last executing test programs: 2m43.704664579s ago: executing program 0 (id=966): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x202f) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r1}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) bind$can_raw(r4, &(0x7f0000000200)={0x1d, r5}, 0x10) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_raw(r6, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) 2m43.614035852s ago: executing program 0 (id=969): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@delnexthop={0x20, 0x69, 0x400, 0x70bd26, 0x25dfdbff, {}, [{0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x8, 0x0, 0x80}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r1, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f000000acc0)=""/4087, 0xff7}, {0x0}], 0x2}, 0x0) 2m43.233024034s ago: executing program 0 (id=974): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) 2m43.209560574s ago: executing program 0 (id=975): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m43.179646996s ago: executing program 0 (id=976): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/vmstat\x00', 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000000}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x17, @private=0xa010102}, 0x10, &(0x7f0000000280), 0x0, &(0x7f0000000640)=ANY=[], 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0x1, @mcast2, 0x9d3}]}, &(0x7f0000000140)=0x10) sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001fc0)=[{&(0x7f0000000040)="06", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x2, 0x8000) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x8a, 0x8, 0x6, 0x10, 0x39c1, 0x4, 0x5}, &(0x7f0000000840)=0x20) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xff, 0x234, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000001880)='./file1\x00', 0x42442, 0x0) r7 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r7, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r7, 0x0, r8, 0x0, 0x7ffff000, 0x3) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) 2m41.938758025s ago: executing program 0 (id=996): r0 = io_uring_setup(0x4a86, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xb, 0x8}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x6, 0x0, 0xfffd, 0x17, 0x9, 0x4, 0x8}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 2m26.195265028s ago: executing program 32 (id=996): r0 = io_uring_setup(0x4a86, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xb, 0x8}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x6, 0x0, 0xfffd, 0x17, 0x9, 0x4, 0x8}}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) 3.272056596s ago: executing program 3 (id=2268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0xa888, r5, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000180)="a9", 0x30}], 0x1}, 0x20008110) 3.219568337s ago: executing program 2 (id=2269): openat2$dir(0xffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r5, &(0x7f0000000300)={0x7, 0x1b, 0x2}, 0x7) splice(r4, 0x0, r1, 0x0, 0x317e, 0x4) write$tun(r2, &(0x7f0000000840)=ANY=[], 0x11b0) 2.963255515s ago: executing program 3 (id=2270): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x15, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6293a, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 2.933802156s ago: executing program 2 (id=2271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 2.628819027s ago: executing program 5 (id=2277): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x104, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=@newtfilter={0x24, 0x2c, 0xd2f, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x3, 0x10}, {}, {0x8, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) 1.642969298s ago: executing program 3 (id=2280): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0xa888, r5, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000180)="a9", 0x30}], 0x1}, 0x20008110) 1.607713249s ago: executing program 2 (id=2281): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) close(0x3) 1.55317397s ago: executing program 5 (id=2282): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x10040, 0x0) 1.481435883s ago: executing program 5 (id=2284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0x7, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.349227797s ago: executing program 1 (id=2286): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000640)=0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) bind$can_raw(0xffffffffffffffff, &(0x7f0000000200), 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x80) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x14, 0x24, 0x21}, 0x14}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_raw(r3, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b80000001900674c000000000000000000000000000000000000000000000000e000000200000000000000000000000000000000000000000a"], 0xb8}}, 0x0) 1.332865627s ago: executing program 1 (id=2287): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1.301214389s ago: executing program 1 (id=2288): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x8040) 1.2661592s ago: executing program 1 (id=2289): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in6=@mcast2, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.223116201s ago: executing program 5 (id=2290): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x70bd26, 0x25dfdbfe, {0x2, 0x18, 0x51}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xdb, 0xeba, 0x3}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004800}, 0x2004c084) 1.222624191s ago: executing program 1 (id=2291): syz_emit_ethernet(0x1001, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0xfcb, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x80, 0x0}, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x1f, 0xe, "d462daf76d13b82ce3b95fcce69e435e91bf2f4a3339765df958d75d2ab3d0371ca6c5ece6cd8a2ebc01172a397427f97768be3dc83b57790ddad9944bdcd012cd2f224928de478115bdfd801b851c819c2c32295f949de53017deac89bda0676e3103474cd36ac6beaa9cba291549a5b5bd94"}, {0x18, 0x7, "3259d2e5d823a40c9039b4a85c5ee8b7ed94558b194c5a3ae1bf233ccf89dda465ef938dd766407da16f887ffcc35f04e02a801e4ec2ee56fc0ec09b13"}, {0x1f, 0x1df, "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"}]}}}}}}, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) write$binfmt_misc(r0, &(0x7f0000000dc0), 0x386) 1.152317323s ago: executing program 1 (id=2292): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0xfffff068, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x9, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x6, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 1.151718883s ago: executing program 5 (id=2293): syz_open_dev$video4linux(0x0, 0x1003, 0x1a9903) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x800004, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x6], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x8000e3, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x7fffffff, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_DEV_DESTROY(r1, 0x5502) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) 1.060855176s ago: executing program 2 (id=2294): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000003c0)}, 0x80000000}], 0x1, 0x10040, 0x0) 999.153388ms ago: executing program 5 (id=2295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2d1, 0x200, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0xffffffff, 0xdb7, 0x6, 0x4, 0x9}, 0xd, 0xeb, [{0x3, 0xc, 0x0, 0x0, 0x9, 0x40}]}, [{0x2, 0x8, 0xfff, 0x8, 0x5, 0x7}, {0x626, 0x5, 0x5, 0xe38b, 0x54, 0x3bf}, {0x59, 0xffff, 0x4, 0xffffffff, 0x4, 0x9}, {0xb, 0x1355, 0x4, 0x8, 0x51e, 0x806}, {0x4, 0x5, 0xf02, 0xffff, 0xe, 0x94a}, {0x3, 0x6, 0x7, 0x0, 0x8, 0x4}, {0x2f, 0x3, 0xb, 0x0, 0x9, 0xf}, {0x3ff, 0x80000001, 0xa3, 0x200, 0x913, 0x8001}, {0x1f0, 0x10000, 0xfffffff8, 0x0, 0x3, 0x8000}, {0xc, 0x5, 0x8, 0x0, 0x101, 0x4}, {0x200, 0x8, 0xfc3, 0xffffffff, 0xf, 0x1}, {0x2, 0x2, 0x662, 0x7, 0x4}, {0x0, 0x9511, 0xf, 0xfffff001, 0x0, 0x89a}, {0x6, 0x5, 0x7ff, 0x7, 0xffff}, {0x7a, 0x5, 0x800, 0x6, 0x6, 0x1}, {0x600000, 0x9e, 0x8039, 0x102d, 0x90, 0x9}, {0xffd, 0xa7, 0x200, 0xa4, 0x3, 0xffffff01}, {0x3, 0x200, 0xffffffff, 0x4, 0x4, 0x500}, {0x7, 0xc, 0x8, 0x7, 0x3, 0x4000}, {0x401, 0x81, 0x8, 0x6, 0xffff, 0x59}, {0x401, 0x4, 0x9, 0x9, 0xee, 0xa0e}, {0x9, 0x1, 0x7, 0x1, 0x800000c, 0xf0}, {0x40, 0x0, 0x0, 0x1, 0x1}, {0x6, 0x7, 0x0, 0x1, 0x7, 0x200}, {0x6, 0x10001, 0x0, 0x8, 0xf31d, 0x95}, {0x2, 0xfffffffe, 0xe, 0x5, 0x7fff, 0xffffffc3}, {0x3, 0x400, 0x4, 0x3ff, 0x0, 0x61b9f92}, {0x1, 0x349, 0x7e, 0x6, 0x1, 0x7fff}, {0x188, 0x2, 0x418b3d83, 0x8, 0x810, 0x8}, {0x1ff, 0x8, 0x8, 0x7, 0x1000, 0x4}, {0x7f33eafe, 0xffffffff, 0xb, 0x2, 0x7, 0x8}, {0x1, 0x7f, 0x7, 0x9, 0x3, 0x6}, {0xf469, 0x2, 0x401, 0x4, 0x8, 0x4}, {0x5, 0x2, 0x6, 0x1, 0x401, 0x2}, {0x0, 0x7fffffff, 0x4, 0x4, 0x6, 0x8515}, {0x7, 0x7, 0x8001, 0x76, 0x8000, 0xffffffff}, {0xc0f, 0x6, 0x1, 0x8, 0x200, 0xa7a2ee47}, {0x8, 0x2, 0x4e, 0xff, 0x7, 0x6}, {0x6, 0xfffffffc, 0x63a8, 0x6, 0x288a6aae, 0x1}, {0xc52, 0x0, 0xfff, 0xe3c, 0x8, 0x10}, {0x80, 0xb, 0x8, 0x1, 0xa, 0x1}, {0x7, 0x9, 0x5, 0x4, 0x9, 0x80000001}, {0x5, 0x5, 0xffff, 0x3, 0x96e, 0x800}, {0x3, 0xa, 0x6, 0xffff1816, 0x9, 0x7f}, {0xd4, 0x100, 0x1, 0x2, 0x9, 0x9}, {0xcf680000, 0x3b9e, 0x28b7, 0x1, 0x4, 0x5}, {0xf8cd, 0x805, 0x900, 0xffffffeb, 0x1, 0x7}, {0x9, 0x24fd, 0x7, 0x80, 0x237e078f, 0x80}, {0x6, 0x55, 0x7, 0x101, 0xfffffffb, 0x1}, {0x8, 0x7, 0x8, 0xf9, 0x877, 0x7c}, {0xd732, 0x6, 0x2, 0x7, 0x1}, {0x81, 0x8, 0x6, 0xffffffff, 0x80000001, 0x5}, {0x8, 0xc, 0xeb6, 0x8, 0x80, 0xfffffffe}, {0x5, 0x56b, 0x0, 0x1, 0x9, 0x3}, {0x2, 0x8, 0x6, 0x9, 0xfffffff8, 0x48}, {0x6, 0xa5cb, 0x100, 0x9, 0x400, 0x7}, {0xfffffff6, 0x4, 0x6, 0x4756, 0x2b13, 0x80}, {0x4, 0x1c0000, 0x7, 0xe, 0x0, 0x2}, {0x6, 0x1, 0x6, 0x4, 0x202, 0xb}, {0x425, 0x0, 0x3, 0x4f, 0x7, 0x8}, {0x4, 0x8, 0xd9b, 0x4, 0x9, 0x9}, {0xfe, 0x8, 0x2, 0x0, 0x930, 0xc3c}, {0x85f, 0x3, 0x0, 0xcd4, 0x7, 0x484}, {0x2, 0x2, 0x0, 0x9, 0x7, 0x40}, {0x1ff, 0x5, 0x7, 0x6, 0x400, 0x100}, {0xa, 0x5, 0x80000001, 0x5, 0x5, 0x6}, {0x2, 0x5, 0x80, 0xfffffffd}, {0xcd, 0xfac, 0xb19d, 0x6, 0x4}, {0xc, 0x3, 0x1, 0x7, 0x7fff, 0x8}, {0x81, 0x10, 0x1, 0x273, 0x1, 0xd}, {0x5c39c017, 0x7f, 0xffff7fff, 0x5, 0x3, 0x3}, {0x2, 0x3, 0x8, 0x81, 0xa, 0x9b7b}, {0x4, 0x39, 0xc, 0xb4c, 0xd, 0x6}, {0x9, 0x303a, 0x6, 0x5, 0x7, 0x6}, {0x2, 0xfffff942, 0xfb5, 0x4, 0x0, 0x7}, {0x0, 0x10001, 0x0, 0x4, 0x401, 0x3}, {0x65, 0x7, 0x9, 0xff, 0x2, 0x8}, {0xe, 0x200, 0x8, 0x7fff, 0x7, 0x8}, {0xf, 0xfffffffb, 0x8, 0x2, 0x1, 0x7}, {0x3, 0x7, 0x2, 0x1a, 0x11a, 0x100}, {0xe, 0x7, 0x6, 0x6c95, 0x10000}, {0x6, 0x5, 0x2, 0x921, 0x4, 0x20}, {0x795c, 0x494d, 0xfff, 0x80, 0x7fff, 0x3}, {0x3, 0x6, 0xb, 0xfffffffc, 0x0, 0x8}, {0x9, 0xfffffff7, 0x2, 0x2, 0xf68, 0x7}, {0x5, 0x4, 0x8, 0x7, 0xf5c, 0x8}, {0x1, 0x0, 0x541a, 0xc, 0x9, 0x7}, {0x3ff, 0x3, 0x1037, 0x5, 0xd, 0x10000}, {0x101, 0x9, 0x101, 0xb99, 0x2e7, 0x8}, {0x3, 0x8001, 0x10001, 0x6, 0x54f7, 0x6}, {0x1, 0x7, 0x8, 0x1, 0x400, 0xd}, {0x5, 0x6, 0xfff, 0xce, 0x1b, 0x6}, {0x8, 0x9, 0x2bd, 0xffff79af, 0x7, 0x3}, {0x7, 0x0, 0x6, 0x1, 0x6, 0x5}, {0x7, 0xe, 0x7, 0xfff, 0x7, 0x2}, {0x0, 0x8, 0xfff, 0x4, 0x2}, {0x9, 0x200, 0x3ec, 0x8702, 0xffff8a6e, 0x8}, {0x200, 0x2, 0x4, 0xc, 0x3, 0x5}, {0xe, 0x6, 0x0, 0x9, 0x8, 0xb5}, {0x100, 0x5, 0x2400000, 0x8, 0x0, 0x8000}, {0x0, 0xfffffff0, 0x101, 0xd786, 0x7}, {0x5, 0x6, 0x5, 0x0, 0x97, 0x10001}, {0x2, 0x45c9, 0x5, 0x5, 0x6, 0x337bc25c}, {0x7f, 0x10, 0x6, 0x834, 0x5, 0x4e8e}, {0x0, 0x1, 0x14, 0x2, 0x2, 0x4}, {0x8001, 0x0, 0x25, 0x869, 0x3, 0x7}, {0x1000000a, 0x9, 0x100, 0x4, 0x5, 0x8000}, {0x8, 0x4, 0x8, 0x8, 0x1, 0x2}, {0x6, 0x1, 0x400, 0x6, 0x5, 0x2de}, {0x1, 0xfffffff7, 0x6, 0x4f, 0x401, 0x610ddc80}, {0x6, 0x1ff, 0x0, 0x0, 0x7f}, {0x6, 0x0, 0x1fbb, 0x5, 0xe53, 0x73}, {0x8, 0x3, 0x0, 0x10, 0x4e5ae85, 0x1}, {0x8, 0xa8e, 0x2, 0x4, 0x1, 0x8}, {0x5, 0x4, 0x7559, 0x800, 0x7507f659, 0x1000}, {0x4, 0xa3, 0xad4, 0x0, 0x4, 0x9d2}, {0x4, 0x0, 0x17c, 0x5, 0xfffffff8, 0xeae8}, {0xd, 0x81, 0x8, 0x6, 0xc, 0x2}, {0xfffffffa, 0xa, 0xffffff96, 0x5, 0x3, 0xffd9}, {0x9, 0x7ff, 0xfffffff8, 0x1, 0x3ff}, {0x0, 0x9, 0x8, 0x2, 0xdec9, 0x5}, {0x9, 0x1ff, 0x800, 0x8, 0x1, 0x5}, {0x1, 0xfff, 0x10001, 0x6, 0x80, 0x5}, {0xffffffff, 0xd55c, 0x68, 0xfffffffd, 0xa5b7, 0x10001}, {0x9, 0x9, 0x80, 0x6e0, 0x8, 0x389}, {0xa0, 0x3111013c, 0x8, 0x3, 0x80000000, 0x93fb}, {0x1, 0x9, 0x6, 0x5, 0x32, 0x800}, {0x7, 0x76, 0x5, 0x4, 0x101, 0x7}], [{}, {0x5}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x854056177ef68b07, 0x1}, {0x1}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x6fb9e8e116338fa4}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0xebb446fe48414d9f}, {}, {0x2, 0x1}, {0x7, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x3}, {0x3}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4}, {}, {}, {0x7}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x5}, {0x2}, {}, {0x2, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x28, 0x4000}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 998.880059ms ago: executing program 2 (id=2296): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000200)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000180)=[{r1, 0x8}, {r1, 0xc302}], 0x2, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="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", 0x1000) 823.991594ms ago: executing program 3 (id=2299): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 804.907234ms ago: executing program 3 (id=2300): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x8040) 784.555165ms ago: executing program 3 (id=2301): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0x7, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 744.499567ms ago: executing program 4 (id=2302): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in6=@mcast2, 0x6, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 693.930758ms ago: executing program 4 (id=2303): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="7c837b72ed42", 0x6}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x9, 0xc, 0x0, 0x0, 0x4}}], 0x30, 0x1}], 0x1, 0x0) 604.748901ms ago: executing program 4 (id=2304): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, 0x0, 0x2004c084) 604.436161ms ago: executing program 4 (id=2305): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) close(0x3) 81.417618ms ago: executing program 2 (id=2306): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000006a0001002dbd7000fddbdf250a8006df", @ANYRES32=0x0, @ANYBLOB="0f00"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 48.369249ms ago: executing program 4 (id=2307): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}}}, 0x10) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000003c0)}, 0x80000000}], 0x1, 0x10040, 0x0) 0s ago: executing program 4 (id=2308): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000084) kernel console output (not intermixed with test programs): led: -22 [ 64.625614][ T5452] netlink: 'syz.2.379': attribute type 1 has an invalid length. [ 64.631259][ T5452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.641902][ T5452] bond1: (slave veth3): Enslaving as an active interface with a down link [ 64.647506][ T5452] netlink: 'syz.2.379': attribute type 10 has an invalid length. [ 64.651219][ T5452] netlink: 40 bytes leftover after parsing attributes in process `syz.2.379'. [ 64.652953][ T5452] device dummy0 entered promiscuous mode [ 64.745003][ T5460] binder: 5459:5460 ioctl c0306201 0 returned -14 [ 64.746519][ T5460] binder: 5459:5460 ioctl c0189376 0 returned -22 [ 64.890044][ T5468] loop0: detected capacity change from 0 to 64 [ 65.112009][ T5464] loop4: detected capacity change from 0 to 512 [ 65.113526][ T5464] EXT4-fs: Ignoring removed bh option [ 65.172557][ T5464] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 65.175032][ T5464] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 65.182447][ T5470] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.230666][ T5464] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.384: Corrupt directory, running e2fsck is recommended [ 65.236718][ T5464] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 65.250031][ T5464] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.384: corrupted in-inode xattr [ 65.258344][ T5464] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.384: couldn't read orphan inode 15 (err -117) [ 65.267579][ T5464] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 65.702556][ T4302] EXT4-fs (loop4): unmounting filesystem. [ 65.899640][ T5501] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.984557][ T5516] loop3: detected capacity change from 0 to 512 [ 65.986939][ T5516] EXT4-fs: Ignoring removed bh option [ 66.042318][ T5516] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 66.045103][ T5516] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 66.048268][ T5516] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.403: Corrupt directory, running e2fsck is recommended [ 66.052535][ T5516] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 66.054095][ T5516] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.403: corrupted in-inode xattr [ 66.057005][ T5516] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.403: couldn't read orphan inode 15 (err -117) [ 66.060496][ T5516] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 66.160595][ T5520] loop2: detected capacity change from 0 to 64 [ 66.848460][ T4315] EXT4-fs (loop3): unmounting filesystem. [ 67.002810][ T5537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.014882][ T5537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.019298][ T5543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.022373][ T5543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.253960][ T5549] loop2: detected capacity change from 0 to 512 [ 67.255481][ T5549] EXT4-fs: Ignoring removed bh option [ 67.259432][ T5549] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 67.261645][ T5549] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 67.263512][ T5549] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.414: Corrupt directory, running e2fsck is recommended [ 67.266334][ T5549] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 67.267942][ T5549] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.414: corrupted in-inode xattr [ 67.273725][ T5549] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.414: couldn't read orphan inode 15 (err -117) [ 67.276027][ T5549] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 67.836385][ T5567] loop0: detected capacity change from 0 to 512 [ 67.842859][ T5567] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.852081][ T5567] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.419: bad orphan inode 131083 [ 67.859681][ T5567] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 67.890059][ T5567] fscrypt (loop0, inode 18): Unsupported encryption modes (contents 0, filenames 0) [ 67.922817][ T4308] EXT4-fs (loop0): unmounting filesystem. [ 67.927907][ T5574] netlink: 92 bytes leftover after parsing attributes in process `syz.3.422'. [ 68.100605][ T5583] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 68.115664][ T4307] EXT4-fs (loop2): unmounting filesystem. [ 68.278177][ T4351] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 68.469236][ T4351] usb 1-1: config 0 interface 0 altsetting 126 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 68.471582][ T4351] usb 1-1: config 0 interface 0 altsetting 126 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 68.474062][ T4351] usb 1-1: config 0 interface 0 has no altsetting 0 [ 68.475414][ T4351] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 68.477166][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.480759][ T4351] usb 1-1: config 0 descriptor?? [ 68.511011][ T5605] loop2: detected capacity change from 0 to 512 [ 68.515145][ T5605] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 68.518836][ T5605] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.434: bad orphan inode 131083 [ 68.521196][ T5605] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 68.527953][ T5605] fscrypt (loop2, inode 18): Unsupported encryption modes (contents 0, filenames 0) [ 68.555377][ T4307] EXT4-fs (loop2): unmounting filesystem. [ 68.717123][ T5613] loop1: detected capacity change from 0 to 512 [ 68.722931][ T5609] netlink: 'syz.4.435': attribute type 4 has an invalid length. [ 68.723422][ T5613] EXT4-fs: Ignoring removed bh option [ 68.727415][ T5613] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 68.730396][ T5613] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 68.732468][ T5613] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.437: Corrupt directory, running e2fsck is recommended [ 68.735415][ T5613] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 68.737120][ T5613] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.437: corrupted in-inode xattr [ 68.740299][ T5613] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.437: couldn't read orphan inode 15 (err -117) [ 68.742897][ T5613] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 68.817494][ T5618] tipc: Started in network mode [ 68.818580][ T5618] tipc: Node identity ac14140f, cluster identity 4711 [ 68.819988][ T5618] tipc: New replicast peer: 255.255.255.255 [ 68.821400][ T5618] tipc: Enabled bearer , priority 10 [ 69.156100][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.157558][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.158923][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.160158][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.161585][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.162895][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.164183][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.167519][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.168847][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.170165][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.171477][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.172839][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.174099][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.175379][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.176675][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.177921][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.179269][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.180545][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.182043][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.183533][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.184903][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.186230][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.187503][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.189368][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.190674][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.191909][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.193141][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.194630][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.195904][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.197174][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.198477][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.199786][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.201071][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.202325][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.203578][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.204852][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.206075][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.207353][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.209237][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.210540][ T4351] wacom 0003:056A:0094.0001: unknown main item tag 0x0 [ 69.211910][ T4351] wacom 0003:056A:0094.0001: Using device in hidraw-only mode [ 69.224395][ T4351] wacom 0003:056A:0094.0001: hidraw0: USB HID v80.08 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input0 [ 69.412717][ T4349] usb 1-1: USB disconnect, device number 10 [ 69.578210][ T5634] xt_CT: You must specify a L4 protocol and not use inversions on it [ 69.712468][ T5635] loop4: detected capacity change from 0 to 64 [ 69.994252][ T7] cfg80211: failed to load regulatory.db [ 69.996090][ T4350] tipc: Node number set to 2886997007 [ 70.025072][ T4303] EXT4-fs (loop1): unmounting filesystem. [ 70.121613][ T27] kauditd_printk_skb: 123 callbacks suppressed [ 70.121624][ T27] audit: type=1326 audit(70.110:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5643 comm="syz.1.446" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f77aa8 code=0x7ffc0000 [ 70.126926][ T27] audit: type=1326 audit(70.110:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5643 comm="syz.1.446" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f77aa8 code=0x7ffc0000 [ 70.138252][ T27] audit: type=1326 audit(70.110:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5643 comm="syz.1.446" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f77aa8 code=0x7ffc0000 [ 70.148632][ T27] audit: type=1326 audit(70.110:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5643 comm="syz.1.446" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff92f77aa8 code=0x7ffc0000 [ 70.152883][ T27] audit: type=1326 audit(70.110:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5643 comm="syz.1.446" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f77aa8 code=0x7ffc0000 [ 70.157052][ T27] audit: type=1326 audit(70.110:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5643 comm="syz.1.446" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f77aa8 code=0x7ffc0000 [ 70.169820][ T27] audit: type=1326 audit(70.110:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5643 comm="syz.1.446" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f77aa8 code=0x7ffc0000 [ 70.184070][ T27] audit: type=1326 audit(70.110:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5643 comm="syz.1.446" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=210 compat=0 ip=0xffff92f77aa8 code=0x7ffc0000 [ 70.188428][ T27] audit: type=1326 audit(70.110:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5643 comm="syz.1.446" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff92f77aa8 code=0x7ffc0000 [ 70.192619][ T27] audit: type=1326 audit(70.110:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5643 comm="syz.1.446" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff92f77aa8 code=0x7ffc0000 [ 70.384787][ T5657] loop4: detected capacity change from 0 to 512 [ 70.394124][ T5657] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 70.404664][ T5657] EXT4-fs error (device loop4): ext4_orphan_get:1431: comm syz.4.452: bad orphan inode 131083 [ 70.416499][ T5657] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 70.441211][ T5657] fscrypt (loop4, inode 18): Unsupported encryption modes (contents 0, filenames 0) [ 70.467367][ T4302] EXT4-fs (loop4): unmounting filesystem. [ 70.509214][ T5662] loop2: detected capacity change from 0 to 512 [ 70.514450][ T5662] EXT4-fs: Ignoring removed bh option [ 70.529450][ T5662] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 70.531907][ T5662] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 70.533901][ T5662] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.455: Corrupt directory, running e2fsck is recommended [ 70.536820][ T5662] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 70.539059][ T5662] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.455: corrupted in-inode xattr [ 70.541722][ T5662] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.455: couldn't read orphan inode 15 (err -117) [ 70.544220][ T5662] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 70.624978][ T5669] tipc: Started in network mode [ 70.625945][ T5669] tipc: Node identity ac14140f, cluster identity 4711 [ 70.627310][ T5669] tipc: New replicast peer: 255.255.255.255 [ 70.630694][ T5669] tipc: Enabled bearer , priority 10 [ 71.287752][ T5681] loop3: detected capacity change from 0 to 64 [ 71.637729][ T4307] EXT4-fs (loop2): unmounting filesystem. [ 71.714956][ T5688] batman_adv: batadv0: Adding interface: dummy0 [ 71.716403][ T5688] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.735959][ T5688] batman_adv: batadv0: Interface activated: dummy0 [ 71.753890][ T5688] batadv0: mtu less than device minimum [ 71.757092][ T5688] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.760491][ T5688] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.763774][ T5688] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.766904][ T5688] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.770065][ T5688] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.773232][ T5688] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.776439][ T5688] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.779821][ T5688] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.783072][ T5688] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 71.801735][ T1516] tipc: Node number set to 2886997007 [ 71.927480][ T5709] loop4: detected capacity change from 0 to 512 [ 71.929140][ T5709] EXT4-fs: Ignoring removed bh option [ 71.954943][ T5709] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 71.960936][ T5709] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 71.964890][ T5709] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.470: Corrupt directory, running e2fsck is recommended [ 71.979373][ T5709] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 71.980928][ T5709] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.470: corrupted in-inode xattr [ 71.996204][ T5709] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.470: couldn't read orphan inode 15 (err -117) [ 72.011047][ T5709] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 72.138879][ T5726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.140533][ T5726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.704131][ T5737] netlink: 'syz.2.480': attribute type 1 has an invalid length. [ 72.812644][ T5737] device bond0 entered promiscuous mode [ 72.815089][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.830459][ T4302] EXT4-fs (loop4): unmounting filesystem. [ 72.857896][ T5742] device syzkaller0 entered promiscuous mode [ 72.889484][ T5746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.891223][ T5746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.894818][ T5746] netlink: 27 bytes leftover after parsing attributes in process `syz.3.483'. [ 83.730171][ T5745] device syzkaller0 entered promiscuous mode [ 83.738190][ T5758] device syzkaller0 entered promiscuous mode [ 83.741377][ T5761] tipc: Enabled bearer , priority 0 [ 83.807199][ T5763] tipc: Resetting bearer [ 83.850256][ T5763] tipc: Disabling bearer [ 84.046835][ T27] kauditd_printk_skb: 27 callbacks suppressed [ 84.046844][ T27] audit: type=1326 audit(84.030:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5800 comm="syz.4.497" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 84.056684][ T27] audit: type=1326 audit(84.040:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5800 comm="syz.4.497" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 84.065106][ T5801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.066931][ T27] audit: type=1326 audit(84.050:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5800 comm="syz.4.497" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 84.068307][ T5801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.075698][ T27] audit: type=1326 audit(84.050:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5800 