last executing test programs: 2m17.090592529s ago: executing program 2 (id=388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="700200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000044020380400200800800034000000004"], 0x270}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 2m16.774741755s ago: executing program 2 (id=394): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000200000000000000010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xd8efb076b3815638, 0xffffffffffffffff, 0x4000) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1c, 0xcafe28741a3524c9, 0x70bd29, 0x20000, {0x7, 0x0, 0x0, r3, 0x80, 0x8f, 0xb}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00'}, 0x18) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000280)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r5, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780)={r6}, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r1, r7, 0x2f, 0x30, 0xffffffffffffffff, @void, @void, @void, @value=r6}, 0x20) 2m14.391922057s ago: executing program 2 (id=409): syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x8, 0x4}, {0x3, 0x3}}}}, 0x11) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 2m14.275244676s ago: executing program 2 (id=411): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m14.248732909s ago: executing program 2 (id=412): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x10) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x41, &(0x7f0000000200)={0xa, 0x4e23, 0x10003, @loopback, 0x7}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x9}, 0xc) 2m13.787551506s ago: executing program 2 (id=414): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 1m58.745139571s ago: executing program 32 (id=414): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$isdn_base(0x22, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) 4.946088781s ago: executing program 1 (id=1708): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x80, 0x3, 0x400, 0x8, 0xa, 0xa9, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x40004) 4.886721076s ago: executing program 1 (id=1709): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r1, &(0x7f0000000300)='reno\x00', 0xfdef) 4.837254539s ago: executing program 1 (id=1710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000024c0)={@val={0x0, 0x800}, @val={0x0, 0x0, 0x3}, @ipv4=@icmp={{0x9, 0x4, 0x1, 0x16, 0x2c, 0x65, 0x0, 0x4, 0x1, 0x0, @remote, @broadcast, {[@generic={0x94, 0xf, "f00c8e76d0966f9a2b2407c08a"}]}}, @address_reply={0x12, 0x0, 0x0, 0xffff}}}, 0xff04) 4.760492366s ago: executing program 4 (id=1714): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000200000000000000010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000006"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1c, 0xcafe28741a3524c9, 0x70bd29, 0x20000, {0x7, 0x0, 0x0, r3, 0x80, 0x8f, 0xb}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00'}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000280)='GPL\x00'}, 0x90) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r1, r5, 0x2f, 0x30}, 0x20) 4.69927646s ago: executing program 1 (id=1715): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) accept4(r0, &(0x7f0000000440)=@can, &(0x7f0000000340)=0x80, 0x80000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x10) 3.660176255s ago: executing program 1 (id=1726): syz_usb_connect(0x2, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="120110019bde521023398a71d7d801020301090224"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setscheduler(0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x5}, &(0x7f00000000c0)=0x8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 3.560530843s ago: executing program 4 (id=1727): socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080000000200000004"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.59931811s ago: executing program 4 (id=1737): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xd8efb076b3815638, 0xffffffffffffffff, 0x4000) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1c, 0xcafe28741a3524c9, 0x70bd29, 0x20000, {0x7, 0x0, 0x0, r3, 0x80, 0x8f, 0xb}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00'}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000280)='GPL\x00'}, 0x90) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r1, r5, 0x2f, 0x30}, 0x20) 2.077630732s ago: executing program 5 (id=1740): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x80, 0x3, 0x400, 0x8, 0xa, 0xa9, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x40004) 2.076650512s ago: executing program 5 (id=1741): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) socket$kcm(0x10, 0x5, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) 1.770342497s ago: executing program 0 (id=1743): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000780)={@val={0x800e}, @void, @eth={@broadcast, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "4be76a", 0x4c, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, @remote, {[@fragment={0x0, 0x0, 0x4, 0x1, 0x0, 0x2, 0x65}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0xc, 0x1, 0x2, 0x3, 0x0, 0x3, 0x0, 0x4}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x2, {{0x1, 0x2, 0x4, 0x1, 0x1, 0x1, 0x4, 0x27}, 0x2, {0x6, 0x6, 0x2, 0x19, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}}, 0x86) 1.747596979s ago: executing program 3 (id=1744): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000380)}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000540)={&(0x7f00000001c0)="2f679f9cb3fe9ed77b38081842f61237120c91a1aaf5cae4259e7c98985082040d05e31a667017493b4644a231fb64312beffde5ef782f3a1a80aa22c030cbd357158fbe975c688375", &(0x7f0000000040)=""/44, &(0x7f0000000280)="a58c08ca796c510b30", &(0x7f0000000400)="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", 0xfffffffa, r0}, 0x38) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x2, @mcast1, 0x2}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r3 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaa0baaaaaaaaaaaa08004500"], 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c630faca20180c20000000800450000240000e0000011"], 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000003c0)='@', 0x1}], 0x1) 1.699489193s ago: executing program 3 (id=1745): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[], 0x178}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)="d3a16d8b85f9", 0x6}, {&(0x7f0000000480)="25b1fd659b2af482c4e6f5b59fbcac685ac9887f8f0526b236852710581b7574a271a9c86e93aeb9205a02f5ad49dc9eb26fe1f5f949a0520f8ca6f83a5eb1d34f0bc5ee2c33618326dba016b39913e6530e849d2837bf5d0688190d11248dd332615b3eae4ed140f4f2537e8c3575468c78648e5edd18330cb58620e9f60443cf4759e099ddc5da7166333affa8920d18721175ce0cac2a", 0x98}, {&(0x7f0000000540)="168026728fab9e0106a566807ebcb62f0befa409192fd688f88b06c03dd80462cdb5c8ce56961e6cd39878f7e664091b0c21da4a7d60dc79a5158fbc34cf42dd5c30e3d4a39c3b2d75a943f9fd2c3d4c34dc491e1a296bb310b53de30c645f064035efef7d3a4f41fa3387f1df30844bd2f6367e11a2c22b60ff89bec6b9e5ecd51ac06d8101da909b15f0cd1104c3d5a88382b3fdf374934c996838622acbe1915fdc136b983411095432a6", 0xac}, {&(0x7f0000000600)="ee722cb5d627399c5264cf36b89b76adec0956e43f2d436b4cdbb0b348c79684b69d65f612db86f1bdaeb8f552ff538b4a14ebac2116016ad1537c046280c1df7a68341f941c377cb7841f0f67121b5b541c44a34e91155abf2e43fbe890d3b2de0f87e7f6bfb1659663c0c658fece5fa16a443f73df7edf2b3a296523c17153aee0c4550dac5d89a300a42e051b3841318b6b2199c14cbbc206fcdd17d034c276d639a860b869a5419d7ee8c46862fc27dac162681e865237e7a6b1a0defa6669756684fb4ede363f3e986acad51255b4b5a2533e900ab33c8046d18b6df982", 0xe0}, {&(0x7f0000000700)="6b04e779b78da974648c187b55504c15660a9fb31a909107f5d669f5ceb2c9f60d540671a67c225e5b0647479d65e8eb984dfcd93601ee8ec4b97d816b638cc5024d99f7ccebdce0d6667f4cbd940fb8da6ab44d2fba2c4166af735a5681f85dc84ad486e25fca9d1c56710d67d7b5c6e5f2e427fc6be3b781928eeebc7107b65789a1a099f7e7650259ee18edbff03414bb28210da345b192064cf022de2ea0b9860057e36d891841982f77f77398d6c899dcf4b76a3cdd6a0976816c7c3133fe2fb1345e319012a8082b93e0d8f7fdac370b576bace703ff67801f920717", 0xdf}, {0x0}, {&(0x7f0000000800)="6bd85e29e17c539479c8da3e3be8e0d57133e30898ebb4fd43f66852fbda046a9d0d2b807a603b1a701c093bdac6c7ecf585cd0ded74a79badcaef73cf8a24e646f04119dfbb5b3a04925ad83b36cadac1cf876a2937e98e7ac1590ff25fa8b76ae5d058ac3b8a4b457d25d2d588c0d4828f450cf38c748cfa39dcdd71f060dff36be970edce6dad5bfe35e0c0fd4b56f1aa", 0x92}, {&(0x7f00000008c0)="497428122960cc913ef8754be0381b104bae07bcaa887010b9cdf728ae1d5a2f", 0x20}, {&(0x7f0000001700)="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", 0x1b5}], 0x9}}], 0x2, 0x0) 1.657235906s ago: executing program 3 (id=1746): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000f80)=[{&(0x7f0000000c40)="1743932e9233a5fc048cf6888f5c7a2e4a8f137f715919624eb920a7e16c82ab28b48828aa1fca10163e6d46c4261607f3a513c0de3a083af43a72331cd60894ca", 0x41}, {0x0}, {&(0x7f0000000d40)}, {0x0}], 0x4) 1.594820721s ago: executing program 4 (id=1747): socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="01000000080000000200000004"], 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x48) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x3}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.515407418s ago: executing program 0 (id=1748): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r6}) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f00000002c0)=0x20, 0x4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r3, 0x4) 1.065050014s ago: executing program 5 (id=1749): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000540)=""/167, 0xa7}], 0x2}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 973.963391ms ago: executing program 3 (id=1750): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x42280, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x7fff}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x9}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 943.374364ms ago: executing program 5 (id=1751): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1a12ff000000004fa100000000000007010000f8ffffffb702000008000000b703000000000000850000009900000095"], &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) 847.558162ms ago: executing program 5 (id=1752): unshare(0x20000400) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001ec0)='ns/time\x00') r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x70, 0x6) 847.240432ms ago: executing program 3 (id=1753): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) accept4(r0, &(0x7f0000000440)=@can, &(0x7f0000000340)=0x80, 0x80000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, 0x0, 0x10) 677.695955ms ago: executing program 0 (id=1754): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x34, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xa}, {0xe, 0x6}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) 651.012457ms ago: executing program 0 (id=1755): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) 635.559099ms ago: executing program 4 (id=1756): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=ANY=[], 0x178}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)="d3a16d8b85f9", 0x6}, {&(0x7f0000000480)="25b1fd659b2af482c4e6f5b59fbcac685ac9887f8f0526b236852710581b7574a271a9c86e93aeb9205a02f5ad49dc9eb26fe1f5f949a0520f8ca6f83a5eb1d34f0bc5ee2c33618326dba016b39913e6530e849d2837bf5d0688190d11248dd332615b3eae4ed140f4f2537e8c3575468c78648e5edd18330cb58620e9f60443cf4759e099ddc5da7166333affa8920d18721175ce0cac2a", 0x98}, {&(0x7f0000000540)="168026728fab9e0106a566807ebcb62f0befa409192fd688f88b06c03dd80462cdb5c8ce56961e6cd39878f7e664091b0c21da4a7d60dc79a5158fbc34cf42dd5c30e3d4a39c3b2d75a943f9fd2c3d4c34dc491e1a296bb310b53de30c645f064035efef7d3a4f41fa3387f1df30844bd2f6367e11a2c22b60ff89bec6b9e5ecd51ac06d8101da909b15f0cd1104c3d5a88382b3fdf374934c996838622acbe1915fdc136b983411095432a6", 0xac}, {&(0x7f0000000600)="ee722cb5d627399c5264cf36b89b76adec0956e43f2d436b4cdbb0b348c79684b69d65f612db86f1bdaeb8f552ff538b4a14ebac2116016ad1537c046280c1df7a68341f941c377cb7841f0f67121b5b541c44a34e91155abf2e43fbe890d3b2de0f87e7f6bfb1659663c0c658fece5fa16a443f73df7edf2b3a296523c17153aee0c4550dac5d89a300a42e051b3841318b6b2199c14cbbc206fcdd17d034c276d639a860b869a5419d7ee8c46862fc27dac162681e865237e7a6b1a0defa6669756684fb4ede363f3e986acad51255b4b5a2533e900ab33c8046d18b6df982", 0xe0}, {&(0x7f0000000700)="6b04e779b78da974648c187b55504c15660a9fb31a909107f5d669f5ceb2c9f60d540671a67c225e5b0647479d65e8eb984dfcd93601ee8ec4b97d816b638cc5024d99f7ccebdce0d6667f4cbd940fb8da6ab44d2fba2c4166af735a5681f85dc84ad486e25fca9d1c56710d67d7b5c6e5f2e427fc6be3b781928eeebc7107b65789a1a099f7e7650259ee18edbff03414bb28210da345b192064cf022de2ea0b9860057e36d891841982f77f77398d6c899dcf4b76a3cdd6a0976816c7c3133fe2fb1345e319012a8082b93e0d8f7fdac370b576bace703ff67801f920717", 0xdf}, {0x0}, {&(0x7f0000000800)="6bd85e29e17c539479c8da3e3be8e0d57133e30898ebb4fd43f66852fbda046a9d0d2b807a603b1a701c093bdac6c7ecf585cd0ded74a79badcaef73cf8a24e646f04119dfbb5b3a04925ad83b36cadac1cf876a2937e98e7ac1590ff25fa8b76ae5d058ac3b8a4b457d25d2d588c0d4828f450cf38c748cfa39dcdd71f060dff36be970edce6dad5bfe35e0c0fd4b56f1aa", 0x92}, {&(0x7f00000008c0)="497428122960cc913ef8754be0381b104bae07bcaa887010b9cdf728ae1d5a2f", 0x20}, {&(0x7f0000001700)="27d33a1d26ad17885a6c78466543ab20b1d7c4b57da24b8efd510785424ed1f76ec9fda13370746bb5356ac595f1391a74244d8b804712af5cfab4a3fb84ddd103ba84f5128520e8511afd060231dd6559c564c0936e7a7f9c0b8c78b97284496be3bea8f105dfee2977a48985ba4a0f038a3e06b7e4c69cb79ae6628168efffd3ee9d749e668cca398f7c9af8c9557e022c16ad08df42fe50fb3e71d40bfdc1ea77ecb1593393922496556acaf4d406e5eccec1e7a8268daa4f0ccdc490f30bded36be143dd3f185d2330de03dbf277e5e951c99c6225749a1b8df6133280ffb3a8ee57bfee9d05ddf102dee4aa62b5c042a157402a15c10e27d5ef864c281910332cf4ec41edcb27dae37c8bc09cfe3752671bf61dabc3bf66c3e3f24c47ab8732f757bc9420160a954516d0053d39e6e7ad5ad652aea84647a2b4cf6da9c86ba2037bed56d7ff7ffb6738fc4c94e0d75e695cd3f180d4f7f23ea432391e4cc6111c2d4abf04ae00d016f3a3ff406f4ba5acb9b7d8bec579b9cd572a356499493a56d17613033047a759ebf882e13c8b46520cb61cb3bf4f89030402f99603676d6f38132071aed7af251fee28a0778ac5b62799", 