlink: 'syz.7.2545': attribute type 11 has an invalid length. [ 474.280867][T12502] netlink: 'syz.7.2557': attribute type 1 has an invalid length. [ 474.282714][T12500] device syzkaller0 entered promiscuous mode [ 474.393838][T12509] netlink: 'syz.1.2560': attribute type 11 has an invalid length. [ 474.406938][T12509] netlink: 'syz.1.2560': attribute type 11 has an invalid length. [ 474.654455][ T27] audit: type=1326 audit(730.699:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12516 comm="syz.7.2564" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff88175928 code=0x0 [ 475.644568][T12542] netlink: 'syz.7.2573': attribute type 11 has an invalid length. [ 475.696381][T12544] netlink: 'syz.7.2573': attribute type 11 has an invalid length. [ 475.734712][T12543] device syzkaller0 entered promiscuous mode [ 475.919338][T12558] __nla_validate_parse: 14 callbacks suppressed [ 475.919350][T12558] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2580'. [ 475.957846][T12562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2582'. [ 476.162612][ T27] audit: type=1326 audit(732.200:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12565 comm="syz.1.2583" exe="/root/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffffaad75928 code=0x0 [ 476.850054][T12578] netlink: 'syz.5.2586': attribute type 11 has an invalid length. [ 476.862625][T12578] netlink: 'syz.5.2586': attribute type 11 has an invalid length. [ 477.135781][T12600] device syzkaller0 entered promiscuous mode [ 477.168676][T12602] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2593'. [ 477.289733][T12606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2604'. [ 477.641618][T12619] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2596'. [ 477.895617][ T4377] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 477.955745][T12631] netlink: 'syz.5.2599': attribute type 11 has an invalid length. [ 478.097953][ T4377] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.099736][ T4377] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 478.106899][ T4377] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 478.108437][ T4377] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 478.109698][ T4377] usb 1-1: SerialNumber: syz [ 478.122117][T12642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.124064][T12642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.224267][T12651] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2606'. [ 478.240260][T12654] device syzkaller0 entered promiscuous mode [ 478.273369][T12656] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2608'. [ 478.326789][ T4377] usb 1-1: 0:2 : does not exist [ 478.338421][ T4377] usb 1-1: USB disconnect, device number 14 [ 478.432208][T12663] ------------[ cut here ]------------ [ 478.433313][T12663] WARNING: CPU: 0 PID: 12663 at security/landlock/fs.c:752 collect_domain_accesses+0x6d8/0x738 [ 478.434944][T12663] Modules linked in: [ 478.435547][T12663] CPU: 0 PID: 12663 Comm: syz.7.2611 Not tainted syzkaller #0 [ 478.436746][T12663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 478.438387][T12663] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 478.439551][T12663] pc : collect_domain_accesses+0x6d8/0x738 [ 478.440494][T12663] lr : collect_domain_accesses+0x6d4/0x738 [ 478.441415][T12663] sp : ffff800022f478c0 [ 478.442095][T12663] x29: ffff800022f47900 x28: 0000000000000001 x27: ffff800022f479fa [ 478.443299][T12663] x26: ffff0000d37aecac x25: 0000000000000000 x24: ffff0000e0448178 [ 478.444566][T12663] x23: 0000000000002004 x22: ffffffffffffffff x21: ffffffffffffffff [ 478.445814][T12663] x20: ffff0000e335cd38 x19: 0000000000000000 x18: 0000000000000000 [ 478.447035][T12663] x17: ffff800018338000 x16: ffff8000082d7e60 x15: 0000000000000000 [ 478.448293][T12663] x14: 0000000000000001 x13: 1ffff00002a40071 x12: 0000000000080000 [ 478.449454][T12663] x11: 000000000000195c x10: ffff800025809000 x9 : ffff80000a5844f0 [ 478.450719][T12663] x8 : 000000000000195d x7 : ffff80000a57fbe8 x6 : 0000000000000000 [ 478.451918][T12663] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000002 [ 478.453148][T12663] x2 : 0000000000000008 x1 : ffff800011b7ebc0 x0 : ffff0000e04481c8 [ 478.454316][T12663] Call trace: [ 478.454834][T12663] collect_domain_accesses+0x6d8/0x738 [ 478.455749][T12663] current_check_refer_path+0x408/0x804 [ 478.456642][T12663] hook_path_rename+0x4c/0x60 [ 478.457313][T12663] security_path_rename+0x154/0x1f0 [ 478.458101][T12663] do_renameat2+0x5b8/0xa74 [ 478.458841][T12663] __arm64_sys_renameat2+0xe0/0xfc [ 478.459634][T12663] invoke_syscall+0x98/0x2b4 [ 478.460353][T12663] el0_svc_common+0x138/0x258 [ 478.461047][T12663] do_el0_svc+0x58/0x130 [ 478.461675][T12663] el0_svc+0x58/0x128 [ 478.462266][T12663] el0t_64_sync_handler+0x84/0xf0 [ 478.462996][T12663] el0t_64_sync+0x18c/0x190 [ 478.463676][T12663] irq event stamp: 990 [ 478.464285][T12663] hardirqs last enabled at (989): [] mod_objcg_state+0x338/0x4fc [ 478.465729][T12663] hardirqs last disabled at (990): [] el1_dbg+0x24/0x80 [ 478.467096][T12663] softirqs last enabled at (910): [] local_bh_enable+0x10/0x34 [ 478.468456][T12663] softirqs last disabled at (908): [] local_bh_disable+0x10/0x34 [ 478.469852][T12663] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 478.581659][T12620] udevd[12620]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 479.297133][T12528] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.415745][T12528] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.525830][T12528] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.608244][T12528] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.848441][T12528] tipc: Left network mode [ 481.874634][T12528] device hsr_slave_0 left promiscuous mode [ 481.927344][T12528] device hsr_slave_1 left promiscuous mode [ 482.023630][T12528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.024924][T12528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.027072][T12528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.028223][T12528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.029545][T12528] device bridge_slave_1 left promiscuous mode [ 482.030598][T12528] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.064053][T12528] device bridge_slave_0 left promiscuous mode [ 482.065072][T12528] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.203560][T12528] device veth1_macvtap left promiscuous mode [ 482.204661][T12528] device veth0_macvtap left promiscuous mode [ 482.955072][T12528] bond14 (unregistering): Released all slaves [ 483.663809][T12528] bond13 (unregistering): Released all slaves [ 484.316022][T12528] bond12 (unregistering): Released all slaves [ 485.043828][T12528] bond11 (unregistering): Released all slaves [ 485.704367][T12528] bond10 (unregistering): Released all slaves [ 486.362401][T12528] bond9 (unregistering): Released all slaves [ 487.072363][T12528] bond8 (unregistering): Released all slaves [ 487.732547][T12528] bond7 (unregistering): Released all slaves [ 488.391398][T12528] bond6 (unregistering): Released all slaves