comm="syz.4.497" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 84.084437][ T27] audit: type=1326 audit(84.050:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5800 comm="syz.4.497" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 84.093891][ T5801] netlink: 27 bytes leftover after parsing attributes in process `syz.4.497'. [ 84.094395][ T27] audit: type=1326 audit(84.050:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5800 comm="syz.4.497" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 84.100433][ T27] audit: type=1326 audit(84.050:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5800 comm="syz.4.497" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 84.105253][ T27] audit: type=1326 audit(84.050:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5800 comm="syz.4.497" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 84.112598][ T27] audit: type=1326 audit(84.050:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5800 comm="syz.4.497" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 84.117432][ T27] audit: type=1326 audit(84.050:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5800 comm="syz.4.497" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 84.252703][ T5803] sctp: [Deprecated]: syz.2.498 (pid 5803) Use of int in maxseg socket option. [ 84.252703][ T5803] Use struct sctp_assoc_value instead [ 84.437830][ T5809] loop2: detected capacity change from 0 to 64 [ 85.153619][ T5833] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.263832][ T4367] bond0 (unregistering): Released all slaves [ 85.297064][ T5834] device syzkaller0 entered promiscuous mode [ 85.461746][ T5844] tipc: Enabling of bearer rejected, already enabled [ 86.148139][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 86.349480][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.351585][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.355778][ T7] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 86.357534][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.359185][ T7] usb 1-1: Product: syz [ 86.359947][ T7] usb 1-1: Manufacturer: syz [ 86.360897][ T7] usb 1-1: SerialNumber: syz [ 86.567538][ T5861] netlink: 27 bytes leftover after parsing attributes in process `syz.0.514'. [ 86.573451][ T7] usb 1-1: 0:1 : does not exist [ 86.575290][ T5872] device syzkaller0 entered promiscuous mode [ 86.582811][ T7] usb 1-1: USB disconnect, device number 11 [ 86.628466][ T5873] loop4: detected capacity change from 0 to 64 [ 86.872271][ T5878] tipc: Enabling of bearer rejected, already enabled [ 86.979748][ T5775] udevd[5775]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.072384][ T5887] fuse: Unknown parameter 'rootmode00800000000000000040000' [ 87.087095][ T5884] netlink: 8 bytes leftover after parsing attributes in process `syz.2.525'. [ 87.176223][ T5896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.177924][ T5896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.235722][ T5900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.238643][ T5900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.330909][ T5905] device syzkaller0 entered promiscuous mode [ 87.454498][ T5907] tipc: Enabling of bearer rejected, already enabled [ 87.760990][ T5916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.763610][ T5916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.769144][ T5916] netlink: 27 bytes leftover after parsing attributes in process `syz.2.537'. [ 88.137168][ T5932] xt_CT: You must specify a L4 protocol and not use inversions on it [ 88.243136][ T5934] tipc: Enabling of bearer rejected, already enabled [ 88.329828][ T5939] device syzkaller0 entered promiscuous mode [ 88.411138][ T5940] loop4: detected capacity change from 0 to 64 [ 88.643185][ T5945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.650011][ T5945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.741450][ T5950] device syzkaller0 entered promiscuous mode [ 88.946881][ T5961] tipc: Started in network mode [ 88.947821][ T5961] tipc: Node identity ac14140f, cluster identity 4711 [ 88.951971][ T5961] tipc: New replicast peer: 255.255.255.255 [ 88.954372][ T5961] tipc: Enabled bearer , priority 10 [ 88.955901][ T5961] netlink: 12 bytes leftover after parsing attributes in process `syz.1.557'. [ 89.058265][ T4349] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 89.094219][ T5971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.096854][ T5971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.248293][ T4349] usb 1-1: Using ep0 maxpacket: 16 [ 89.251603][ T4349] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 89.253320][ T4349] usb 1-1: config 0 has no interface number 0 [ 89.254733][ T4349] usb 1-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.258741][ T4349] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 89.260537][ T4349] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.262041][ T4349] usb 1-1: Product: syz [ 89.262796][ T4349] usb 1-1: Manufacturer: syz [ 89.263746][ T4349] usb 1-1: SerialNumber: syz [ 89.266091][ T4349] usb 1-1: config 0 descriptor?? [ 89.271775][ T4349] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 89.486514][ T5522] usb 1-1: Failed to submit usb control message: -71 [ 89.486724][ T4349] usb 1-1: USB disconnect, device number 12 [ 89.487856][ T5522] usb 1-1: unable to send the bmi data to the device: -71 [ 89.490697][ T5522] usb 1-1: unable to get target info from device [ 89.491805][ T5522] usb 1-1: could not get target info (-71) [ 89.495613][ T5522] usb 1-1: could not probe fw (-71) [ 89.589011][ T5986] loop2: detected capacity change from 0 to 64 [ 90.078656][ T1516] tipc: Node number set to 2886997007 [ 90.125322][ T6003] sctp: [Deprecated]: syz.3.573 (pid 6003) Use of int in maxseg socket option. [ 90.125322][ T6003] Use struct sctp_assoc_value instead [ 90.171526][ T27] kauditd_printk_skb: 91 callbacks suppressed [ 90.171532][ T27] audit: type=1326 audit(90.160:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.4.575" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 90.177047][ T6007] netlink: 27 bytes leftover after parsing attributes in process `syz.4.575'. [ 90.177381][ T27] audit: type=1326 audit(90.160:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.4.575" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 90.184916][ T27] audit: type=1326 audit(90.160:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.4.575" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 90.191522][ T27] audit: type=1326 audit(90.160:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.4.575" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 90.204080][ T27] audit: type=1326 audit(90.160:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.4.575" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 90.208596][ T27] audit: type=1326 audit(90.160:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.4.575" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 90.219489][ T27] audit: type=1326 audit(90.160:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.4.575" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 90.224564][ T27] audit: type=1326 audit(90.160:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.4.575" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 90.229596][ T27] audit: type=1326 audit(90.160:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.4.575" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 90.230903][ T6011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.577'. [ 90.234105][ T27] audit: type=1326 audit(90.160:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6006 comm="syz.4.575" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 90.235796][ T6011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.577'. [ 90.283895][ T6011] device syzkaller0 entered promiscuous mode [ 90.656388][ T6033] netlink: 27 bytes leftover after parsing attributes in process `syz.4.586'. [ 90.928147][ T4349] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 91.045635][ T6053] device syzkaller0 entered promiscuous mode [ 91.128260][ T4349] usb 1-1: Using ep0 maxpacket: 32 [ 91.161634][ T4349] usb 1-1: unable to get BOS descriptor or descriptor too short [ 91.170558][ T4349] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 91.171825][ T4349] usb 1-1: can't read configurations, error -71 [ 91.241230][ T6062] tipc: Enabling of bearer rejected, already enabled [ 91.263276][ T6060] kernel profiling enabled (shift: 0) [ 91.366247][ T6070] sctp: [Deprecated]: syz.4.602 (pid 6070) Use of int in maxseg socket option. [ 91.366247][ T6070] Use struct sctp_assoc_value instead [ 91.428333][ T6076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.430056][ T6076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.854581][ T6089] tipc: Started in network mode [ 91.856707][ T6089] tipc: Node identity ac14140f, cluster identity 4711 [ 91.858327][ T6089] tipc: New replicast peer: 255.255.255.255 [ 91.859686][ T6089] tipc: Enabled bearer , priority 10 [ 92.022769][ T6102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.026774][ T6102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.030325][ T6102] netlink: 27 bytes leftover after parsing attributes in process `syz.4.616'. [ 92.051959][ T6106] sctp: [Deprecated]: syz.3.618 (pid 6106) Use of int in maxseg socket option. [ 92.051959][ T6106] Use struct sctp_assoc_value instead [ 92.578371][ T4349] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 92.636097][ T6153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.643374][ T6153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.768184][ T4349] usb 1-1: Using ep0 maxpacket: 32 [ 92.773198][ T4349] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 92.774647][ T4349] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 92.776172][ T4349] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 92.777696][ T4349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 92.780383][ T4349] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 92.783169][ T4349] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 92.785525][ T4349] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 92.787140][ T4349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.792176][ T4349] usb 1-1: config 0 descriptor?? [ 92.878241][ T7] tipc: Node number set to 2886997007 [ 92.997811][ T4349] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 93.198091][ C0] usblp0: nonzero read bulk status received: -71 [ 93.199860][ T1516] usb 1-1: USB disconnect, device number 15 [ 93.533192][ T6113] usblp0: removed [ 93.600412][ T6169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.610790][ T6169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.619455][ T6169] netlink: 27 bytes leftover after parsing attributes in process `syz.4.644'. [ 93.702178][ T6173] device syzkaller0 entered promiscuous mode [ 94.121702][ T6188] loop2: detected capacity change from 0 to 64 [ 94.220016][ T6192] netlink: 28 bytes leftover after parsing attributes in process `syz.4.652'. [ 94.886666][ T6203] device syzkaller0 entered promiscuous mode [ 94.962979][ T4351] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 95.398146][ T4351] usb 1-1: Using ep0 maxpacket: 16 [ 95.400581][ T4351] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.402462][ T4351] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 95.404051][ T4351] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 95.405793][ T4351] usb 1-1: config 1 interface 1 has no altsetting 0 [ 95.408890][ T4351] usb 1-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 95.410486][ T4351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.412168][ T4351] usb 1-1: Product: syz [ 95.412898][ T4351] usb 1-1: Manufacturer: syz [ 95.413706][ T4351] usb 1-1: SerialNumber: syz [ 95.621459][ T6201] netlink: 'syz.0.656': attribute type 1 has an invalid length. [ 95.640744][ T6201] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.692755][ T6201] bond2: (slave geneve2): making interface the new active one [ 95.696738][ T6201] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 95.698731][ T4552] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 95.801794][ T4351] usb 1-1: selecting invalid altsetting 0 [ 95.830645][ T6228] loop4: detected capacity change from 0 to 64 [ 95.886379][ T4351] usb 1-1: USB disconnect, device number 16 [ 95.952968][ T6229] netlink: 'syz.2.666': attribute type 4 has an invalid length. [ 95.995478][ T27] kauditd_printk_skb: 83 callbacks suppressed [ 95.995489][ T27] audit: type=1326 audit(95.980:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.2.667" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b77aa8 code=0x7ffc0000 [ 96.004323][ T27] audit: type=1326 audit(95.980:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.2.667" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b77aa8 code=0x7ffc0000 [ 96.009172][ T27] audit: type=1326 audit(95.990:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.2.667" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=178 compat=0 ip=0xffff89b77aa8 code=0x7ffc0000 [ 96.012715][ T6236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.013456][ T27] audit: type=1326 audit(95.990:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.2.667" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b77aa8 code=0x7ffc0000 [ 96.017381][ T6236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.019863][ T27] audit: type=1326 audit(95.990:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.2.667" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b77aa8 code=0x7ffc0000 [ 96.025231][ T27] audit: type=1326 audit(95.990:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.2.667" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=135 compat=0 ip=0xffff89b77aa8 code=0x7ffc0000 [ 96.032185][ T27] audit: type=1326 audit(95.990:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.2.667" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b77aa8 code=0x7ffc0000 [ 96.036587][ T27] audit: type=1326 audit(95.990:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.2.667" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff89b77aa8 code=0x7ffc0000 [ 96.045788][ T6236] netlink: 27 bytes leftover after parsing attributes in process `syz.2.667'. [ 96.049737][ T27] audit: type=1326 audit(95.990:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.2.667" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff89b5a96c code=0x7ffc0000 [ 96.053969][ T27] audit: type=1326 audit(95.990:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6235 comm="syz.2.667" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff89b776d0 code=0x7ffc0000 [ 96.097003][ T6233] udevd[6233]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.500432][ T6242] tipc: Enabling of bearer rejected, already enabled [ 96.618152][ T6245] loop3: detected capacity change from 0 to 64 [ 96.837227][ T6246] device syzkaller0 entered promiscuous mode [ 96.922644][ T6252] device syzkaller0 entered promiscuous mode [ 97.250033][ T6262] netlink: 'syz.4.677': attribute type 4 has an invalid length. [ 97.851456][ T6281] tipc: Enabling of bearer rejected, already enabled [ 97.897523][ T6286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.899967][ T6286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.903354][ T6286] netlink: 27 bytes leftover after parsing attributes in process `syz.1.685'. [ 97.938840][ T6287] loop0: detected capacity change from 0 to 64 [ 98.312726][ T6293] device syzkaller0 entered promiscuous mode [ 98.424733][ T6296] netlink: 'syz.4.689': attribute type 4 has an invalid length. [ 98.699751][ T6305] loop1: detected capacity change from 0 to 64 [ 98.968013][ T6308] sctp: [Deprecated]: syz.0.693 (pid 6308) Use of int in maxseg socket option. [ 98.968013][ T6308] Use struct sctp_assoc_value instead [ 99.057282][ T6313] device syzkaller0 entered promiscuous mode [ 99.089521][ T6317] tipc: Enabling of bearer rejected, already enabled [ 99.725769][ T6332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.727398][ T6332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.786657][ T6335] netlink: 'syz.3.701': attribute type 4 has an invalid length. [ 99.887750][ T6332] netlink: 27 bytes leftover after parsing attributes in process `syz.4.702'. [ 100.130958][ T6345] loop3: detected capacity change from 0 to 64 [ 100.204643][ T6350] device syzkaller0 entered promiscuous mode [ 100.322448][ T6355] tipc: Enabling of bearer rejected, already enabled [ 100.377689][ T6357] sctp: [Deprecated]: syz.0.709 (pid 6357) Use of int in maxseg socket option. [ 100.377689][ T6357] Use struct sctp_assoc_value instead [ 100.601415][ T6363] loop0: detected capacity change from 0 to 64 [ 101.174069][ T6371] netlink: 'syz.2.713': attribute type 4 has an invalid length. [ 101.446409][ T6382] device syzkaller0 entered promiscuous mode [ 101.523408][ T6388] tipc: Enabling of bearer rejected, already enabled [ 101.549898][ T6390] sctp: [Deprecated]: syz.0.721 (pid 6390) Use of int in maxseg socket option. [ 101.549898][ T6390] Use struct sctp_assoc_value instead [ 101.563164][ T6392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.565501][ T6392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.620003][ T6392] netlink: 27 bytes leftover after parsing attributes in process `syz.4.722'. [ 101.764146][ T6399] device syzkaller0 entered promiscuous mode [ 102.029863][ T6404] netlink: 'syz.1.726': attribute type 4 has an invalid length. [ 102.319834][ T6410] loop3: detected capacity change from 0 to 64 [ 102.819830][ T6416] loop4: detected capacity change from 0 to 64 [ 103.263864][ T6426] tipc: Enabling of bearer rejected, already enabled [ 103.271905][ T6427] device syzkaller0 entered promiscuous mode [ 103.393745][ T6434] sctp: [Deprecated]: syz.0.737 (pid 6434) Use of int in maxseg socket option. [ 103.393745][ T6434] Use struct sctp_assoc_value instead [ 103.781329][ T6440] netlink: 27 bytes leftover after parsing attributes in process `syz.4.739'. [ 103.783470][ T6436] device syzkaller0 entered promiscuous mode [ 104.017924][ T6446] loop1: detected capacity change from 0 to 64 [ 104.319917][ T6453] netlink: 'syz.0.742': attribute type 4 has an invalid length. [ 104.485613][ T6462] tipc: Enabling of bearer rejected, already enabled [ 104.781609][ T6472] loop2: detected capacity change from 0 to 64 [ 105.167669][ T6474] sctp: [Deprecated]: syz.1.750 (pid 6474) Use of int in maxseg socket option. [ 105.167669][ T6474] Use struct sctp_assoc_value instead [ 105.259728][ T6479] device syzkaller0 entered promiscuous mode [ 105.800319][ T6487] netlink: 27 bytes leftover after parsing attributes in process `syz.0.755'. [ 105.805944][ T6485] device syzkaller0 entered promiscuous mode [ 105.873048][ T6498] tipc: Enabling of bearer rejected, already enabled [ 106.062551][ T6503] loop1: detected capacity change from 0 to 64 [ 106.163759][ T6509] sctp: [Deprecated]: syz.3.763 (pid 6509) Use of int in maxseg socket option. [ 106.163759][ T6509] Use struct sctp_assoc_value instead [ 106.408145][ T6516] loop3: detected capacity change from 0 to 64 [ 106.820737][ T6523] netlink: 'syz.0.766': attribute type 4 has an invalid length. [ 107.081987][ T6528] device syzkaller0 entered promiscuous mode [ 107.313497][ T6536] device syzkaller0 entered promiscuous mode [ 118.555756][ T6552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.775'. [ 118.848764][ T6586] loop0: detected capacity change from 0 to 64 [ 119.016012][ T6597] netlink: 68 bytes leftover after parsing attributes in process `syz.3.788'. [ 119.193884][ T6606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.791'. [ 119.220420][ T6607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.226286][ T6607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.281935][ T6609] device syzkaller0 entered promiscuous mode [ 119.410081][ T6611] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.411555][ T6611] IPv6: NLM_F_CREATE should be set when creating new route [ 119.561971][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.563707][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.941592][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.955060][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.244266][ T6611] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.246070][ T6611] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.247814][ T6611] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.249939][ T6611] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.604925][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 120.629107][ T6644] tipc: Enabling of bearer rejected, failed to enable media [ 120.716343][ T6651] device syzkaller0 entered promiscuous mode [ 120.760729][ T6653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.763363][ T6653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.801972][ T6653] netlink: 27 bytes leftover after parsing attributes in process `syz.4.808'. [ 120.818130][ T4351] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 120.998148][ T4351] usb 1-1: Using ep0 maxpacket: 32 [ 121.081483][ T6662] loop1: detected capacity change from 0 to 64 [ 121.216413][ T4351] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.218526][ T4351] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 121.219900][ T4351] usb 1-1: can't read configurations, error -71 [ 121.355157][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.816'. [ 121.375149][ T6677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.376674][ T6677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.593697][ T6685] device syzkaller0 entered promiscuous mode [ 122.062805][ T6708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.828'. [ 122.144166][ T6717] device syzkaller0 entered promiscuous mode [ 122.328813][ T4351] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 122.389450][ T6726] loop1: detected capacity change from 0 to 64 [ 122.406013][ T6727] loop4: detected capacity change from 0 to 64 [ 122.732808][ T4351] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.735028][ T4351] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 122.738321][ T4351] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 122.741417][ T4351] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.743005][ T4351] usb 1-1: Product: syz [ 122.743747][ T4351] usb 1-1: Manufacturer: syz [ 122.748892][ T4351] usb 1-1: SerialNumber: syz [ 122.886370][ T6735] netlink: 36 bytes leftover after parsing attributes in process `syz.2.840'. [ 122.957835][ T6703] netlink: 27 bytes leftover after parsing attributes in process `syz.0.825'. [ 122.962830][ T4349] usb 1-1: USB disconnect, device number 18 [ 122.972639][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 123.283072][ T6752] device syzkaller0 entered promiscuous mode [ 123.592136][ T6773] loop2: detected capacity change from 0 to 64 [ 124.058576][ T6783] loop0: detected capacity change from 0 to 64 [ 124.066496][ T6785] __nla_validate_parse: 1 callbacks suppressed [ 124.066503][ T6785] netlink: 36 bytes leftover after parsing attributes in process `syz.4.861'. [ 124.269233][ T6793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.864'. [ 124.305157][ T6796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.307697][ T6796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.336888][ T6799] device syzkaller0 entered promiscuous mode [ 124.369700][ T6801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.371473][ T6801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.383763][ T6801] netlink: 27 bytes leftover after parsing attributes in process `syz.1.867'. [ 124.700234][ T6812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.702544][ T6812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.758929][ T6815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.760618][ T6815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.051027][ T6832] netlink: 36 bytes leftover after parsing attributes in process `syz.1.879'. [ 125.113817][ T6833] loop2: detected capacity change from 0 to 64 [ 125.443359][ T6838] device syzkaller0 entered promiscuous mode [ 125.666407][ T6849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.672174][ T6849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.764856][ T6850] loop3: detected capacity change from 0 to 64 [ 125.990980][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.992215][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.029642][ T6849] netlink: 27 bytes leftover after parsing attributes in process `syz.1.886'. [ 126.063802][ T6855] device syzkaller0 entered promiscuous mode [ 126.067501][ T6855] tipc: Enabled bearer , priority 0 [ 126.070818][ T6854] tipc: Resetting bearer [ 126.169055][ T6854] tipc: Disabling bearer [ 126.286873][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.2.896'. [ 126.518466][ T4351] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 126.591710][ T6883] device syzkaller0 entered promiscuous mode [ 126.715037][ T6889] loop3: detected capacity change from 0 to 64 [ 126.888162][ T4351] usb 1-1: Using ep0 maxpacket: 32 [ 126.892624][ T4351] usb 1-1: unable to get BOS descriptor or descriptor too short [ 126.894581][ T4351] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 126.895940][ T4351] usb 1-1: can't read configurations, error -71 [ 126.994319][ T6899] netlink: 40 bytes leftover after parsing attributes in process `syz.2.906'. [ 127.063217][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.910'. [ 127.095863][ T6909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.097615][ T6909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.101227][ T6909] netlink: 27 bytes leftover after parsing attributes in process `syz.2.911'. [ 127.198350][ T6912] loop4: detected capacity change from 0 to 64 [ 128.026594][ T6951] loop1: detected capacity change from 0 to 64 [ 128.165092][ T6956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.181291][ T6956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.184437][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.928'. [ 128.265436][ T6965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.272556][ T6965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.565510][ T6977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.568822][ T6977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.600272][ T6978] loop0: detected capacity change from 0 to 64 [ 129.145030][ T7005] __nla_validate_parse: 1 callbacks suppressed [ 129.145041][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.947'. [ 129.223746][ T7008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.226218][ T7008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.337534][ T7013] loop4: detected capacity change from 0 to 64 [ 129.693190][ T7029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.696716][ T7029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.701759][ T7029] netlink: 27 bytes leftover after parsing attributes in process `syz.2.957'. [ 129.950602][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.963'. [ 129.952253][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.1.963'. [ 129.954584][ T7042] netlink: 'syz.1.963': attribute type 13 has an invalid length. [ 129.956215][ T7043] loop3: detected capacity change from 0 to 64 [ 130.129684][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'. [ 130.260136][ T7060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.265589][ T7060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.784713][ T7083] loop0: detected capacity change from 0 to 64 [ 130.826544][ T7087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.835145][ T7087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.857329][ T7091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.985'. [ 130.861713][ T7087] netlink: 27 bytes leftover after parsing attributes in process `syz.2.982'. [ 131.466894][ T7111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.470679][ T7111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.580926][ T7116] loop4: detected capacity change from 0 to 64 [ 132.026399][ T7122] device syzkaller0 entered promiscuous mode [ 132.313691][ T7136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.316727][ T7136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.772489][ T7141] loop4: detected capacity change from 0 to 64 [ 144.370925][ T7136] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1004'. [ 144.484670][ T7170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.499097][ T7170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.865994][ T7191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1019'. [ 144.889550][ T7192] loop2: detected capacity change from 0 to 64 [ 145.065818][ T7194] device syzkaller0 entered promiscuous mode [ 145.831662][ T7228] loop2: detected capacity change from 0 to 64 [ 147.583639][ T4320] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 147.585435][ T4320] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 147.586983][ T4320] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 147.595721][ T4320] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 147.597277][ T4320] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 147.600709][ T4320] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 149.608345][ T4320] Bluetooth: hci5: command 0x0409 tx timeout [ 151.688102][ T4304] Bluetooth: hci5: command 0x041b tx timeout [ 153.608366][ T4320] Bluetooth: hci0: command 0x0406 tx timeout [ 153.609484][ T4320] Bluetooth: hci1: command 0x0406 tx timeout [ 153.610641][ T4320] Bluetooth: hci2: command 0x0406 tx timeout [ 153.611754][ T4320] Bluetooth: hci3: command 0x0406 tx timeout [ 153.612870][ T4320] Bluetooth: hci4: command 0x0406 tx timeout [ 153.768139][ T4304] Bluetooth: hci5: command 0x040f tx timeout [ 155.848095][ T4320] Bluetooth: hci5: command 0x0419 tx timeout [ 157.406791][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'. [ 157.439383][ T7246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.441028][ T7246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.444918][ T7247] loop2: detected capacity change from 0 to 512 [ 157.467366][ T7247] EXT4-fs: Ignoring removed bh option [ 157.482028][ T7247] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 157.484164][ T7247] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 157.485845][ T7247] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1033: Corrupt directory, running e2fsck is recommended [ 157.504974][ T7247] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 157.506533][ T7247] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.1033: corrupted in-inode xattr [ 157.515660][ T7247] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1033: couldn't read orphan inode 15 (err -117) [ 157.520440][ T7247] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 157.981917][ T7261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.996582][ T7261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.026690][ T7234] chnl_net:caif_netlink_parms(): no params data found [ 158.054613][ T7234] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.056272][ T7234] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.058033][ T7234] device bridge_slave_0 entered promiscuous mode [ 158.063065][ T7234] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.064583][ T7234] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.066325][ T7234] device bridge_slave_1 entered promiscuous mode [ 158.075359][ T7234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.089005][ T7234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.126272][ T7234] team0: Port device team_slave_0 added [ 158.132634][ T7234] team0: Port device team_slave_1 added [ 158.138816][ T7234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.140191][ T7234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.145090][ T7234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.147819][ T7234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.152249][ T7234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.157890][ T7234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.209427][ T7234] device hsr_slave_0 entered promiscuous mode [ 158.258302][ T7234] device hsr_slave_1 entered promiscuous mode [ 158.298222][ T7273] sctp: [Deprecated]: syz.1.1040 (pid 7273) Use of int in max_burst socket option. [ 158.298222][ T7273] Use struct sctp_assoc_value instead [ 158.306171][ T4307] EXT4-fs (loop2): unmounting filesystem. [ 158.310465][ T7234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.311730][ T7234] Cannot create hsr debugfs directory [ 158.393204][ T7234] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 158.447474][ T7234] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 158.490414][ T7234] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 158.538981][ T7288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.542795][ T7288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.545213][ T7284] device bond1 entered promiscuous mode [ 158.549813][ T7284] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.561331][ T7234] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 158.626495][ T7286] 8021q: adding VLAN 0 to HW filter on device bond1 [ 158.629653][ T7286] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 158.632221][ T7286] bond1: (slave vti0): Error -95 calling set_mac_address [ 158.637740][ T7288] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1045'. [ 158.717094][ T7234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.723122][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 158.724770][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 158.727773][ T7234] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.734511][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 158.736199][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 158.738048][ T5682] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.739326][ T5682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.741928][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 158.746751][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 158.748850][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 158.750417][ T5522] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.751650][ T5522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.753134][ T5522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 158.892280][ T7234] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.894183][ T7234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.901836][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 158.903718][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 158.906113][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 158.907993][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.921021][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.925701][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.927562][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.936729][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.939031][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.946744][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.948985][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 159.142857][ T7234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.144500][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.145933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.183077][ T7314] loop4: detected capacity change from 0 to 512 [ 159.184599][ T7314] EXT4-fs: Ignoring removed bh option [ 159.187059][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1049'. [ 159.191890][ T7310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1049'. [ 159.200183][ T7310] device syzkaller0 entered promiscuous mode [ 159.212873][ T7317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.214614][ T7317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.219395][ T7314] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 159.221415][ T7314] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 159.223273][ T7314] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1052: Corrupt directory, running e2fsck is recommended [ 159.259445][ T7314] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 159.261040][ T7314] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.1052: corrupted in-inode xattr [ 159.270522][ T7314] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1052: couldn't read orphan inode 15 (err -117) [ 159.279927][ T7314] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 159.410460][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.735558][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.747906][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.750134][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.752968][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.756511][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.762290][ T7234] device veth0_vlan entered promiscuous mode [ 159.787802][ T7234] device veth1_vlan entered promiscuous mode [ 159.804557][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 159.806330][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 159.810517][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 159.812565][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 159.816756][ T7234] device veth0_macvtap entered promiscuous mode [ 159.825834][ T7234] device veth1_macvtap entered promiscuous mode [ 159.843135][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.845471][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.847348][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.855113][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.857126][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.860900][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.862860][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.864994][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.867491][ T7234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.870303][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 159.872540][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 159.874441][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 159.876377][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 159.880748][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.882832][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.885762][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.894177][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.898051][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.904100][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.962561][ T7340] loop1: detected capacity change from 0 to 64 [ 160.044511][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.046769][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.054768][ T7234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.057666][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 160.063150][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 160.241344][ T4302] EXT4-fs (loop4): unmounting filesystem. [ 160.259265][ T7234] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.278472][ T7234] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.280261][ T7234] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.285187][ T7234] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.336940][ T7348] sctp: [Deprecated]: syz.3.1059 (pid 7348) Use of int in max_burst socket option. [ 160.336940][ T7348] Use struct sctp_assoc_value instead [ 160.414119][ T5808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.415886][ T5808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.417784][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.447647][ T4367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.452096][ T4367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.453827][ T1699] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.457975][ T7353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.460663][ T7353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.468414][ T7353] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1062'. [ 160.544541][ T7355] device syzkaller0 entered promiscuous mode [ 160.774585][ T7366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1066'. [ 160.776915][ T7366] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1066'. [ 160.783502][ T7366] device syzkaller0 entered promiscuous mode [ 161.014528][ T7370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.016243][ T7370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.077832][ T7376] loop4: detected capacity change from 0 to 512 [ 161.092960][ T7376] EXT4-fs: Ignoring removed bh option [ 161.106534][ T7376] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 161.111725][ T7376] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 161.114167][ T7376] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1070: Corrupt directory, running e2fsck is recommended [ 161.121167][ T7376] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 161.122921][ T7376] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.1070: corrupted in-inode xattr [ 161.125376][ T7376] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1070: couldn't read orphan inode 15 (err -117) [ 161.127673][ T7376] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 161.940584][ T4302] EXT4-fs (loop4): unmounting filesystem. [ 162.149763][ T7402] loop2: detected capacity change from 0 to 64 [ 162.445001][ T7404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.448473][ T7404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.455050][ T7404] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1079'. [ 162.847159][ T7410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1082'. [ 162.849343][ T7410] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1082'. [ 162.895633][ T7412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.901191][ T7412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.147527][ T7420] loop2: detected capacity change from 0 to 64 [ 163.495719][ T7427] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1083'. [ 163.520724][ T7429] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 163.639274][ T7431] loop4: detected capacity change from 0 to 512 [ 163.656906][ T7431] EXT4-fs: Ignoring removed bh option [ 163.677586][ T7431] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 163.681825][ T7431] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 163.686673][ T7431] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1088: Corrupt directory, running e2fsck is recommended [ 163.698004][ T7431] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 163.706209][ T7431] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.1088: corrupted in-inode xattr [ 163.716066][ T7431] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1088: couldn't read orphan inode 15 (err -117) [ 163.719650][ T7431] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 164.286134][ T7440] loop2: detected capacity change from 0 to 64 [ 164.517868][ T4302] EXT4-fs (loop4): unmounting filesystem. [ 164.557539][ T7448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.566856][ T7448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.615672][ T7454] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.639868][ T7454] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.707519][ T7458] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.072004][ T7471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.100824][ T7471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.229715][ T7477] loop2: detected capacity change from 0 to 512 [ 165.231470][ T7477] EXT4-fs: Ignoring removed bh option [ 165.261848][ T7477] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 165.264331][ T7477] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 165.267498][ T7477] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1103: Corrupt directory, running e2fsck is recommended [ 165.283279][ T7477] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 165.292495][ T7477] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.1103: corrupted in-inode xattr [ 165.356077][ T7481] loop5: detected capacity change from 0 to 64 [ 165.618803][ T7477] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1103: couldn't read orphan inode 15 (err -117) [ 165.637081][ T7477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 166.084527][ T4307] EXT4-fs (loop2): unmounting filesystem. [ 166.199130][ T7492] binder: 7491:7492 ioctl 4018620d 0 returned -22 [ 166.201519][ T7492] binder: 7491:7492 ioctl c0306201 0 returned -14 [ 166.204075][ T7492] binder: 7491:7492 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 166.206504][ T7492] binder: 7492 RLIMIT_NICE not set [ 166.247598][ T7494] netlink: 'syz.5.1108': attribute type 1 has an invalid length. [ 166.262975][ T7494] device bond0 entered promiscuous mode [ 166.264192][ T7494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.283094][ T7494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.284515][ T7494] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 166.286737][ T7494] bond0: (slave vti0): Error -95 calling set_mac_address [ 166.500694][ T7508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.506014][ T7508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.726959][ T7516] loop5: detected capacity change from 0 to 512 [ 166.732946][ T7516] EXT4-fs: Ignoring removed bh option [ 166.745591][ T7516] EXT4-fs warning (device loop5): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 166.748575][ T7516] EXT4-fs warning (device loop5): dx_probe:881: Enable large directory feature to access it [ 166.750605][ T7516] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1116: Corrupt directory, running e2fsck is recommended [ 166.753745][ T7516] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 166.755516][ T7516] EXT4-fs error (device loop5): ext4_iget_extra_inode:4763: inode #15: comm syz.5.1116: corrupted in-inode xattr [ 166.762484][ T7516] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1116: couldn't read orphan inode 15 (err -117) [ 166.764812][ T7516] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 167.305792][ T7527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.315024][ T7527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.590843][ T7234] EXT4-fs (loop5): unmounting filesystem. [ 167.909140][ T4552] bond0 (unregistering): Released all slaves [ 167.915531][ T7533] netlink: 'syz.3.1121': attribute type 1 has an invalid length. [ 167.924904][ T7533] device bond2 entered promiscuous mode [ 167.926797][ T7533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.935511][ T7536] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.937072][ T7536] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 167.942833][ T7536] bond2: (slave vti0): Error -95 calling set_mac_address [ 168.164690][ T7555] device syzkaller0 entered promiscuous mode [ 168.169188][ T7558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.171731][ T7558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.173469][ T7559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1127'. [ 168.175062][ T7559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1127'. [ 168.223237][ T7559] device syzkaller0 entered promiscuous mode [ 168.352271][ T7565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.354553][ T7565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.397570][ T7567] loop2: detected capacity change from 0 to 512 [ 168.416889][ T7567] EXT4-fs: Ignoring removed bh option [ 168.450699][ T7567] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 168.455056][ T7567] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 168.463196][ T7567] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1132: Corrupt directory, running e2fsck is recommended [ 168.472659][ T7567] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 168.481097][ T7567] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.1132: corrupted in-inode xattr [ 168.485748][ T7567] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1132: couldn't read orphan inode 15 (err -117) [ 168.491732][ T7573] Cannot find add_set index 0 as target [ 168.493866][ T7567] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 168.621109][ T7573] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1128'. [ 169.117425][ T7587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1137'. [ 169.214590][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'. [ 169.222016][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'. [ 169.223783][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'. [ 169.225782][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'. [ 169.227591][ T7596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1140'. [ 169.261198][ T4307] EXT4-fs (loop2): unmounting filesystem. [ 169.331564][ T7606] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1143'. [ 169.337193][ T7606] device syzkaller0 entered promiscuous mode [ 169.441687][ T7615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.443746][ T7615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.649181][ T7618] loop3: detected capacity change from 0 to 64 [ 170.346178][ T7628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.353052][ T7628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.465729][ T7631] loop1: detected capacity change from 0 to 512 [ 170.472491][ T7631] EXT4-fs: Ignoring removed bh option [ 170.505886][ T7631] EXT4-fs warning (device loop1): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 170.511147][ T7631] EXT4-fs warning (device loop1): dx_probe:881: Enable large directory feature to access it [ 170.521328][ T7631] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1152: Corrupt directory, running e2fsck is recommended [ 170.526867][ T7631] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 170.528445][ T7631] EXT4-fs error (device loop1): ext4_iget_extra_inode:4763: inode #15: comm syz.1.1152: corrupted in-inode xattr [ 170.530757][ T7631] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.1152: couldn't read orphan inode 15 (err -117) [ 170.553584][ T7631] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 171.168043][ T7648] device syzkaller0 entered promiscuous mode [ 171.213116][ T7650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.214758][ T7650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.329501][ T4303] EXT4-fs (loop1): unmounting filesystem. [ 171.583423][ T7664] loop1: detected capacity change from 0 to 64 [ 172.077924][ T7682] device syzkaller0 entered promiscuous mode [ 172.132833][ T7680] xt_CT: You must specify a L4 protocol and not use inversions on it [ 172.882367][ T7694] netlink: 'syz.1.1173': attribute type 4 has an invalid length. [ 172.895179][ T7699] device syzkaller0 entered promiscuous mode [ 173.179214][ T7723] loop5: detected capacity change from 0 to 64 [ 174.025143][ T7742] xt_CT: You must specify a L4 protocol and not use inversions on it [ 174.446989][ T7750] device syzkaller0 entered promiscuous mode [ 174.455741][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.457741][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.987716][ T7769] loop3: detected capacity change from 0 to 64 [ 175.227556][ T7772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.231983][ T7772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.864848][ T7792] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.201520][ T7807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.203232][ T7807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.592523][ T7818] loop5: detected capacity change from 0 to 64 [ 176.899279][ T7824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.903799][ T7824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.498181][ T7848] ALSA: mixer_oss: invalid OSS volume '' [ 177.499501][ T7848] ALSA: mixer_oss: invalid OSS volume '' [ 177.578501][ T7854] __nla_validate_parse: 8 callbacks suppressed [ 177.578510][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'. [ 177.734126][ T7859] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.889948][ T7861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.893403][ T7861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.096435][ T7856] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1229'. [ 178.597506][ T7893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.605073][ T7893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.124647][ T7911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.126355][ T7911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.203306][ T7912] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.566430][ T7920] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1252'. [ 179.568719][ T7920] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1252'. [ 179.572449][ T27] kauditd_printk_skb: 46 callbacks suppressed [ 179.572462][ T27] audit: type=1107 audit(179.560:609): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='®Ÿb•i% ô¸‰t\<íæõ‘Ç?oÏ…VdCZLuÜx/«¹ÛkÜøt˜·¼mÙ®Á)âéŽ%' [ 179.585866][ T7920] fuse: Unknown parameter 'subj_user' [ 180.329790][ T7961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.331518][ T7961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.354457][ T7963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.357061][ T7963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.654626][ T7966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.660889][ T7966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.981065][ T7975] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.462330][ T7992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.467622][ T7992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.470698][ T7992] netlink: 'syz.5.1280': attribute type 1 has an invalid length. [ 181.490767][ T7992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.509077][ T7992] bond1: (slave geneve2): making interface the new active one [ 181.511908][ T7992] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 181.513595][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 181.700019][ T8008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.702059][ T8008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.723435][ T8010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.725146][ T8010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.731247][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.741649][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.210504][ T8024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.212961][ T8024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.553655][ T8042] xt_CT: You must specify a L4 protocol and not use inversions on it [ 182.925852][ T8049] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1302'. [ 183.008508][ T8050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.014421][ T8050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.022505][ T8050] netlink: 'syz.4.1303': attribute type 1 has an invalid length. [ 183.036199][ T8050] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.386308][ T8050] bond3: (slave geneve2): making interface the new active one [ 183.395380][ T8050] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 183.405468][ T8064] tipc: Enabling of bearer rejected, failed to enable media [ 183.408280][ T4363] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 183.490751][ T8070] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1309'. [ 183.676577][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.688649][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.877918][ T8087] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.275187][ T8093] tipc: Enabling of bearer rejected, failed to enable media [ 184.302226][ T8095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.304565][ T8095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.417427][ T8103] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1324'. [ 184.577928][ T8115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.581124][ T8115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.662432][ T8119] tipc: Enabling of bearer rejected, failed to enable media [ 184.733110][ T8125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.734770][ T8125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.847542][ T8130] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1337'. [ 185.190114][ T8145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.444033][ T8148] device syzkaller0 entered promiscuous mode [ 185.603864][ T8158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.606348][ T8158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.653977][ T8162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.655855][ T8162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.774661][ T8168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1354'. [ 185.797475][ T8170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.803441][ T8170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.941392][ T8174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.945409][ T8174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.270266][ T8181] device syzkaller0 entered promiscuous mode [ 186.593905][ T8210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.596565][ T8210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.671371][ T8219] device syzkaller0 entered promiscuous mode [ 186.763184][ T8223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1380'. [ 186.765139][ T8223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1380'. [ 186.799689][ T8210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.801364][ T8210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.966076][ T8239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.968036][ T8239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.121793][ T8250] device syzkaller0 entered promiscuous mode [ 187.124161][ T8252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.126640][ T8252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.184679][ T8256] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1395'. [ 187.358432][ T8262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.365344][ T8262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.368524][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.369617][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.551944][ T8268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.554517][ T8268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.683317][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1401'. [ 188.093415][ T8294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.095730][ T8294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.190543][ T8296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.214504][ T8296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.242675][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'. [ 188.265590][ T8302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.268480][ T8302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.773442][ T8317] device syzkaller0 entered promiscuous mode [ 188.906973][ T8324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.909642][ T8324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.851310][ T8324] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1424'. [ 200.865588][ T8335] tipc: Enabling of bearer rejected, failed to enable media [ 200.981722][ T8364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.984812][ T8364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.159420][ T8378] device ipvlan2 entered promiscuous mode [ 201.173944][ T8376] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1437'. [ 201.339462][ T8395] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 201.356770][ T8395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.359311][ T8395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.424693][ T8400] device syzkaller0 entered promiscuous mode [ 201.547794][ T8388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.550510][ T8388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.675474][ T8405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.681335][ T8405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.435193][ T8405] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1446'. [ 213.447822][ T8408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1447'. [ 213.507267][ T8432] tipc: Enabled bearer , priority 0 [ 213.617169][ T8441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.623740][ T8441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.629239][ T8430] tipc: Disabling bearer [ 213.671453][ T8443] binder: 8442:8443 tried to acquire reference to desc 0, got 1 instead [ 213.673550][ T8443] binder: 8442:8443 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 213.676117][ T8443] binder: 8443 RLIMIT_NICE not set [ 213.677173][ T8443] binder: 8443 RLIMIT_NICE not set [ 213.678490][ T8443] binder: 8442:8443 got reply transaction with bad transaction stack, transaction 15 has target 8442:8443 [ 213.680479][ T8443] binder: 8442:8443 transaction reply to 0:0 failed 16/29201/-71, size 0-0 line 2961 [ 213.685111][ T8443] binder: 8442:8443 got new transaction with bad transaction stack, transaction 15 has target 8442:8443 [ 213.687298][ T8443] binder: 8442:8443 transaction call to 8442:0 failed 17/29201/-71, size 0-0 line 3105 [ 213.718588][ T4349] binder: release 8442:8443 transaction 15 out, still active [ 213.720153][ T4349] binder: undelivered TRANSACTION_ERROR: 29201 [ 213.745243][ T4349] binder: release 8442:8443 transaction 15 in, still active [ 213.746677][ T4349] binder: send failed reply for transaction 15, target dead [ 213.859792][ T8456] device syzkaller0 entered promiscuous mode [ 213.880239][ T8453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.882782][ T8453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.069503][ T8460] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1465'. [ 214.182207][ T8462] device syzkaller0 entered promiscuous mode [ 214.195398][ T8466] netlink: 51 bytes leftover after parsing attributes in process `syz.5.1468'. [ 214.386123][ T8476] tipc: Enabled bearer , priority 0 [ 214.484815][ T8474] tipc: Disabling bearer [ 214.492090][ T8480] device syzkaller0 entered promiscuous mode [ 214.615667][ T8487] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1478'. [ 214.685531][ T8491] netlink: 51 bytes leftover after parsing attributes in process `syz.4.1480'. [ 214.795894][ T8499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.804780][ T8499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.820182][ T8501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.821782][ T8501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.836806][ T8497] device syzkaller0 entered promiscuous mode [ 215.014015][ T8509] device syzkaller0 entered promiscuous mode [ 215.351255][ T8521] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1493'. [ 215.465233][ T8524] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1494'. [ 215.617477][ T8540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.628562][ T8537] device syzkaller0 entered promiscuous mode [ 215.633088][ T8540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.713746][ T8540] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1502'. [ 215.718869][ T8538] device syzkaller0 entered promiscuous mode [ 215.957951][ T8549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1506'. [ 216.184071][ T8568] device syzkaller0 entered promiscuous mode [ 216.219601][ T8572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.221254][ T8572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.336424][ T8570] device syzkaller0 entered promiscuous mode [ 216.879568][ T8602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.884690][ T8602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.954548][ T8604] device syzkaller0 entered promiscuous mode [ 217.068279][ T8606] tipc: Can't bind to reserved service type 2 [ 217.178504][ T8610] device syzkaller0 entered promiscuous mode [ 217.568232][ T8632] netlink: 'syz.2.1537': attribute type 4 has an invalid length. [ 217.812748][ T8636] device syzkaller0 entered promiscuous mode [ 217.914747][ T8642] use of bytesused == 0 is deprecated and will be removed in the future, [ 217.917583][ T8642] use the actual size instead. [ 218.179079][ T8649] device syzkaller0 entered promiscuous mode [ 218.285714][ T8659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.287447][ T8659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.435656][ T8668] device syzkaller0 entered promiscuous mode [ 219.011976][ T8686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.013592][ T8686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.098457][ T8690] device syzkaller0 entered promiscuous mode [ 219.266367][ T8698] __nla_validate_parse: 7 callbacks suppressed [ 219.266377][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1568'. [ 219.400696][ T8711] device syzkaller0 entered promiscuous mode [ 219.411297][ T8713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.413041][ T8713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.428364][ T8713] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1575'. [ 220.093424][ T8736] capability: warning: `syz.3.1583' uses 32-bit capabilities (legacy support in use) [ 220.270333][ T8741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1585'. [ 220.406924][ T8754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.410629][ T8754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.495965][ T8754] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1590'. [ 220.828289][ T8779] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1600'. [ 220.870981][ T8782] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1601'. [ 221.345224][ T8820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.347928][ T8820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.386803][ T8824] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1616'. [ 221.447467][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1617'. [ 221.455672][ T8828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.457492][ T8828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.765019][ T8856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1626'. [ 221.977035][ T8874] netlink: 'syz.1.1630': attribute type 1 has an invalid length. [ 222.035330][ T8874] device bond2 entered promiscuous mode [ 222.063600][ T8874] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.288213][ T8910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.292371][ T8910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.595262][ T8931] netlink: 'syz.2.1650': attribute type 1 has an invalid length. [ 222.605253][ T8931] device bond2 entered promiscuous mode [ 222.607186][ T8931] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.034974][ T8968] netlink: 'syz.5.1663': attribute type 1 has an invalid length. [ 223.074499][ T8968] device bond0 entered promiscuous mode [ 223.075708][ T8968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.393707][ T8995] device syzkaller0 entered promiscuous mode [ 223.436249][ T9003] ±ÿÿÿÿa–ïD: renamed from lo [ 223.567465][ T9011] netlink: 'syz.2.1678': attribute type 1 has an invalid length. [ 223.573098][ T9011] device bond0 entered promiscuous mode [ 223.574242][ T9011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.699774][ T9024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.701502][ T9024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.727523][ T9024] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1683'. [ 224.079825][ T9064] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 224.082860][ T9064] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 224.098635][ T9064] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 224.101844][ T9064] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 224.104024][ T9064] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 224.106291][ T9064] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 224.867402][ T9117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.871889][ T9117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.120096][ T55] bond0 (unregistering): Released all slaves [ 225.136401][ T9117] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1715'. [ 226.204838][ T9192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.218335][ T9192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.365637][ T9199] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1745'. [ 226.799563][ T55] bond0 (unregistering): Released all slaves [ 226.808588][ T9204] device syzkaller0 entered promiscuous mode [ 226.816065][ T9214] device syzkaller0 entered promiscuous mode [ 226.873394][ T9214] tipc: Started in network mode [ 226.874338][ T9214] tipc: Node identity 1e3015b983f1, cluster identity 4711 [ 226.875782][ T9214] tipc: Enabled bearer , priority 0 [ 226.877056][ T9227] device syzkaller0 entered promiscuous mode [ 226.938504][ T9213] tipc: Resetting bearer [ 226.979222][ T9213] tipc: Disabling bearer [ 227.286020][ T9256] device syzkaller0 entered promiscuous mode [ 227.328224][ T9260] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 227.328224][ T9260] The task syz.1.1761 (9260) triggered the difference, watch for misbehavior. [ 227.385384][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1766'. [ 227.462959][ T9264] device syzkaller0 entered promiscuous mode [ 227.466221][ T9264] tipc: Enabled bearer , priority 0 [ 227.474747][ T9263] tipc: Resetting bearer [ 227.520217][ T9263] tipc: Disabling bearer [ 227.627116][ T9284] device syzkaller0 entered promiscuous mode [ 227.777727][ T9290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.781495][ T9290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.918615][ T9294] device syzkaller0 entered promiscuous mode [ 228.023556][ T9298] tipc: Enabling of bearer rejected, already enabled [ 228.154181][ T9306] device syzkaller0 entered promiscuous mode [ 228.161582][ T9306] tipc: Enabled bearer , priority 0 [ 228.188675][ T9305] tipc: Resetting bearer [ 228.239848][ T9305] tipc: Disabling bearer [ 228.372836][ T9321] device syzkaller0 entered promiscuous mode [ 228.553947][ T9332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.556434][ T9332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.585047][ T9332] batman_adv: batadv0: Adding interface: macvtap1 [ 228.586237][ T9332] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.593985][ T9332] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 228.597211][ T9330] device syzkaller0 entered promiscuous mode [ 228.953731][ T9332] batman_adv: batadv0: Removing interface: macvtap1 [ 229.086062][ T9354] device syzkaller0 entered promiscuous mode [ 229.189033][ T9362] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.361194][ T9357] tipc: Enabled bearer , priority 0 [ 229.370594][ T9341] tipc: Resetting bearer [ 229.401402][ T9364] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1805'. [ 229.403129][ T9364] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1805'. [ 229.404719][ T9364] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1805'. [ 229.431746][ T9341] tipc: Disabling bearer [ 229.512728][ T9370] device syzkaller0 entered promiscuous mode [ 229.534889][ T9374] device syzkaller0 entered promiscuous mode [ 229.874129][ T9390] loop2: detected capacity change from 0 to 64 [ 230.300658][ T27] audit: type=1326 audit(230.290:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.5.1820" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94f77aa8 code=0x7ffc0000 [ 230.306153][ T27] audit: type=1326 audit(230.290:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.5.1820" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=231 compat=0 ip=0xffff94f77aa8 code=0x7ffc0000 [ 230.319265][ T27] audit: type=1326 audit(230.290:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9405 comm="syz.5.1820" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94f77aa8 code=0x7ffc0000 [ 230.385388][ T9414] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1824'. [ 241.969353][ T9427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1830'. [ 242.014161][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1837'. [ 242.236638][ T9463] loop5: detected capacity change from 0 to 64 [ 242.501413][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1842'. [ 242.557430][ T9477] device syzkaller0 entered promiscuous mode [ 242.584541][ T9477] tipc: Enabled bearer , priority 0 [ 242.586858][ T9476] tipc: Resetting bearer [ 242.629053][ T9476] tipc: Disabling bearer [ 242.637287][ T9482] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1848'. [ 242.643297][ T9483] device syzkaller0 entered promiscuous mode [ 242.716634][ T9489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.721342][ T9489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.954808][ T9501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.956446][ T9501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.078941][ T9509] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1860'. [ 243.159741][ T9511] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1861'. [ 243.256457][ T9516] device syzkaller0 entered promiscuous mode [ 243.264223][ T9516] tipc: Enabled bearer , priority 0 [ 243.266101][ T9515] tipc: Resetting bearer [ 243.319282][ T9515] tipc: Disabling bearer [ 243.393157][ T9524] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1865'. [ 243.606964][ T9534] loop1: detected capacity change from 0 to 64 [ 243.922797][ T9538] device syzkaller0 entered promiscuous mode [ 244.130902][ T9549] device syzkaller0 entered promiscuous mode [ 244.408811][ T9570] device ipvlan2 entered promiscuous mode [ 244.457463][ T9579] tipc: Enabled bearer , priority 0 [ 244.470228][ T9576] tipc: Disabling bearer [ 244.528148][ T27] audit: type=1326 audit(244.500:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.5.1893" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94f77aa8 code=0x7ffc0000 [ 244.532504][ T27] audit: type=1326 audit(244.500:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.5.1893" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94f77aa8 code=0x7ffc0000 [ 244.547338][ T27] audit: type=1326 audit(244.500:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.5.1893" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94f77aa8 code=0x7ffc0000 [ 244.562347][ T27] audit: type=1326 audit(244.500:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.5.1893" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff94f77aa8 code=0x7ffc0000 [ 244.576140][ T27] audit: type=1326 audit(244.500:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.5.1893" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94f77aa8 code=0x7ffc0000 [ 244.586816][ T27] audit: type=1326 audit(244.500:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.5.1893" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94f77aa8 code=0x7ffc0000 [ 244.730727][ T9597] loop3: detected capacity change from 0 to 64 [ 244.919570][ T27] audit: type=1326 audit(244.500:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.5.1893" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94f77aa8 code=0x7ffc0000 [ 244.965633][ T27] audit: type=1326 audit(244.500:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.5.1893" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=285 compat=0 ip=0xffff94f77aa8 code=0x7ffc0000 [ 244.985238][ T27] audit: type=1326 audit(244.500:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.5.1893" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff94f77aa8 code=0x7ffc0000 [ 244.999917][ T27] audit: type=1326 audit(244.500:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.5.1893" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff94f77aa8 code=0x7ffc0000 [ 245.011720][ T9607] device ipvlan2 entered promiscuous mode [ 245.242204][ T9621] tipc: Enabled bearer , priority 0 [ 245.244811][ T9620] tipc: Disabling bearer [ 245.374934][ T9625] device syzkaller0 entered promiscuous mode [ 245.401339][ T9627] netlink: 'syz.3.1911': attribute type 1 has an invalid length. [ 245.413360][ T9627] device bond0 entered promiscuous mode [ 245.414550][ T9627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.587031][ T9633] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1913'. [ 245.661806][ T9634] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.957185][ T9637] device ipvlan3 entered promiscuous mode [ 246.174960][ T9652] tipc: Enabled bearer , priority 0 [ 246.310221][ T9651] tipc: Disabling bearer [ 246.417434][ T9661] loop2: detected capacity change from 0 to 64 [ 246.721415][ T9670] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1926'. [ 246.724322][ T9669] netlink: 'syz.1.1924': attribute type 1 has an invalid length. [ 246.740234][ T9669] device bond3 entered promiscuous mode [ 246.741783][ T9669] 8021q: adding VLAN 0 to HW filter on device bond3 [ 246.910566][ T9675] device ipvlan3 entered promiscuous mode [ 247.007804][ T9684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.012501][ T9684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.419857][ T9702] xt_CT: You must specify a L4 protocol and not use inversions on it [ 248.049866][ T5808] bond0 (unregistering): Released all slaves [ 248.057112][ T9712] device ipvlan4 entered promiscuous mode [ 248.396875][ T9726] loop5: detected capacity change from 0 to 64 [ 248.818457][ T2063] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.819888][ T2063] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.071532][ T9743] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.285743][ T9746] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1954'. [ 249.538858][ T9755] usb usb8: check_ctrlrecip: process 9755 (syz.1.1958) requesting ep 01 but needs 81 [ 249.540697][ T9755] vhci_hcd: default hub control req: 020f v0002 i0001 l0 [ 249.604795][ T9762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.618027][ T9762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.792396][ T9772] device veth0 entered promiscuous mode [ 249.805007][ T9772] device veth0 left promiscuous mode [ 250.054207][ T9783] loop3: detected capacity change from 0 to 64 [ 250.897614][ T9803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.899805][ T9803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.535799][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1990'. [ 252.039234][ T9842] loop2: detected capacity change from 0 to 64 [ 252.673034][ T9857] netlink: 'syz.1.1999': attribute type 4 has an invalid length. [ 252.898322][ T9863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2002'. [ 253.307487][ T9883] device syzkaller0 entered promiscuous mode [ 253.318543][ T9878] device syzkaller0 entered promiscuous mode [ 