0x1b5}], 0x9}}], 0x2, 0x0) 610.657171ms ago: executing program 4 (id=1757): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0xd8efb076b3815638, 0xffffffffffffffff, 0x4000) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@bridge_delneigh={0x30, 0x1c, 0xcafe28741a3524c9, 0x70bd29, 0x20000, {0x7, 0x0, 0x0, r3, 0x80, 0x8f, 0xb}, [@NDA_LLADDR={0xa, 0x2, @local}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) bpf$LINK_DETACH(0x22, &(0x7f0000000040), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='tlb_flush\x00'}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000d00000295"], &(0x7f0000000280)='GPL\x00'}, 0x90) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000780), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@map=r1, r5, 0x2f, 0x30}, 0x20) 605.371241ms ago: executing program 0 (id=1758): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x0, 0x4}, 0x6) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, &(0x7f0000000340)={0x18, 0x2, {0x2, @multicast2}}, 0x1e) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x26) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a3c000000090a010100000000000000000a0000041000020073797a310000000008000a40fffffffc"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000050) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 564.655924ms ago: executing program 1 (id=1759): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54b24f15655595860608d70ff6e425a6c36af37b33facd22dc8a9c7044410d324b03e654156762092a62fea8f13441431ce248bfc73a6726ee61b5191d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d100a05e97ed3dcad452db6e08a991e2c78b057f55deebde6f0b11ce65700c0a1ad7946ff7c355db87566e3e5abb7a37b52876fd9fa194c09273031900"}) socket$kcm(0x10, 0x5, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) 371.56178ms ago: executing program 0 (id=1760): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "c282fe"}, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[], 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r1, &(0x7f0000000f80)=[{&(0x7f0000000c40)="1743932e9233a5fc048cf6888f5c7a2e4a8f137f715919624eb920a7e16c82ab28b48828aa1fca10163e6d46c4261607f3a513c0de3a083af43a72331cd60894ca", 0x41}, {0x0}, {&(0x7f0000000d40)}, {0x0}], 0x4) 14.446339ms ago: executing program 3 (id=1761): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002640)=""/4096, 0x1000}, {&(0x7f0000000540)=""/167, 0xa7}], 0x2}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 0s ago: executing program 5 (id=1762): unshare(0x22020600) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, 0x0, 0x3d) kernel console output (not intermixed with test programs): lave_1 [ 28.242833][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.250465][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.252087][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.253906][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.258435][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.262814][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.264332][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.266527][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.270045][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.274417][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.276127][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.277646][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.287480][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.294072][ T4326] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.295525][ T4326] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.297152][ T4326] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.298530][ T4326] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.315259][ T4331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.316813][ T4331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.320774][ T4331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.322465][ T4331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.364013][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.367720][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.385536][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.390620][ T4431] loop3: detected capacity change from 0 to 32768 [ 28.405932][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.409622][ T4431] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (4431) [ 28.409732][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.425369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.427947][ T4431] BTRFS info (device loop3): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 28.430291][ T4431] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 28.437898][ T4431] BTRFS info (device loop3): enabling ssd optimizations [ 28.440247][ T4431] BTRFS info (device loop3): not using ssd optimizations [ 28.441543][ T4431] BTRFS info (device loop3): turning off barriers [ 28.442626][ T4431] BTRFS info (device loop3): using free space tree [ 28.466297][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.467537][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.467789][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.470681][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.471238][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.473469][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 28.511749][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.513046][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.515365][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.530264][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 28.531580][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 28.533368][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 28.536780][ T4446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.538278][ T4446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.975159][ T4321] BTRFS info (device loop3): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 29.044868][ T4333] Bluetooth: hci0: command 0x041b tx timeout [ 29.389883][ T4336] Bluetooth: hci2: command 0x041b tx timeout [ 29.407494][ T4336] Bluetooth: hci1: command 0x041b tx timeout [ 29.408748][ T4336] Bluetooth: hci3: command 0x041b tx timeout [ 29.411096][ T4333] Bluetooth: hci4: command 0x041b tx timeout [ 30.508791][ C0] sched: RT throttling activated [ 30.902653][ T4492] loop2: detected capacity change from 0 to 4096 [ 30.918438][ T4487] loop0: detected capacity change from 0 to 32768 [ 31.014763][ T4498] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 31.022911][ T4487] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 31.034026][ T4487] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 31.394675][ T4336] Bluetooth: hci0: command 0x040f tx timeout [ 31.448843][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 31.450146][ T4336] Bluetooth: hci4: command 0x040f tx timeout [ 31.451325][ T4336] Bluetooth: hci1: command 0x040f tx timeout [ 31.452471][ T4336] Bluetooth: hci2: command 0x040f tx timeout [ 31.843415][ T4509] loop3: detected capacity change from 0 to 2048 [ 31.895381][ T4513] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 32.355951][ T4320] ocfs2: Unmounting device (7,0) on (node local) [ 32.858981][ T4522] netlink: 284 bytes leftover after parsing attributes in process `syz.2.18'. [ 33.298598][ T4527] loop1: detected capacity change from 0 to 40427 [ 33.303691][ T4527] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 33.305007][ T4527] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 33.314919][ T4527] F2FS-fs (loop1): invalid crc value [ 33.317673][ T4513] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 33.319899][ T4513] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 33.322901][ T4513] Remounting filesystem read-only [ 33.324291][ T4321] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 33.338138][ T4527] F2FS-fs (loop1): Found nat_bits in checkpoint [ 33.357622][ T4527] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 33.360304][ T4527] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 33.360975][ T4534] loop4: detected capacity change from 0 to 512 [ 33.367374][ T4534] EXT4-fs: Ignoring removed i_version option [ 33.379472][ T4534] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.386378][ T4534] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 33.416810][ T4534] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.425253][ T4534] EXT4-fs (loop4): 1 truncate cleaned up [ 33.428769][ T4534] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 33.442647][ T4336] Bluetooth: hci0: command 0x0419 tx timeout [ 33.448118][ T4542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.455435][ T4542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.530356][ T4333] Bluetooth: hci2: command 0x0419 tx timeout [ 33.530377][ T4336] Bluetooth: hci1: command 0x0419 tx timeout [ 33.532496][ T4336] Bluetooth: hci4: command 0x0419 tx timeout [ 33.535307][ T4336] Bluetooth: hci3: command 0x0419 tx timeout [ 33.832886][ T4545] sp0: Synchronizing with TNC [ 34.186707][ T4532] [U] è [ 34.541883][ T4529] loop0: detected capacity change from 0 to 40427 [ 34.545312][ T4529] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(2560) blocks(1704960) [ 34.547247][ T4529] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 34.551274][ T4326] EXT4-fs (loop4): unmounting filesystem. [ 34.564460][ T4529] F2FS-fs (loop0): invalid crc value [ 34.574547][ T4529] F2FS-fs (loop0): Found nat_bits in checkpoint [ 34.603495][ T4529] F2FS-fs (loop0): Start checkpoint disabled! [ 35.737840][ T4561] Zero length message leads to an empty skb [ 36.392299][ T4567] tipc: Enabling of bearer rejected, failed to enable media [ 36.638573][ T4567] device syzkaller0 entered promiscuous mode [ 36.639813][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 37.778725][ T27] audit: type=1326 audit(37.760:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4597 comm="syz.2.35" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7ff5c0a8 code=0x0 [ 38.017563][ T4603] loop1: detected capacity change from 0 to 32768 [ 38.034421][ T4603] ======================================================= [ 38.034421][ T4603] WARNING: The mand mount option has been deprecated and [ 38.034421][ T4603] and is ignored by this kernel. Remove the mand [ 38.034421][ T4603] option from the mount to silence this warning. [ 38.034421][ T4603] ======================================================= [ 38.106035][ T4603] JBD2: Ignoring recovery information on journal [ 38.248753][ T4603] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 38.488578][ T4331] ocfs2: Unmounting device (7,1) on (node local) [ 38.904940][ T4619] netlink: 284 bytes leftover after parsing attributes in process `syz.4.41'. [ 39.222492][ T4637] tipc: Started in network mode [ 39.223335][ T4637] tipc: Node identity babf7847c296, cluster identity 4711 [ 39.224596][ T4637] tipc: Enabled bearer , priority 0 [ 39.225974][ T4637] device syzkaller0 entered promiscuous mode [ 39.237763][ T4637] tipc: Resetting bearer [ 39.242973][ T4632] tipc: Resetting bearer [ 39.349662][ T4632] tipc: Disabling bearer [ 39.413448][ T4635] loop3: detected capacity change from 0 to 32768 [ 39.439568][ T4635] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 39.445361][ T4635] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 39.472670][ T4321] ocfs2: Unmounting device (7,3) on (node local) [ 40.253995][ T4659] loop2: detected capacity change from 0 to 512 [ 40.290727][ T4516] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 40.793284][ T4676] tipc: Started in network mode [ 40.794239][ T4676] tipc: Node identity fae40db774a2, cluster identity 4711 [ 40.804627][ T4676] tipc: Enabled bearer , priority 0 [ 40.807595][ T4676] device syzkaller0 entered promiscuous mode [ 40.825407][ T4676] tipc: Resetting bearer [ 40.835425][ T4673] tipc: Resetting bearer [ 40.870364][ T4673] tipc: Disabling bearer [ 41.477000][ T4690] process 'syz.0.63' launched './file0' with NULL argv: empty string added [ 41.480412][ T4690] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 41.786170][ T4682] loop1: detected capacity change from 0 to 32768 [ 42.383172][ T4710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.384818][ T4710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.412828][ T4712] tipc: Started in network mode [ 42.413641][ T4712] tipc: Node identity 6acf60147707, cluster identity 4711 [ 42.415078][ T4712] tipc: Enabled bearer , priority 0 [ 42.416745][ T4712] device syzkaller0 entered promiscuous mode [ 42.439746][ T4712] tipc: Resetting bearer [ 42.445439][ T4711] tipc: Resetting bearer [ 42.457539][ T4714] loop4: detected capacity change from 0 to 512 [ 42.491489][ T4704] loop0: detected capacity change from 0 to 32768 [ 42.497331][ T4704] XFS: ikeep mount option is deprecated. [ 42.529943][ T4711] tipc: Disabling bearer [ 42.535219][ T4704] XFS (loop0): Mounting V5 Filesystem [ 42.547691][ T4704] XFS (loop0): Ending clean mount [ 42.551170][ T4704] XFS (loop0): Quotacheck needed: Please wait. [ 42.563783][ T4704] XFS (loop0): Quotacheck: Done. [ 42.649532][ T4333] Bluetooth: hci1: command 0x2016 tx timeout [ 42.929131][ T4320] XFS (loop0): Unmounting Filesystem [ 43.391993][ T4729] loop3: detected capacity change from 0 to 32768 [ 43.407695][ T4729] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.77 (4729) [ 43.415329][ T4729] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 43.417002][ T4729] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 43.418567][ T4729] BTRFS info (device loop3): using free space tree [ 43.515649][ T4735] loop4: detected capacity change from 0 to 32768 [ 43.551412][ T4729] BTRFS info (device loop3): enabling ssd optimizations [ 43.555061][ T4735] XFS (loop4): Mounting V5 Filesystem [ 43.592099][ T4505] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 43.636567][ T4735] XFS (loop4): Ending clean mount [ 43.712883][ T4326] XFS (loop4): Unmounting Filesystem [ 43.712951][ T4321] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 44.231071][ T4777] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 44.380183][ T4782] tipc: Enabled bearer , priority 0 [ 44.381864][ T4782] device syzkaller0 entered promiscuous mode [ 44.394049][ T4782] tipc: Resetting bearer [ 44.398692][ T4781] tipc: Resetting bearer [ 44.440159][ T4781] tipc: Disabling bearer [ 44.444084][ T4783] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 44.883848][ T4791] loop1: detected capacity change from 0 to 512 [ 45.466106][ T4805] loop3: detected capacity change from 0 to 4096 [ 45.479549][ T4805] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 45.500113][ T4798] loop4: detected capacity change from 0 to 32768 [ 45.532817][ T4798] XFS (loop4): Mounting V5 Filesystem [ 45.605534][ T4798] XFS (loop4): Ending clean mount [ 45.608474][ T4798] XFS (loop4): Quotacheck needed: Please wait. [ 45.641335][ T4482] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 45.643781][ T4482] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0x108, xfs_rmapbt block 0x14 [ 45.645642][ T4482] XFS (loop4): Unmount and run xfs_repair [ 45.646561][ T4482] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 45.647810][ T4482] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 45.652486][ T4482] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10 ................ [ 45.653837][ T4482] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 45.655133][ T4482] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01 ....lK.......... [ 45.656429][ T4482] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 45.657682][ T4482] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 45.667116][ T4823] loop3: detected capacity change from 0 to 164 [ 45.668273][ T4482] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 45.673953][ T4823] rock: directory entry would overflow storage [ 45.675095][ T4823] rock: sig=0x66, size=4, remaining=3 [ 45.683758][ T4482] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 45.685285][ T4482] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x14 len 4 error 74 [ 45.689670][ T4823] rock: directory entry would overflow storage [ 45.690655][ T4823] rock: sig=0x66, size=4, remaining=3 [ 45.701606][ T4482] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x570/0xac4 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 45.704043][ T4482] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 45.742458][ T4798] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 45.744699][ T4798] XFS (loop4): Error -5 reserving per-AG metadata reserve pool. [ 45.862815][ T4375] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 45.875343][ T4828] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 45.915729][ T4827] loop2: detected capacity change from 0 to 32768 [ 45.965788][ T4833] loop3: detected capacity change from 0 to 8 [ 45.976835][ T4833] SQUASHFS error: zlib decompression failed, data probably corrupt [ 45.982510][ T4833] SQUASHFS error: Failed to read block 0x9b: -5 [ 45.983697][ T4833] SQUASHFS error: Unable to read metadata cache entry [99] [ 45.991877][ T4833] SQUASHFS error: Unable to read inode 0x127 [ 46.058851][ T4375] usb 1-1: Using ep0 maxpacket: 16 [ 46.369482][ T4375] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 46.371657][ T4375] usb 1-1: config 0 has no interface number 0 [ 46.373282][ T4375] usb 1-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 255 [ 46.380968][ T4375] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 46.384778][ T4375] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 46.386104][ T4375] usb 1-1: Product: syz [ 46.386791][ T4375] usb 1-1: Manufacturer: syz [ 46.390854][ T4375] usb 1-1: SerialNumber: syz [ 46.397047][ T4375] usb 1-1: config 0 descriptor?? [ 46.400487][ T4821] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 46.767602][ T4847] infiniband syz!: set active [ 46.768606][ T4847] infiniband syz!: added team_slave_0 [ 47.065563][ T4847] RDS/IB: syz!: added [ 47.066523][ T4847] smc: adding ib device syz! with port count 1 [ 47.067581][ T4847] smc: ib device syz! port 1 has pnetid [ 47.069674][ T4849] loop4: detected capacity change from 0 to 256 [ 47.083531][ T4849] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 47.128421][ T4375] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 47.134166][ T4375] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 47.185877][ T4375] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 47.195354][ T4375] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 47.202761][ T4375] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 47.206506][ T4375] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 47.209739][ T4375] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 47.216211][ T4375] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 47.217939][ T4375] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 47.220098][ T4375] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 47.224637][ T4375] usb 1-1: USB disconnect, device number 2 [ 47.237295][ T4375] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 47.247368][ T4375] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 47.302351][ T4375] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 47.311709][ T4375] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 47.316506][ T4375] keyspan 1-1:0.107: device disconnected [ 47.354323][ T4859] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 47.616545][ T4863] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 47.871535][ T4869] ubi31: attaching mtd0 [ 47.875872][ T4869] ubi31: scanning is finished [ 47.876702][ T4869] ubi31: empty MTD device detected [ 48.298672][ T4869] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 48.300076][ T4869] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 48.301357][ T4869] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 48.302634][ T4869] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 48.303847][ T4869] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 48.305096][ T4869] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 48.306511][ T4869] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 439430675 [ 48.308068][ T4869] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 48.310596][ T4876] ubi31: background thread "ubi_bgt31d" started, PID 4876 [ 48.526417][ T4894] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 48.821971][ T4901] device netdevsim0 entered promiscuous mode [ 48.983854][ T4898] loop1: detected capacity change from 0 to 32768 [ 49.000391][ T4898] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.121 (4898) [ 49.064740][ T4898] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 49.066671][ T4898] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 49.068374][ T4898] BTRFS info (device loop1): setting nodatasum [ 49.073071][ T4898] BTRFS info (device loop1): force zlib compression, level 3 [ 49.074536][ T4898] BTRFS info (device loop1): enabling ssd optimizations [ 49.082422][ T4898] BTRFS info (device loop1): allowing degraded mounts [ 49.084775][ T4898] BTRFS info (device loop1): using free space tree [ 50.294392][ T4935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.297133][ T4935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.301098][ T4935] misc userio: Invalid payload size [ 50.727829][ T4331] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 50.734001][ T4951] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 51.578412][ T4962] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 51.661387][ T4964] tipc: Started in network mode [ 51.668568][ T4964] tipc: Node identity da66594f63b3, cluster identity 4711 [ 51.683595][ T4964] tipc: Enabled bearer , priority 0 [ 51.685259][ T4964] device syzkaller0 entered promiscuous mode [ 51.716809][ T4964] tipc: Resetting bearer [ 51.726685][ T4963] tipc: Resetting bearer [ 51.773039][ T4968] 9pnet_fd: Insufficient options for proto=fd [ 51.825090][ T4963] tipc: Disabling bearer [ 52.166557][ T4987] loop0: detected capacity change from 0 to 2048 [ 52.210532][ T4989] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 52.621036][ T4999] loop2: detected capacity change from 0 to 40427 [ 52.627113][ T4999] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 52.628486][ T4999] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 52.631860][ T4999] F2FS-fs (loop2): invalid crc value [ 52.671714][ T4999] F2FS-fs (loop2): Found nat_bits in checkpoint [ 52.692981][ T4999] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 52.694354][ T4999] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 53.263526][ T4989] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 53.265496][ T4989] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4) [ 53.267585][ T4989] Remounting filesystem read-only [ 53.269362][ T4320] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer [ 53.334271][ T5012] loop4: detected capacity change from 0 to 4096 [ 53.336124][ T5012] ntfs3: Unknown parameter 'windows_names' [ 53.351407][ T5010] tipc: Enabled bearer , priority 0 [ 53.389506][ T5010] device syzkaller0 entered promiscuous mode [ 53.396573][ T5010] tipc: Resetting bearer [ 53.398598][ T5009] tipc: Resetting bearer [ 53.425436][ T4883] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 53.440297][ T5009] tipc: Disabling bearer [ 53.520543][ T5021] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 53.705506][ T5030] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 53.990817][ T5037] netlink: 'syz.2.156': attribute type 10 has an invalid length. [ 54.193760][ T5037] team0: Port device wlan1 added [ 54.823619][ T5044] loop3: detected capacity change from 0 to 2048 [ 54.858426][ T5046] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 55.018266][ T5058] tipc: Enabled bearer , priority 0 [ 55.020058][ T5058] device syzkaller0 entered promiscuous mode [ 55.027940][ T5058] tipc: Resetting bearer [ 55.033849][ T5057] tipc: Resetting bearer [ 55.079385][ T5056] loop0: detected capacity change from 0 to 40427 [ 55.081307][ T5056] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 55.082593][ T5056] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 55.085810][ T5056] F2FS-fs (loop0): invalid crc value [ 55.091954][ T5056] F2FS-fs (loop0): Found nat_bits in checkpoint [ 55.101808][ T5056] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 55.102094][ T5057] tipc: Disabling bearer [ 55.103040][ T5056] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 55.207155][ T5065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'. [ 55.622704][ T5046] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 55.624553][ T5046] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 55.626419][ T5046] Remounting filesystem read-only [ 55.628324][ T4321] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 55.743930][ T5071] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 55.818636][ T5077] loop1: detected capacity change from 0 to 256 [ 55.854840][ T5077] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 55.857148][ T5077] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 55.875679][ T5068] loop4: detected capacity change from 0 to 40427 [ 55.902672][ T5072] loop3: detected capacity change from 0 to 32768 [ 55.907017][ T5068] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 55.908418][ T5068] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 55.916006][ T5077] capability: warning: `syz.1.173' uses 32-bit capabilities (legacy support in use) [ 55.924177][ T5068] F2FS-fs (loop4): invalid crc value [ 55.926222][ T5068] F2FS-fs (loop4): Found nat_bits in checkpoint [ 55.934892][ T5068] F2FS-fs (loop4): sanity_check_inode: inode (ino=3, mode=16877) should not have inline_data, run fsck to fix [ 55.939844][ T5068] F2FS-fs (loop4): Failed to read root inode [ 55.973840][ T5072] XFS (loop3): Mounting V5 Filesystem [ 56.149825][ T5072] XFS (loop3): Ending clean mount [ 56.444839][ T5072] XFS (loop3): Quotacheck needed: Please wait. [ 56.461861][ T5072] XFS (loop3): Quotacheck: Done. [ 56.484775][ T4321] XFS (loop3): Unmounting Filesystem [ 56.574941][ T5102] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 57.143122][ T5108] loop4: detected capacity change from 0 to 2048 [ 57.164556][ T5109] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 57.189898][ T5111] tipc: Enabled bearer , priority 0 [ 57.192679][ T5111] device syzkaller0 entered promiscuous mode [ 57.311439][ T5110] tipc: Resetting bearer [ 57.422058][ T5110] tipc: Disabling bearer [ 57.505420][ T5118] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 57.674544][ T5129] loop3: detected capacity change from 0 to 40427 [ 57.682702][ T5129] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 57.684039][ T5129] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 57.688477][ T5129] F2FS-fs (loop3): invalid crc value [ 57.718291][ T5129] F2FS-fs (loop3): Found nat_bits in checkpoint [ 57.726478][ T5129] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 57.727691][ T5129] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 58.236980][ T5109] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 58.239134][ T5109] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4) [ 58.241026][ T5109] Remounting filesystem read-only [ 58.242322][ T4326] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 58.630496][ T5153] tipc: Enabled bearer , priority 0 [ 58.632235][ T5153] device syzkaller0 entered