253.326953][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.328406][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.329583][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.330748][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.331997][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.333260][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.334513][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.335747][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.336978][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.338244][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.339474][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.340709][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.341897][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.343094][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.344290][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.345518][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.346835][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.348096][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.349310][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.350573][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.351819][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.353065][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.354333][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.355559][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.356796][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.358016][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.359398][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.360601][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.361830][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.363048][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.364269][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.365483][ T9883] tc action pedit offset must be on 32 bit boundaries [ 253.366748][ T9883] net_ratelimit: 10 callbacks suppressed [ 253.366760][ T9883] TC_ACT_REPEAT abuse ? [ 253.370218][ T4320] Bluetooth: hci1: command 0x0409 tx timeout [ 253.781514][ T9899] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2016'. [ 254.102283][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.111074][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.225274][ T9922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.227644][ T9922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.380640][ T9926] loop3: detected capacity change from 0 to 64 [ 254.861215][ T9932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2031'. [ 254.984759][ T9940] xt_hashlimit: size too large, truncated to 1048576 [ 255.437149][ T9960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.452001][ T9960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.540222][ T9964] tipc: Enabled bearer , priority 0 [ 255.549252][ T9964] device syzkaller0 entered promiscuous mode [ 255.621618][ T9965] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2044'. [ 255.632004][ T9964] tipc: Resetting bearer [ 255.648591][ T9963] tipc: Resetting bearer [ 255.729315][ T9963] tipc: Disabling bearer [ 256.028034][ T9980] device syzkaller0 entered promiscuous mode [ 256.088342][ T9986] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2052'. [ 256.738875][T10024] device syzkaller0 entered promiscuous mode [ 257.512670][T10049] device syzkaller0 entered promiscuous mode [ 257.919304][T10066] netlink: 'syz.2.2083': attribute type 1 has an invalid length. [ 257.934846][T10066] device bond3 entered promiscuous mode [ 257.936134][T10066] 8021q: adding VLAN 0 to HW filter on device bond3 [ 258.272487][T10082] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2089'. [ 258.374843][T10085] device syzkaller0 entered promiscuous mode [ 258.638956][T10091] device syzkaller0 entered promiscuous mode [ 258.897382][T10098] netlink: 'syz.5.2097': attribute type 1 has an invalid length. [ 258.965116][T10098] device bond2 entered promiscuous mode [ 258.981478][T10098] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.007428][T10113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2103'. [ 259.020177][T10108] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2101'. [ 259.191602][T10125] device syzkaller0 entered promiscuous mode [ 259.349305][T10128] device syzkaller0 entered promiscuous mode [ 259.658099][T10149] netlink: 'syz.5.2116': attribute type 1 has an invalid length. [ 259.696712][T10149] device bond3 entered promiscuous mode [ 259.698024][T10149] 8021q: adding VLAN 0 to HW filter on device bond3 [ 259.722039][T10151] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2118'. [ 260.027507][T10166] device syzkaller0 entered promiscuous mode [ 260.255727][T10169] device syzkaller0 entered promiscuous mode [ 271.368363][ T4320] Bluetooth: hci5: command 0x0406 tx timeout [ 272.411731][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2132'. [ 272.416499][T10192] netlink: 'syz.3.2131': attribute type 1 has an invalid length. [ 272.794094][T10238] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2147'. [ 272.910963][T10243] device syzkaller0 entered promiscuous mode [ 273.285345][T10253] tipc: Enabled bearer , priority 0 [ 273.289969][T10253] device syzkaller0 entered promiscuous mode [ 273.366739][T10255] device syzkaller0 entered promiscuous mode [ 273.369325][T10258] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2151'. [ 273.382240][T10253] tipc: Resetting bearer [ 273.387802][T10252] tipc: Resetting bearer [ 273.501125][T10252] tipc: Disabling bearer [ 273.716773][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2159'. [ 273.764615][T10274] device syzkaller0 entered promiscuous mode [ 274.182884][T10300] device syzkaller0 entered promiscuous mode [ 274.447744][T10308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2175'. [ 274.489213][T10312] device syzkaller0 entered promiscuous mode [ 274.996472][T10335] device syzkaller0 entered promiscuous mode [ 275.090111][T10338] device syzkaller0 entered promiscuous mode [ 275.092407][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2189'. [ 275.353441][T10353] device syzkaller0 entered promiscuous mode [ 275.561959][T10366] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2200'. [ 275.805966][T10377] device syzkaller0 entered promiscuous mode [ 276.142093][T10391] device syzkaller0 entered promiscuous mode [ 276.226573][T10393] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2212'. [ 276.575014][T10407] device syzkaller0 entered promiscuous mode [ 288.943489][T10425] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2224'. [ 289.339117][T10483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.340737][T10483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.364747][T10487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2245'. [ 289.505195][T10493] device syzkaller0 entered promiscuous mode [ 289.923035][T10505] device syzkaller0 entered promiscuous mode [ 290.030536][T10511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.032243][T10511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.269035][T10511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.271618][T10511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.304186][T10526] device syzkaller0 entered promiscuous mode [ 290.522259][T10536] device syzkaller0 entered promiscuous mode [ 290.915111][T10551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.943350][T10551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.969925][T10542] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.972005][T10542] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.384853][T10542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 291.404564][T10542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 291.795454][T10542] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.797318][T10542] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.799135][T10542] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.800661][T10542] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.089175][T10576] device syzkaller0 entered promiscuous mode [ 292.147986][T10590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.151645][T10590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.217489][T10588] device syzkaller0 entered promiscuous mode [ 292.566138][T10616] device syzkaller0 entered promiscuous mode [ 292.610814][T10618] input: syz1 as /devices/virtual/input/input3 [ 293.151918][T10657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.153844][T10657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.742579][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 293.742589][ T27] audit: type=1326 audit(293.730:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.4.2308" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 293.749974][ T27] audit: type=1326 audit(293.730:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.4.2308" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 293.754096][ T27] audit: type=1326 audit(293.740:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.4.2308" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 293.761177][ T27] audit: type=1326 audit(293.750:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.4.2308" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 293.768504][ T27] audit: type=1326 audit(293.750:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.4.2308" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 293.772787][ T27] audit: type=1326 audit(293.750:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.4.2308" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=110 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 293.777108][ T27] audit: type=1326 audit(293.750:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.4.2308" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 293.788135][ T27] audit: type=1326 audit(293.750:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.4.2308" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff90577aa8 code=0x7ffc0000 [ 293.792089][ T27] audit: type=1326 audit(293.770:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.4.2308" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff913b581c code=0x7ffc0000 [ 293.808102][ T27] audit: type=1326 audit(293.770:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10666 comm="syz.4.2308" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff913b581c code=0x7ffc0000 [ 294.900519][ T28] INFO: task syz-executor:4308 blocked for more than 143 seconds. [ 294.901970][ T28] Not tainted syzkaller #0 [ 294.902923][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.904467][ T28] task:syz-executor state:D stack:0 pid:4308 ppid:1 flags:0x00000009 [ 294.906184][ T28] Call trace: [ 294.906780][ T28] __switch_to+0x2f4/0x550 [ 294.907600][ T28] __schedule+0xdd0/0x1b0c [ 294.918337][ T28] schedule+0xc4/0x170 [ 294.919086][ T28] wb_wait_for_completion+0x150/0x29c [ 294.920270][ T28] __writeback_inodes_sb_nr+0x1b4/0x224 [ 294.921268][ T28] writeback_inodes_sb+0x78/0x8c [ 294.922309][ T28] sync_filesystem+0xa0/0x218 [ 294.923146][ T28] generic_shutdown_super+0x70/0x324 [ 294.924262][ T28] kill_block_super+0x70/0xdc [ 294.925053][ T28] deactivate_locked_super+0xac/0x120 [ 294.927221][ T28] deactivate_super+0xe4/0x104 [ 294.928047][ T28] cleanup_mnt+0x390/0x418 [ 294.930100][ T28] __cleanup_mnt+0x20/0x30 [ 294.930902][ T28] task_work_run+0x1ec/0x278 [ 294.933960][ T28] do_notify_resume+0x1fa0/0x2aa4 [ 294.934856][ T28] el0_svc+0x98/0x128 [ 294.936798][ T28] el0t_64_sync_handler+0x84/0xf0 [ 294.937653][ T28] el0t_64_sync+0x18c/0x190 [ 294.940766][ T28] [ 294.940766][ T28] Showing all locks held in the system: [ 294.943260][ T28] 1 lock held by rcu_tasks_kthre/12: [ 294.944121][ T28] #0: ffff800015417df0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 [ 294.949464][ T28] 1 lock held by rcu_tasks_trace/13: [ 294.950407][ T28] #0: ffff800015418610 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 [ 294.955897][ T28] 1 lock held by khungtaskd/28: [ 294.956744][ T28] #0: ffff800015417480 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 294.961955][ T28] 2 locks held by kworker/u4:2/39: [ 294.962820][ T28] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6b8/0x13a4 [ 294.968270][ T28] #1: ffff80001cf17c20 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x6fc/0x13a4 [ 294.972560][ T28] 2 locks held by getty/4083: [ 294.973399][ T28] #0: ffff0000d6f95098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 294.977478][ T28] #1: ffff80001dfa62f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2ec/0xfa0 [ 294.981149][ T28] 1 lock held by syz-executor/4308: [ 294.983235][ T28] #0: ffff0000cc9f60e0 (&type->s_umount_key#48){++++}-{3:3}, at: deactivate_super+0xdc/0x104 [ 294.987359][ T28] 3 locks held by kworker/1:3/4351: [ 294.988348][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6b8/0x13a4 [ 294.990235][ T28] #1: ffff800020cf7c20 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x6fc/0x13a4 [ 294.992068][ T28] #2: ffff8000178b6008 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 294.993592][ T28] 3 locks held by kworker/u4:7/4453: [ 294.994586][ T28] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6b8/0x13a4 [ 294.996577][ T28] #1: ffff800020fe7c20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6fc/0x13a4 [ 294.998585][ T28] #2: ffff8000178b6008 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 295.000167][ T28] 2 locks held by kworker/u4:10/4622: [ 295.001073][ T28] 1 lock held by syz.1.2292/10615: [ 295.002120][ T28] #0: ffff8000178b6008 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 295.003743][ T28] 1 lock held by syz.5.2295/10622: [ 295.004630][ T28] #0: ffff8000178b6008 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 295.006385][ T28] 1 lock held by syz.5.2295/10625: [ 295.007331][ T28] #0: ffff8000178b6008 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x650/0xcdc [ 295.009350][ T28] 1 lock held by syz.5.2295/10631: [ 295.010231][ T28] #0: ffff8000178b6008 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 295.011979][ T28] 1 lock held by syz.5.2295/10638: [ 295.012944][ T28] #0: ffff8000178b6008 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 295.014759][ T28] 1 lock held by syz.3.2301/10641: [ 295.015574][ T28] #0: ffff8000178b6008 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 295.017287][ T28] 1 lock held by syz.3.2301/10648: [ 295.018285][ T28] #0: ffff8000178b6008 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x650/0xcdc [ 295.020137][ T28] 1 lock held by syz.3.2301/10653: [ 295.021032][ T28] #0: ffff8000178b6008 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x650/0xcdc [ 295.023042][ T28] 1 lock held by syz.3.2301/10658: [ 295.023920][ T28] #0: ffff8000178b6008 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 295.025646][ T28] 1 lock held by syz.2.2306/10663: [ 295.026551][ T28] #0: ffff8000178b6008 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x650/0xcdc [ 295.028537][ T28] [ 295.028954][ T28] ============================================= [ 295.028954][ T28] [ 295.030572][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 295.031721][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 295.033067][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 295.034935][ T28] Call trace: [ 295.035549][ T28] dump_backtrace+0x1c0/0x1ec [ 295.036412][ T28] show_stack+0x2c/0x3c [ 295.037216][ T28] __dump_stack+0x30/0x40 [ 295.038041][ T28] dump_stack_lvl+0xf4/0x15c [ 295.038903][ T28] dump_stack+0x1c/0x5c [ 295.039654][ T28] panic+0x2f8/0x7ac [ 295.040385][ T28] hung_task_panic+0x0/0x2c [ 295.041244][ T28] kthread+0x250/0x2d8 [ 295.042047][ T28] ret_from_fork+0x10/0x20 [ 295.042901][ T28] SMP: stopping secondary CPUs [ 295.043824][ T28] Kernel Offset: disabled [ 295.044673][ T28] CPU features: 0x080000,000f0097,a65bfea7 [ 295.045800][ T28] Memory Limit: none [ 295.384640][ T28] Rebooting in 86400 seconds..