promiscuous mode [ 58.691492][ T5151] tipc: Resetting bearer [ 58.790867][ T5151] tipc: Disabling bearer [ 58.899918][ T5160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.196'. [ 58.927617][ T5160] netlink: 20 bytes leftover after parsing attributes in process `syz.0.196'. [ 61.010329][ T5182] loop2: detected capacity change from 0 to 40427 [ 61.037135][ T5182] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 61.038298][ T5182] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 61.041603][ T5182] F2FS-fs (loop2): invalid crc value [ 61.095461][ T5182] F2FS-fs (loop2): Found nat_bits in checkpoint [ 61.105871][ T5182] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 61.106995][ T5182] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 61.937772][ T5199] loop1: detected capacity change from 0 to 32768 [ 61.962825][ T5199] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.208 (5199) [ 61.977748][ T5199] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 61.981897][ T5199] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 61.984109][ T5199] BTRFS info (device loop1): using free space tree [ 61.999026][ T5199] BTRFS info (device loop1): enabling ssd optimizations [ 62.305254][ T4474] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 62.325547][ T4331] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 62.490610][ T4474] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 62.492275][ T4474] usb 1-1: config 0 has no interfaces? [ 62.495528][ T4474] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 62.497035][ T4474] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.498306][ T4474] usb 1-1: Product: syz [ 62.499203][ T4474] usb 1-1: Manufacturer: syz [ 62.500072][ T4474] usb 1-1: SerialNumber: syz [ 62.521011][ T4474] usb 1-1: config 0 descriptor?? [ 62.874618][ T5243] netlink: 'syz.3.216': attribute type 1 has an invalid length. [ 62.890925][ T5243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.902887][ T5243] bond1: (slave geneve2): making interface the new active one [ 63.170227][ T5243] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 63.173020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 63.372902][ T5254] loop3: detected capacity change from 0 to 40427 [ 63.377460][ T5254] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 63.379050][ T5254] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 63.381858][ T5254] F2FS-fs (loop3): invalid crc value [ 63.414297][ T5254] F2FS-fs (loop3): Found nat_bits in checkpoint [ 63.483943][ T5254] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 63.485179][ T5254] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 64.163240][ T5273] loop2: detected capacity change from 0 to 32768 [ 64.173835][ T5273] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.223 (5273) [ 64.214159][ T5273] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 64.217788][ T5273] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm [ 64.222235][ T5273] BTRFS info (device loop2): setting nodatasum [ 64.226308][ T5273] BTRFS info (device loop2): force zlib compression, level 3 [ 64.227488][ T5273] BTRFS info (device loop2): enabling ssd optimizations [ 64.228680][ T5273] BTRFS info (device loop2): allowing degraded mounts [ 64.235027][ T5273] BTRFS info (device loop2): using free space tree [ 64.490687][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.492033][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.765814][ T4395] usb 1-1: USB disconnect, device number 3 [ 65.412356][ T5323] loop1: detected capacity change from 0 to 40427 [ 65.414185][ T5323] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 65.415439][ T5323] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 65.418377][ T5323] F2FS-fs (loop1): invalid crc value [ 65.426779][ T5317] loop4: detected capacity change from 0 to 32768 [ 65.437181][ T5317] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 65.442853][ T5323] F2FS-fs (loop1): Found nat_bits in checkpoint [ 65.455165][ T5317] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 65.463901][ T5323] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 65.465123][ T5323] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 65.533122][ T4326] ocfs2: Unmounting device (7,4) on (node local) [ 65.579321][ T4324] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 66.607508][ T5350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.609489][ T5350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.734636][ T5367] loop0: detected capacity change from 0 to 32768 [ 67.746883][ T5376] netlink: 24 bytes leftover after parsing attributes in process `syz.4.252'. [ 67.749225][ T5376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.252'. [ 67.750936][ T5376] netlink: 540 bytes leftover after parsing attributes in process `syz.4.252'. [ 67.753744][ T5367] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 67.762447][ T5367] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 67.799918][ T5378] netlink: 'syz.4.252': attribute type 10 has an invalid length. [ 67.801370][ T5378] device netdevsim0 left promiscuous mode [ 67.803019][ T4320] ocfs2: Unmounting device (7,0) on (node local) [ 67.804513][ T5378] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 67.917977][ T5382] loop3: detected capacity change from 0 to 40427 [ 67.933837][ T5382] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 67.935203][ T5382] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 67.940712][ T5382] F2FS-fs (loop3): invalid crc value [ 67.966479][ T5382] F2FS-fs (loop3): Found nat_bits in checkpoint [ 67.975866][ T5382] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 67.977158][ T5382] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 69.806229][ T112] cfg80211: failed to load regulatory.db [ 70.293027][ T5438] loop1: detected capacity change from 0 to 40427 [ 70.318321][ T5438] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 70.319747][ T5438] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 70.321815][ T5438] F2FS-fs (loop1): invalid crc value [ 70.393444][ T5438] F2FS-fs (loop1): Found nat_bits in checkpoint [ 70.405478][ T5438] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 70.406619][ T5438] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 70.446496][ T5448] tipc: Started in network mode [ 70.447490][ T5448] tipc: Node identity ffff, cluster identity 4711 [ 70.451887][ T5448] tipc: Node number set to 65535 [ 70.453867][ T5448] tipc: Cannot configure node identity twice [ 70.986033][ T5457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.989736][ T5457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.566762][ T5472] netlink: 100 bytes leftover after parsing attributes in process `syz.0.284'. [ 71.918121][ T5488] TC_ACT_REPEAT abuse ? [ 71.930845][ T5488] TC_ACT_REPEAT abuse ? [ 71.933081][ T5488] TC_ACT_REPEAT abuse ? [ 71.951801][ T5487] TC_ACT_REPEAT abuse ? [ 71.953622][ T5487] TC_ACT_REPEAT abuse ? [ 72.866658][ T5524] device syzkaller0 entered promiscuous mode [ 73.314571][ T5529] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 73.384574][ T5533] Bluetooth: MGMT ver 1.22 [ 74.063879][ T5556] loop1: detected capacity change from 0 to 512 [ 74.657509][ T5566] device syzkaller0 entered promiscuous mode [ 75.186190][ T5573] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 75.285731][ T5581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.320'. [ 75.291572][ T5580] netlink: 32 bytes leftover after parsing attributes in process `syz.1.321'. [ 75.521824][ T5585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.528354][ T5585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.609068][ T5588] netlink: 20 bytes leftover after parsing attributes in process `syz.4.324'. [ 76.055768][ T5595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.327'. [ 76.065427][ T5590] loop2: detected capacity change from 0 to 32768 [ 76.079262][ T5590] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 76.092145][ T5590] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 76.120311][ T5595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.327'. [ 76.133113][ T4324] ocfs2: Unmounting device (7,2) on (node local) [ 76.145029][ T5604] loop0: detected capacity change from 0 to 512 [ 76.176902][ T5608] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 76.220701][ T4883] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 76.263102][ T5595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.327'. [ 77.157657][ T5627] tap0: tun_chr_ioctl cmd 1074025677 [ 77.159015][ T5627] tap0: linktype set to 805 [ 77.546869][ T5634] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 77.591911][ T5637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.600437][ T5637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.610067][ T5638] netlink: 16 bytes leftover after parsing attributes in process `syz.0.339'. [ 78.079344][ T5650] loop3: detected capacity change from 0 to 512 [ 78.559764][ T4525] TC_ACT_REPEAT abuse ? [ 78.842974][ T5678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.844687][ T5678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.897334][ T5680] netlink: 'syz.4.359': attribute type 1 has an invalid length. [ 79.053983][ T5686] loop3: detected capacity change from 0 to 40427 [ 79.058108][ T5686] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 79.059505][ T5686] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 79.062790][ T5686] F2FS-fs (loop3): invalid crc value [ 79.103999][ T5686] F2FS-fs (loop3): Found nat_bits in checkpoint [ 79.143054][ T5686] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 79.144188][ T5686] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 79.659957][ T5703] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 80.201315][ T5711] TC_ACT_REPEAT abuse ? [ 80.202619][ T5711] TC_ACT_REPEAT abuse ? [ 80.203717][ T5711] TC_ACT_REPEAT abuse ? [ 80.205213][ T5710] TC_ACT_REPEAT abuse ? [ 80.206354][ T5710] TC_ACT_REPEAT abuse ? [ 80.263572][ T5719] loop0: detected capacity change from 0 to 512 [ 80.343306][ T5726] device syzkaller0 entered promiscuous mode [ 80.853796][ T5735] loop2: detected capacity change from 0 to 40427 [ 80.855984][ T5735] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 80.857248][ T5735] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 80.860243][ T5735] F2FS-fs (loop2): invalid crc value [ 80.861823][ T5737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.863208][ T5737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.867172][ T5735] F2FS-fs (loop2): Found nat_bits in checkpoint [ 80.875069][ T5735] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 80.876236][ T5735] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 81.710350][ T5763] netlink: 152 bytes leftover after parsing attributes in process `syz.3.387'. [ 81.745007][ T5767] device syzkaller0 entered promiscuous mode [ 81.923596][ T5769] loop4: detected capacity change from 0 to 32768 [ 81.962334][ T5769] XFS (loop4): Mounting V5 Filesystem [ 82.157328][ T5769] XFS (loop4): Ending clean mount [ 82.168056][ T5769] XFS (loop4): Quotacheck needed: Please wait. [ 82.178539][ T4415] XFS (loop4): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 82.194206][ T4415] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x50/0x108, xfs_rmapbt block 0x14 [ 82.204110][ T4415] XFS (loop4): Unmount and run xfs_repair [ 82.207014][ T4415] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 82.216586][ T4415] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 82.225560][ T4415] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 10 ................ [ 82.247786][ T4415] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 82.251815][ T5795] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 82.254413][ T5796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.262756][ T4415] 00000030: 00 00 00 00 6c 4b dc c9 00 00 00 00 00 00 00 01 ....lK.......... [ 82.264208][ T4415] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 82.265563][ T4415] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 82.270316][ T5796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.297461][ T4415] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 82.305384][ T4415] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 82.309260][ T4415] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x180/0x284" at daddr 0x14 len 4 error 74 [ 82.335197][ T4415] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x570/0xac4 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 82.337983][ T4415] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 82.343580][ T5769] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 82.348929][ T5769] XFS (loop4): Error -5 reserving per-AG metadata reserve pool. [ 82.509204][ T4333] Bluetooth: hci0: command 0x2016 tx timeout [ 83.139155][ T5806] loop4: detected capacity change from 0 to 40427 [ 83.283796][ T5806] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 83.285061][ T5806] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 83.287079][ T5806] F2FS-fs (loop4): invalid crc value [ 83.327599][ T5806] F2FS-fs (loop4): Found nat_bits in checkpoint [ 83.338526][ T5806] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 83.339775][ T5806] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 83.381472][ T5818] netlink: 44 bytes leftover after parsing attributes in process `syz.0.400'. [ 83.952224][ T5818] team0: Port device team_slave_0 removed [ 83.964954][ T5819] smc: net device bond0 applied user defined pnetid SYZ2 [ 84.190812][ T5833] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 84.330778][ T4525] TC_ACT_REPEAT abuse ? [ 85.437616][ T5857] loop3: detected capacity change from 0 to 40427 [ 85.440283][ T5857] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 85.441415][ T5857] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 85.443940][ T5857] F2FS-fs (loop3): invalid crc value [ 85.485659][ T5857] F2FS-fs (loop3): Found nat_bits in checkpoint [ 85.495341][ T5857] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 85.496512][ T5857] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 86.022258][ T5871] tipc: Enabled bearer , priority 0 [ 86.024210][ T5871] device syzkaller0 entered promiscuous mode [ 86.252903][ T5872] tipc: Resetting bearer [ 86.272465][ T5870] tipc: Resetting bearer [ 86.380269][ T5870] tipc: Disabling bearer [ 87.519485][ C0] TC_ACT_REPEAT abuse ? [ 87.725156][ T5908] loop0: detected capacity change from 0 to 40427 [ 87.727161][ T5908] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 87.728414][ T5908] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 87.730782][ T5908] F2FS-fs (loop0): invalid crc value [ 87.858642][ T5908] F2FS-fs (loop0): Found nat_bits in checkpoint [ 87.879293][ T5908] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 87.880563][ T5908] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 88.192461][ T4525] TC_ACT_REPEAT abuse ? [ 88.275505][ T5925] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 88.479777][ T5938] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 89.119012][ T4525] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 89.340012][ T4525] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.341567][ T4525] usb 1-1: config 0 has no interfaces? [ 89.345416][ T4525] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 89.346876][ T4525] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.348135][ T4525] usb 1-1: Product: syz [ 89.349027][ T4525] usb 1-1: Manufacturer: syz [ 89.349802][ T4525] usb 1-1: SerialNumber: syz [ 89.352245][ T4525] usb 1-1: config 0 descriptor?? [ 89.373882][ T5950] atomic_op 000000003d73dd2d conn xmit_atomic 0000000000000000 [ 90.318627][ T5963] TC_ACT_REPEAT abuse ? [ 90.441932][ T5965] loop3: detected capacity change from 0 to 40427 [ 90.444964][ T5965] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 90.446170][ T5965] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 90.448276][ T5965] F2FS-fs (loop3): invalid crc value [ 90.467322][ T5965] F2FS-fs (loop3): Found nat_bits in checkpoint [ 90.478455][ T5965] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 90.479857][ T5965] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 90.722306][ T4525] TC_ACT_REPEAT abuse ? [ 91.326386][ T5985] tipc: Enabled bearer , priority 0 [ 91.352266][ T5985] tipc: Resetting bearer [ 91.361243][ T4525] TC_ACT_REPEAT abuse ? [ 91.439803][ T5984] tipc: Disabling bearer [ 91.532569][ T4309] usb 1-1: USB disconnect, device number 4 [ 91.655933][ T5998] tipc: Enabling of bearer rejected, failed to enable media [ 91.732589][ T6005] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 92.494621][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.497226][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.648119][ T4770] TC_ACT_REPEAT abuse ? [ 92.898435][ T6023] tipc: Enabled bearer , priority 0 [ 92.902565][ T6023] tipc: Resetting bearer [ 92.991616][ T6022] tipc: Disabling bearer [ 93.279197][ C0] TC_ACT_REPEAT abuse ? [ 93.313394][ T6039] netlink: 32 bytes leftover after parsing attributes in process `syz.0.475'. [ 93.317990][ T6039] device veth1 entered promiscuous mode [ 93.322901][ T6039] netlink: 32 bytes leftover after parsing attributes in process `syz.0.475'. [ 93.523637][ T6045] loop0: detected capacity change from 0 to 40427 [ 93.529021][ T6045] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 93.530317][ T6045] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 93.532465][ T6045] F2FS-fs (loop0): invalid crc value [ 93.569027][ T6045] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.588444][ T6045] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 93.590056][ T6045] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 94.121039][ T6065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.123821][ T6065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.125604][ T6063] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 94.375982][ T6068] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 94.644551][ T6075] netlink: 32 bytes leftover after parsing attributes in process `syz.0.488'. [ 94.655592][ T6075] netlink: 56 bytes leftover after parsing attributes in process `syz.0.488'. [ 94.694949][ T6079] tipc: Enabled bearer , priority 0 [ 94.696729][ T6079] device syzkaller0 entered promiscuous mode [ 94.784493][ T6080] tipc: Resetting bearer [ 94.789733][ T6078] tipc: Resetting bearer [ 94.869758][ T6078] tipc: Disabling bearer [ 95.045685][ T6091] loop0: detected capacity change from 0 to 40427 [ 95.050191][ T6091] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 95.051380][ T6091] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 95.053241][ T6091] F2FS-fs (loop0): invalid crc value [ 95.065193][ T6091] F2FS-fs (loop0): Found nat_bits in checkpoint [ 95.077949][ T6091] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 95.079319][ T6091] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.067411][ T6111] netlink: 32 bytes leftover after parsing attributes in process `syz.1.500'. [ 96.081748][ T6111] device veth1 entered promiscuous mode [ 96.083377][ T6111] netlink: 56 bytes leftover after parsing attributes in process `syz.1.500'. [ 96.296334][ T6121] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 96.321798][ T6123] netlink: 'syz.1.505': attribute type 1 has an invalid length. [ 96.323381][ T6123] netlink: 'syz.1.505': attribute type 2 has an invalid length. [ 96.438891][ T4770] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 96.481506][ T6128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.483110][ T6128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.902529][ T4770] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.904271][ T4770] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.906063][ T4770] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 96.907558][ T4770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.915648][ T4770] usb 1-1: config 0 descriptor?? [ 96.924438][ T6134] TC_ACT_REPEAT abuse ? [ 96.925565][ C0] TC_ACT_REPEAT abuse ? [ 96.928849][ T6134] TC_ACT_REPEAT abuse ? [ 96.930820][ T9] TC_ACT_REPEAT abuse ? [ 96.932603][ T6134] TC_ACT_REPEAT abuse ? [ 96.967280][ T6138] netlink: 32 bytes leftover after parsing attributes in process `syz.1.511'. [ 96.968999][ T6138] netlink: 56 bytes leftover after parsing attributes in process `syz.1.511'. [ 97.030488][ T6136] loop4: detected capacity change from 0 to 40427 [ 97.032532][ T6136] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 97.033685][ T6136] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 97.035767][ T6136] F2FS-fs (loop4): invalid crc value [ 97.043475][ T6136] F2FS-fs (loop4): Found nat_bits in checkpoint [ 97.056086][ T6136] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 97.057247][ T6136] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 97.161872][ T6151] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 97.431247][ T4770] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 97.474600][ T4770] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 97.635835][ T4770] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x00 [ 97.978221][ T4770] cp2112 0003:10C4:EA90.0001: error requesting SMBus config [ 98.050845][ T4770] cp2112: probe of 0003:10C4:EA90.0001 failed with error -32 [ 98.065395][ T4770] usb 1-1: USB disconnect, device number 5 [ 98.094075][ T6159] fido_id[6159]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 98.615665][ T6169] TC_ACT_REPEAT abuse ? [ 98.616964][ C0] TC_ACT_REPEAT abuse ? [ 98.619847][ T6169] TC_ACT_REPEAT abuse ? [ 98.621856][ T39] TC_ACT_REPEAT abuse ? [ 98.622942][ C1] TC_ACT_REPEAT abuse ? [ 98.759828][ T6176] loop0: detected capacity change from 0 to 512 [ 98.780978][ T4311] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 99.827197][ T6201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.837451][ T6201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.052673][ T4336] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 100.055051][ T4336] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 100.056725][ T4336] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 100.058751][ T4336] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 100.061665][ T4336] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 100.063281][ T4336] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 100.235554][ T6208] chnl_net:caif_netlink_parms(): no params data found [ 100.315512][ T6208] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.320670][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.323919][ T6208] device bridge_slave_0 entered promiscuous mode [ 100.331125][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.332385][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.334019][ T6208] device bridge_slave_1 entered promiscuous mode [ 100.339540][ T6232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.341401][ T6232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.352256][ T6208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.354889][ T6208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.367774][ T6208] team0: Port device team_slave_0 added [ 100.375016][ T6208] team0: Port device team_slave_1 added [ 100.383731][ T6208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.385026][ T6208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.392585][ T6208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.395423][ T6208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.396680][ T6208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.403173][ T6208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.426719][ T6236] loop3: detected capacity change from 0 to 512 [ 100.460164][ T4311] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 100.953961][ T6208] device hsr_slave_0 entered promiscuous mode [ 100.989242][ T6208] device hsr_slave_1 entered promiscuous mode [ 101.010339][ T6208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.012461][ T6208] Cannot create hsr debugfs directory [ 101.015152][ T6242] netlink: 'syz.0.542': attribute type 4 has an invalid length. [ 101.107122][ T6208] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 101.143768][ T6208] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 101.180343][ T6208] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 101.227642][ T6208] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 101.453624][ T6208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.461702][ T6208] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.476409][ T6208] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 101.478289][ T6208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.541482][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.544431][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.548108][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.550918][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.552581][ T4482] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.553789][ T4482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.555445][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.557212][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.558736][ T4482] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.559937][ T4482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.603862][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.643780][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.752255][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.804971][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.862873][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.884341][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.886149][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.887784][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.889657][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.891313][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.892969][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.894595][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.896193][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.898690][ T6274] netlink: 'syz.3.552': attribute type 4 has an invalid length. [ 101.970830][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.972308][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.977750][ T6208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.079424][ T4336] Bluetooth: hci5: command 0x0409 tx timeout [ 102.116235][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.118142][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.126796][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.128649][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.132690][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.134166][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.137290][ T6208] device veth0_vlan entered promiscuous mode [ 102.142909][ T6208] device veth1_vlan entered promiscuous mode [ 102.155850][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.157437][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.159706][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.161428][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.165626][ T6208] device veth0_macvtap entered promiscuous mode [ 102.168620][ T6208] device veth1_macvtap entered promiscuous mode [ 102.181822][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.183577][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.185339][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.187079][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.194083][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.195838][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.197503][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.200001][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.201604][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.203377][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.206038][ T6208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.207843][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.211761][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.214810][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.216643][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.220836][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.222779][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.224446][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.226115][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.227749][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.232445][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.234192][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.235861][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.237544][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.241518][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.246222][ T6208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.247658][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.249350][ T4770] net_ratelimit: 1 callbacks suppressed [ 102.249356][ T4770] TC_ACT_REPEAT abuse ? [ 102.253593][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.259429][ T6208] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.260932][ T6208] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.262378][ T6208] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.263917][ T6208] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.308177][ T4465] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.315643][ T4465] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.320289][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.337780][ T6290] loop0: detected capacity change from 0 to 512 [ 102.355926][ T4465] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.357396][ T4465] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.360373][ T4465] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.955604][ T6312] netlink: 'syz.4.563': attribute type 4 has an invalid length. [ 103.494680][ T6320] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 103.525190][ T6323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.566'. [ 103.944827][ T6342] netlink: 'syz.1.572': attribute type 9 has an invalid length. [ 104.168895][ T4333] Bluetooth: hci5: command 0x041b tx timeout [ 104.237888][ T6353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.576'. [ 104.239930][ T6353] device bridge_slave_1 left promiscuous mode [ 104.244227][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.284155][ T6353] device bridge_slave_0 left promiscuous mode [ 104.287682][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.296321][ T6355] loop4: detected capacity change from 0 to 512 [ 104.311263][ T4311] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.566375][ T6391] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 105.583763][ T6393] tipc: Started in network mode [ 105.584960][ T6393] tipc: Node identity bac0d422111e, cluster identity 4711 [ 105.586401][ T6393] tipc: Enabled bearer , priority 0 [ 105.588103][ T6393] device syzkaller0 entered promiscuous mode [ 105.649177][ T6394] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 105.699267][ T6393] tipc: Resetting bearer [ 105.711970][ T6392] tipc: Resetting bearer [ 105.789488][ T6392] tipc: Disabling bearer [ 105.791594][ T6397] netlink: 16 bytes leftover after parsing attributes in process `syz.0.591'. [ 105.898086][ T6403] netlink: 'syz.0.594': attribute type 2 has an invalid length. [ 105.901324][ T6403] netlink: 'syz.0.594': attribute type 1 has an invalid length. [ 105.903158][ T6403] netlink: 'syz.0.594': attribute type 1 has an invalid length. [ 106.123489][ T6412] netlink: 20 bytes leftover after parsing attributes in process `syz.1.598'. [ 106.238922][ T4336] Bluetooth: hci5: command 0x040f tx timeout [ 106.265757][ T6418] netlink: 'syz.1.599': attribute type 10 has an invalid length. [ 106.324060][ T6418] team0: Port device dummy0 added [ 106.331058][ T6419] netlink: 'syz.1.599': attribute type 10 has an invalid length. [ 106.350528][ T6419] team0: Port device dummy0 removed [ 106.382468][ T6419] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 106.386212][ T4474] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 106.544484][ T6426] netlink: 'syz.4.603': attribute type 4 has an invalid length. [ 106.836114][ T4474] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.837876][ T4474] usb 1-1: config 0 has no interfaces? [ 106.847574][ T4474] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 106.849085][ T4474] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.850393][ T4474] usb 1-1: Product: syz [ 106.850991][ T4474] usb 1-1: Manufacturer: syz [ 106.853157][ T4474] usb 1-1: SerialNumber: syz [ 106.855139][ T4474] usb 1-1: config 0 descriptor?? [ 107.052141][ T6439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.609'. [ 108.319117][ T4333] Bluetooth: hci5: command 0x0419 tx timeout [ 109.008724][ T4395] usb 1-1: USB disconnect, device number 6 [ 109.547049][ T6515] loop1: detected capacity change from 0 to 2048 [ 109.554853][ T6516] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.022374][ T6524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.023960][ T6524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.470166][ T6516] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 110.472168][ T6516] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4) [ 110.474805][ T6516] Remounting filesystem read-only [ 110.476131][ T4331] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 110.800740][ T6544] TC_ACT_REPEAT abuse ? [ 110.801879][ T6544] TC_ACT_REPEAT abuse ? [ 110.804988][ T6544] TC_ACT_REPEAT abuse ? [ 110.813704][ T6542] TC_ACT_REPEAT abuse ? [ 110.815846][ T6542] TC_ACT_REPEAT abuse ? [ 111.019838][ T6555] netlink: 'syz.0.646': attribute type 4 has an invalid length. [ 111.238163][ T1574] tipc: Subscription rejected, illegal request [ 111.243999][ T6569] rdma_rxe: already configured on team_slave_0 [ 111.562424][ T6586] netlink: 'syz.1.659': attribute type 4 has an invalid length. [ 111.806072][ T6602] tipc: Enabled bearer , priority 0 [ 111.808670][ T6602] device syzkaller0 entered promiscuous mode [ 111.900719][ T6601] tipc: Resetting bearer [ 112.042364][ T6601] tipc: Disabling bearer [ 112.564535][ T6621] netlink: 'syz.0.674': attribute type 4 has an invalid length. [ 112.601643][ T6619] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 112.644926][ T6627] tipc: Enabled bearer , priority 0 [ 112.646697][ T6627] device syzkaller0 entered promiscuous mode [ 112.791179][ T6626] tipc: Resetting bearer [ 112.869989][ T6626] tipc: Disabling bearer [ 112.878478][ T6637] rdma_rxe: rxe_register_device failed with error -23 [ 112.886138][ T6637] rdma_rxe: failed to add team_slave_0 [ 113.012094][ T6643] device syzkaller1 entered promiscuous mode [ 113.317736][ T6655] netlink: 'syz.0.688': attribute type 4 has an invalid length. [ 114.125370][ T6665] tipc: Enabled bearer , priority 0 [ 114.132268][ T6665] device syzkaller0 entered promiscuous mode [ 114.292185][ T6664] tipc: Resetting bearer [ 114.311359][ T6672] netlink: 564 bytes leftover after parsing attributes in process `syz.4.694'. [ 114.363414][ T6676] netlink: 20 bytes leftover after parsing attributes in process `syz.5.696'. [ 114.373663][ T6664] tipc: Disabling bearer [ 114.376597][ T6676] netlink: 4 bytes leftover after parsing attributes in process `syz.5.696'. [ 114.467571][ T6681] syz.5.698 uses obsolete (PF_INET,SOCK_PACKET) [ 114.470459][ T6684] netlink: 'syz.1.699': attribute type 4 has an invalid length. [ 114.506696][ T6687] netlink: 16 bytes leftover after parsing attributes in process `syz.4.701'. [ 114.795903][ T6699] rdma_rxe: already configured on team_slave_0 [ 114.949819][ T6703] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 115.078047][ T6707] netlink: 564 bytes leftover after parsing attributes in process `syz.0.707'. [ 115.206147][ T6709] netlink: 20 bytes leftover after parsing attributes in process `syz.0.708'. [ 115.268885][ T6711] tipc: Enabled bearer , priority 0 [ 115.300503][ T6711] tipc: Resetting bearer [ 115.389487][ T6710] tipc: Disabling bearer [ 115.499257][ T6719] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.500586][ T6719] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.514791][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.711'. [ 115.527049][ T6720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 115.669591][ T6720] bond0: (slave bond_slave_1): Releasing backup interface [ 115.811192][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.711'. [ 115.954974][ T6737] device syzkaller0 entered promiscuous mode [ 116.316139][ T6752] rdma_rxe: rxe_register_device failed with error -23 [ 116.316757][ T6751] tipc: Enabled bearer , priority 0 [ 116.317424][ T6752] rdma_rxe: failed to add team_slave_0 [ 116.362011][ T6751] tipc: Resetting bearer [ 116.439996][ T6750] tipc: Disabling bearer [ 116.765557][ T6762] netlink: 'syz.3.728': attribute type 1 has an invalid length. [ 116.767568][ T6762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'. [ 116.980351][ T6770] device syzkaller0 entered promiscuous mode [ 117.147680][ T6782] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 117.219867][ T6785] device syzkaller1 entered promiscuous mode [ 117.795027][ T6809] device syzkaller0 entered promiscuous mode [ 118.180314][ T6820] rdma_rxe: rxe_register_device failed with error -23 [ 118.181651][ T6820] rdma_rxe: failed to add team_slave_0 [ 118.703938][ T6836] device syzkaller0 entered promiscuous mode [ 119.083761][ T6849] device syzkaller0 entered promiscuous mode [ 119.370866][ T6867] __nla_validate_parse: 1 callbacks suppressed [ 119.370878][ T6867] netlink: 100 bytes leftover after parsing attributes in process `syz.1.771'. [ 119.403232][ T6870] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.404895][ T6870] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.619038][ T4770] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 119.800427][ T4770] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.802132][ T4770] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.803802][ T4770] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 119.805418][ T4770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.813552][ T4770] usb 1-1: config 0 descriptor?? [ 120.435141][ T4770] usbhid 1-1:0.0: can't add hid device: -71 [ 120.436345][ T4770] usbhid: probe of 1-1:0.0 failed with error -71 [ 120.439088][ T4770] usb 1-1: USB disconnect, device number 7 [ 121.155108][ T6897] device syzkaller0 entered promiscuous mode [ 121.215332][ T6904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.217773][ T6904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.650430][ T6930] loop1: detected capacity change from 0 to 40427 [ 122.652663][ T6930] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 122.653980][ T6930] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 122.656901][ T6930] F2FS-fs (loop1): invalid crc value [ 122.684949][ T6930] F2FS-fs (loop1): Found nat_bits in checkpoint [ 122.698497][ T6930] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 122.699820][ T6930] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 123.239856][ T6950] device syzkaller0 entered promiscuous mode [ 123.265189][ T6953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.266840][ T6953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.356974][ T6954] rdma_rxe: already configured on team_slave_0 [ 123.649942][ T6964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.651578][ T6964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.907585][ T6987] loop4: detected capacity change from 0 to 40427 [ 124.909568][ T6987] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 124.910924][ T6987] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 124.913036][ T6987] F2FS-fs (loop4): invalid crc value [ 124.952816][ T6987] F2FS-fs (loop4): Found nat_bits in checkpoint [ 124.966090][ T6987] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 124.967361][ T6987] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 125.688399][ T7000] device syzkaller0 entered promiscuous mode [ 125.775317][ T7002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.782002][ T7002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.940085][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.941178][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.245717][ T7020] rdma_rxe: rxe_register_device failed with error -23 [ 126.247082][ T7020] rdma_rxe: failed to add team_slave_0 [ 126.972652][ T7036] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 127.206369][ T7041] device syzkaller0 entered promiscuous mode [ 127.672323][ T7061] netlink: 120 bytes leftover after parsing attributes in process `syz.4.834'. [ 128.018220][ T7074] rdma_rxe: rxe_register_device failed with error -23 [ 128.032469][ T7074] rdma_rxe: failed to add team_slave_0 [ 128.441670][ T7086] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 128.817878][ T7092] netlink: 120 bytes leftover after parsing attributes in process `syz.3.847'. [ 129.081370][ T7107] device syzkaller0 entered promiscuous mode [ 129.791617][ T7124] netlink: 120 bytes leftover after parsing attributes in process `syz.3.859'. [ 130.194565][ T7143] rdma_rxe: already configured on team_slave_0 [ 130.242313][ T7145] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 130.953811][ T7150] device syzkaller0 entered promiscuous mode [ 131.235405][ T7155] netlink: 120 bytes leftover after parsing attributes in process `syz.1.870'. [ 131.825812][ T7167] loop0: detected capacity change from 0 to 40427 [ 131.827557][ T7167] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 131.828861][ T7167] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 131.830878][ T7167] F2FS-fs (loop0): invalid crc value [ 131.861507][ T7167] F2FS-fs (loop0): Found nat_bits in checkpoint [ 131.892256][ T7167] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 131.893421][ T7167] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 132.740940][ T7191] netlink: 120 bytes leftover after parsing attributes in process `syz.3.882'. [ 132.915769][ T7195] device syzkaller0 entered promiscuous mode [ 133.138022][ T7202] rdma_rxe: already configured on team_slave_0 [ 133.253702][ T7208] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 134.217105][ T7222] loop5: detected capacity change from 0 to 40427 [ 134.222296][ T7222] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 134.223556][ T7222] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 134.226904][ T7222] F2FS-fs (loop5): invalid crc value [ 134.247699][ T7222] F2FS-fs (loop5): Found nat_bits in checkpoint [ 134.260578][ T7222] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 134.261600][ T7222] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 134.505103][ T7238] device syzkaller0 entered promiscuous mode [ 135.926838][ T7269] rdma_rxe: already configured on team_slave_0 [ 136.005800][ T7271] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 136.074005][ T7272] device syzkaller0 entered promiscuous mode [ 136.344512][ T7276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 136.352992][ T7276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.593016][ T7280] loop3: detected capacity change from 0 to 40427 [ 136.601996][ T7280] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 136.603314][ T7280] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 136.605149][ T7280] F2FS-fs (loop3): invalid crc value [ 136.629894][ T7280] F2FS-fs (loop3): Found nat_bits in checkpoint [ 136.642878][ T7280] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 136.643992][ T7280] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 137.739585][ T7314] device syzkaller0 entered promiscuous mode [ 138.287818][ T7335] netlink: 232 bytes leftover after parsing attributes in process `syz.0.927'. [ 138.304308][ T7336] netlink: 'syz.5.925': attribute type 10 has an invalid length. [ 138.475746][ T7336] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 139.742040][ T7377] tipc: Enabled bearer , priority 0 [ 139.782167][ T7377] tipc: Resetting bearer [ 139.931167][ T7376] tipc: Disabling bearer [ 141.133664][ T7420] tipc: Enabled bearer , priority 0 [ 141.183206][ T7420] tipc: Resetting bearer [ 141.269768][ T7419] tipc: Disabling bearer [ 141.432435][ T7430] loop4: detected capacity change from 0 to 40427 [ 141.434228][ T7430] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 141.435520][ T7430] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 141.437793][ T7430] F2FS-fs (loop4): invalid crc value [ 141.440880][ T7430] F2FS-fs (loop4): Found nat_bits in checkpoint [ 141.453623][ T7430] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 141.454747][ T7430] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 142.206396][ T7460] netlink: 'syz.0.969': attribute type 10 has an invalid length. [ 142.266969][ T7460] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 142.562707][ T7466] tipc: Enabling of bearer rejected, failed to enable media [ 142.564613][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.972'. [ 142.567555][ T7470] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 142.604571][ T7470] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 143.756679][ T7511] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 143.759767][ T7512] rdma_rxe: rxe_register_device failed with error -23 [ 143.760930][ T7512] rdma_rxe: failed to add team_slave_0 [ 144.019331][ T7522] tipc: Enabling of bearer rejected, failed to enable media [ 144.103817][ T7527] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.139259][ T7527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.148471][ T7527] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.631216][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.636842][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.575850][ T7566] tipc: Enabling of bearer rejected, failed to enable media [ 145.823964][ T7581] rdma_rxe: already configured on team_slave_0 [ 146.302939][ T7595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.304343][ T7595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.381883][ T4770] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 146.560561][ T4770] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.562351][ T4770] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.563966][ T4770] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 146.565279][ T4770] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.570751][ T4770] usb 1-1: config 0 descriptor?? [ 147.301767][ T4770] usbhid 1-1:0.0: can't add hid device: -32 [ 147.302915][ T4770] usbhid: probe of 1-1:0.0 failed with error -32 [ 147.308535][ T7619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.311380][ T4770] usb 1-1: USB disconnect, device number 8 [ 147.320368][ T7619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.883867][ T7629] rdma_rxe: already configured on team_slave_0 [ 148.478890][ T4330] Bluetooth: hci1: command 0x0406 tx timeout [ 148.478903][ T4336] Bluetooth: hci2: command 0x0406 tx timeout [ 148.479983][ T4330] Bluetooth: hci0: command 0x0406 tx timeout [ 148.481148][ T4333] Bluetooth: hci3: command 0x0406 tx timeout [ 148.481934][ T4328] Bluetooth: hci4: command 0x0406 tx timeout [ 148.914041][ T7658] rdma_rxe: already configured on team_slave_0 [ 148.996147][ T7661] netlink: 'syz.5.1037': attribute type 10 has an invalid length. [ 149.094815][ T7672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.098673][ T7672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.169935][ T7676] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 150.022543][ T7690] rdma_rxe: already configured on team_slave_0 [ 150.471673][ T7697] Bluetooth: MGMT ver 1.22 [ 150.551434][ T7704] netlink: 'syz.1.1050': attribute type 10 has an invalid length. [ 150.727459][ T7714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.739595][ T7714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.138347][ T7726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.146427][ T7726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.060883][ T7745] netlink: 'syz.1.1065': attribute type 10 has an invalid length. [ 152.682021][ T7768] rdma_rxe: rxe_register_device failed with error -23 [ 152.683213][ T7768] rdma_rxe: failed to add team_slave_0 [ 152.852105][ T7770] loop0: detected capacity change from 0 to 40427 [ 152.857920][ T7770] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 152.859211][ T7770] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 152.865868][ T7770] F2FS-fs (loop0): invalid crc value [ 152.895977][ T7770] F2FS-fs (loop0): Found nat_bits in checkpoint [ 152.913505][ T7770] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 152.914689][ T7770] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 153.699488][ T7794] netlink: 'syz.4.1079': attribute type 10 has an invalid length. [ 153.752676][ T7794] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 154.071635][ T7808] loop1: detected capacity change from 0 to 40427 [ 154.084038][ T7808] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 154.085558][ T7808] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 154.092214][ T7808] F2FS-fs (loop1): invalid crc value [ 154.378204][ T7808] F2FS-fs (loop1): Found nat_bits in checkpoint [ 154.391331][ T7808] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 154.392552][ T7808] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 154.705232][ T7829] netlink: 'syz.1.1092': attribute type 10 has an invalid length. [ 154.763946][ T7836] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1093'. [ 155.088352][ T7845] loop1: detected capacity change from 0 to 40427 [ 155.212618][ T7845] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 155.213850][ T7845] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 155.220266][ T7845] F2FS-fs (loop1): invalid crc value [ 155.404333][ T7845] F2FS-fs (loop1): Found nat_bits in checkpoint [ 155.414614][ T7845] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 155.415807][ T7845] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 155.755373][ T7868] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1104'. [ 156.108531][ T7881] rdma_rxe: rxe_register_device failed with error -23 [ 156.109743][ T7881] rdma_rxe: failed to add team_slave_0 [ 156.178043][ T7886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1108'. [ 156.238493][ T112] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 156.262426][ T7893] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1115'. [ 156.566603][ T112] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.568489][ T112] usb 1-1: config 0 has no interfaces? [ 156.751159][ T112] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 156.752769][ T112] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.754332][ T112] usb 1-1: Product: syz [ 156.755048][ T112] usb 1-1: Manufacturer: syz [ 156.755979][ T112] usb 1-1: SerialNumber: syz [ 156.757889][ T112] usb 1-1: config 0 descriptor?? [ 156.806747][ T7903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.814951][ T7903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.847843][ T7901] loop4: detected capacity change from 0 to 40427 [ 156.886204][ T7901] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 156.887778][ T7901] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 156.891590][ T7901] F2FS-fs (loop4): invalid crc value [ 156.903862][ T7901] F2FS-fs (loop4): Found nat_bits in checkpoint [ 156.914217][ T7901] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 156.915423][ T7901] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 157.972894][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1124'. [ 158.046366][ T7934] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1128'. [ 158.289682][ T7940] rdma_rxe: rxe_register_device failed with error -23 [ 158.290922][ T7940] rdma_rxe: failed to add team_slave_0 [ 158.959528][ T112] usb 1-1: USB disconnect, device number 9 [ 159.206157][ T7950] loop0: detected capacity change from 0 to 40427 [ 159.208055][ T7950] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 159.209382][ T7950] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 159.211581][ T7950] F2FS-fs (loop0): invalid crc value [ 159.232635][ T7950] F2FS-fs (loop0): Found nat_bits in checkpoint [ 159.255264][ T7964] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1140'. [ 159.257355][ T7950] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 159.258592][ T7950] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 159.397448][ T7972] tipc: Enabled bearer , priority 0 [ 159.697303][ T7975] tipc: Resetting bearer [ 159.717300][ T7977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.719100][ T7977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.775339][ T7979] netlink: 'syz.5.1144': attribute type 10 has an invalid length. [ 159.777358][ T7979] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.778834][ T7979] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.790498][ T7979] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.791751][ T7979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.794029][ T7979] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.795282][ T7979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.798132][ T7979] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 160.236329][ T7986] rdma_rxe: already configured on team_slave_0 [ 160.454702][ T8005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.456430][ T8005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.041240][ T8011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.043009][ T8011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.918600][ T8039] rdma_rxe: rxe_register_device failed with error -23 [ 161.919887][ T8039] rdma_rxe: failed to add team_slave_0 [ 161.983372][ T8041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.985179][ T8041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.549644][ T8045] device wlan0 entered promiscuous mode [ 162.550712][ T8045] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 162.552238][ T8045] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 163.858927][ T4373] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 164.077427][ T4373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.079504][ T4373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.081675][ T4373] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 164.083240][ T4373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.134056][ T4373] usb 1-1: config 0 descriptor?? [ 164.147058][ T8085] netlink: 'syz.1.1184': attribute type 4 has an invalid length. [ 164.150392][ T8085] netlink: 'syz.1.1184': attribute type 4 has an invalid length. [ 164.154564][ T8080] rdma_rxe: rxe_register_device failed with error -23 [ 164.155757][ T8080] rdma_rxe: failed to add team_slave_0 [ 164.189333][ C0] TC_ACT_REPEAT abuse ? [ 164.194297][ T8087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.201346][ T8087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.319131][ C0] TC_ACT_REPEAT abuse ? [ 165.000134][ T4373] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 165.002932][ T4373] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 165.019226][ T8111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.020766][ T8111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.199757][ T4373] cp2112 0003:10C4:EA90.0002: error requesting version [ 165.201669][ T4373] cp2112: probe of 0003:10C4:EA90.0002 failed with error -32 [ 165.599255][ T4373] TC_ACT_REPEAT abuse ? [ 165.765060][ T4328] Bluetooth: hci5: link tx timeout [ 165.766607][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.769976][ T4328] Bluetooth: hci5: link tx timeout [ 165.771000][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.772480][ T4328] Bluetooth: hci5: link tx timeout [ 165.773281][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.774781][ T4328] Bluetooth: hci5: link tx timeout [ 165.775573][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.777355][ T4328] Bluetooth: hci5: link tx timeout [ 165.778352][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.788452][ T4328] Bluetooth: hci5: link tx timeout [ 165.789518][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.791259][ T4328] Bluetooth: hci5: link tx timeout [ 165.792245][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.793796][ T4328] Bluetooth: hci5: link tx timeout [ 165.794902][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.796397][ T4328] Bluetooth: hci5: link tx timeout [ 165.797147][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.798686][ T4328] Bluetooth: hci5: link tx timeout [ 165.800193][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.803357][ T4328] Bluetooth: hci5: link tx timeout [ 165.804363][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.805907][ T4328] Bluetooth: hci5: link tx timeout [ 165.806641][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.808175][ T4328] Bluetooth: hci5: link tx timeout [ 165.809979][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.816813][ T4328] Bluetooth: hci5: link tx timeout [ 165.817651][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.819092][ T4328] Bluetooth: hci5: link tx timeout [ 165.820028][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.821486][ T4328] Bluetooth: hci5: link tx timeout [ 165.822303][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.041567][ T8138] netlink: 'syz.3.1202': attribute type 10 has an invalid length. [ 166.229018][ T8141] rdma_rxe: already configured on team_slave_0 [ 166.775246][ T8164] device syzkaller0 entered promiscuous mode [ 166.776832][ T8164] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 166.826646][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1215'. [ 166.994972][ T4473] usb 1-1: USB disconnect, device number 10 [ 167.188053][ T8187] device syzkaller0 entered promiscuous mode [ 167.755356][ T4465] TC_ACT_REPEAT abuse ? [ 167.812998][ T4395] TC_ACT_REPEAT abuse ? [ 167.838874][ T4328] Bluetooth: hci5: command 0x0406 tx timeout [ 167.882464][ T4395] TC_ACT_REPEAT abuse ? [ 168.113416][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.114991][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.313202][ T8214] netlink: 'syz.3.1236': attribute type 10 has an invalid length. [ 168.348229][ T8214] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 168.412796][ T8226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.414315][ T8226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.071116][ T8233] rdma_rxe: already configured on team_slave_0 [ 169.447440][ T4328] Bluetooth: hci5: link tx timeout [ 169.448332][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.455951][ T4328] Bluetooth: hci5: link tx timeout [ 169.457259][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.458780][ T4328] Bluetooth: hci5: link tx timeout [ 169.460276][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.464691][ T4328] Bluetooth: hci5: link tx timeout [ 169.465548][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.466904][ T4328] Bluetooth: hci5: link tx timeout [ 169.467719][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.469252][ T4328] Bluetooth: hci5: link tx timeout [ 169.470045][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.471480][ T4328] Bluetooth: hci5: link tx timeout [ 169.472301][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.473775][ T4328] Bluetooth: hci5: link tx timeout [ 169.474615][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.476063][ T4328] Bluetooth: hci5: link tx timeout [ 169.476829][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.478191][ T4328] Bluetooth: hci5: link tx timeout [ 169.479036][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.482454][ T4328] Bluetooth: hci5: link tx timeout [ 169.483250][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.484780][ T4328] Bluetooth: hci5: link tx timeout [ 169.485617][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.487977][ T4328] Bluetooth: hci5: link tx timeout [ 169.489309][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.491428][ T4328] Bluetooth: hci5: link tx timeout [ 169.492521][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.494096][ T4328] Bluetooth: hci5: link tx timeout [ 169.495106][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.496508][ T4328] Bluetooth: hci5: link tx timeout [ 169.497225][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.499820][ T4328] Bluetooth: hci5: link tx timeout [ 169.500762][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 169.610805][ T8260] device syzkaller0 entered promiscuous mode [ 170.889416][ T4328] Bluetooth: hci5: link tx timeout [ 170.890413][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.891899][ T4328] Bluetooth: hci5: link tx timeout [ 170.892701][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.894353][ T4328] Bluetooth: hci5: link tx timeout [ 170.895421][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.896983][ T4328] Bluetooth: hci5: link tx timeout [ 170.897879][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.899262][ T4328] Bluetooth: hci5: link tx timeout [ 170.900062][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.901465][ T4328] Bluetooth: hci5: link tx timeout [ 170.902263][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.903657][ T4328] Bluetooth: hci5: link tx timeout [ 170.904406][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.905695][ T4328] Bluetooth: hci5: link tx timeout [ 170.906568][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.908004][ T4328] Bluetooth: hci5: link tx timeout [ 170.908886][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.910222][ T4328] Bluetooth: hci5: link tx timeout [ 170.911055][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.912246][ T4328] Bluetooth: hci5: link tx timeout [ 170.912978][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 171.614807][ T8316] netlink: 'syz.5.1275': attribute type 10 has an invalid length. [ 171.688080][ T8321] device syzkaller0 entered promiscuous mode [ 171.703496][ T8324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.704975][ T8324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.225281][ T8346] netlink: 'syz.3.1287': attribute type 10 has an invalid length. [ 172.305262][ T8346] device syzkaller0 left promiscuous mode [ 172.306500][ T8346] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 172.328922][ T8355] device syzkaller0 entered promiscuous mode [ 172.330869][ T8355] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 172.857142][ T8377] netem: change failed [ 172.873502][ T8375] loop5: detected capacity change from 0 to 40427 [ 172.875291][ T8375] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 172.876628][ T8375] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 172.878960][ T8375] F2FS-fs (loop5): invalid crc value [ 172.887933][ T8375] F2FS-fs (loop5): Found nat_bits in checkpoint [ 172.898028][ T8375] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 172.899377][ T8375] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 172.978181][ T8387] netlink: 'syz.3.1300': attribute type 10 has an invalid length. [ 172.981847][ T8387] device syzkaller0 left promiscuous mode [ 172.985203][ T8387] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 173.033807][ T8389] tipc: Enabled bearer , priority 0 [ 173.101888][ T8392] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1303'. [ 173.990583][ T8415] netlink: 'syz.3.1311': attribute type 10 has an invalid length. [ 174.074547][ T8424] tipc: Enabled bearer , priority 0 [ 174.150200][ T4770] tipc: Node number set to 3117766991 [ 174.680651][ T8446] loop0: detected capacity change from 0 to 40427 [ 174.682407][ T8446] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 174.683522][ T8446] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 174.685610][ T8446] F2FS-fs (loop0): invalid crc value [ 174.688453][ T8446] F2FS-fs (loop0): Found nat_bits in checkpoint [ 174.696763][ T8446] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 174.697979][ T8446] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 175.193028][ T4373] tipc: Node number set to 2883507234 [ 175.379559][ T8460] netlink: 'syz.3.1325': attribute type 10 has an invalid length. [ 175.438090][ T8470] TC_ACT_REPEAT abuse ? [ 175.439405][ C1] TC_ACT_REPEAT abuse ? [ 175.515630][ T8478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.526508][ T8478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.121527][ T8491] tipc: Enabled bearer , priority 0 [ 176.124025][ T8491] device syzkaller0 entered promiscuous mode [ 176.174812][ T8491] tipc: Resetting bearer [ 176.191087][ T8490] tipc: Resetting bearer [ 176.319432][ T8490] tipc: Disabling bearer [ 177.004323][ T8521] device syzkaller0 left promiscuous mode [ 177.005583][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 177.119600][ T4373] TC_ACT_REPEAT abuse ? [ 178.602761][ T8567] TC_ACT_REPEAT abuse ? [ 178.603809][ C0] TC_ACT_REPEAT abuse ? [ 178.980465][ T8583] device syzkaller0 left promiscuous mode [ 178.981689][ T8583] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 179.547998][ T8596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.552991][ T8596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.828633][ T8604] tipc: Enabled bearer , priority 0 [ 179.837239][ T8604] device syzkaller0 entered promiscuous mode [ 179.897938][ T8604] tipc: Resetting bearer [ 179.962751][ T8606] Bluetooth: MGMT ver 1.22 [ 180.325104][ T4770] TC_ACT_REPEAT abuse ? [ 180.598850][ T4473] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 180.825102][ T4473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.828457][ T4473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.835228][ T4473] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 180.837754][ T4473] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.852350][ T4473] usb 1-1: config 0 descriptor?? [ 180.879094][ T4373] tipc: Node number set to 2386955703 [ 180.957920][ T8623] TC_ACT_REPEAT abuse ? [ 180.958973][ C0] TC_ACT_REPEAT abuse ? [ 181.277009][ T4473] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 181.279680][ T4473] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 181.473703][ T4473] cp2112 0003:10C4:EA90.0003: error requesting version [ 181.475582][ T4473] cp2112: probe of 0003:10C4:EA90.0003 failed with error -5 [ 182.535272][ T8653] netem: change failed [ 183.405655][ T4374] usb 1-1: USB disconnect, device number 11 [ 183.473952][ T8677] TC_ACT_REPEAT abuse ? [ 183.475077][ C0] TC_ACT_REPEAT abuse ? [ 183.478281][ T8677] TC_ACT_REPEAT abuse ? [ 183.481426][ T8673] TC_ACT_REPEAT abuse ? [ 183.484408][ T4373] TC_ACT_REPEAT abuse ? [ 183.485491][ C0] TC_ACT_REPEAT abuse ? [ 183.486764][ T4373] TC_ACT_REPEAT abuse ? [ 183.487795][ C0] TC_ACT_REPEAT abuse ? [ 183.701351][ T8687] netem: change failed [ 183.707122][ T8689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.711886][ T8689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.097780][ T8710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.099647][ T8710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.111282][ T8699] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1414'. [ 184.238543][ T8713] loop1: detected capacity change from 0 to 40427 [ 184.240646][ T8713] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 184.241846][ T8713] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 184.243888][ T8713] F2FS-fs (loop1): invalid crc value [ 184.246084][ T8713] F2FS-fs (loop1): Found nat_bits in checkpoint [ 184.253665][ T8713] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 184.254829][ T8713] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 184.355613][ T8722] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1421'. [ 185.291093][ T8747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.292689][ T8747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.667439][ T8764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.670230][ T8764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.842652][ T8766] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.843941][ T8766] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.728732][ T4395] net_ratelimit: 7 callbacks suppressed [ 186.728743][ T4395] TC_ACT_REPEAT abuse ? [ 186.769528][ T8784] loop5: detected capacity change from 0 to 40427 [ 186.771272][ T8784] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 186.772536][ T8784] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 186.774636][ T8784] F2FS-fs (loop5): invalid crc value [ 186.820135][ T8784] F2FS-fs (loop5): Found nat_bits in checkpoint [ 186.875252][ T8784] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 186.876467][ T8784] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 186.927492][ T8801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.005825][ T8801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.360470][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.361673][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.405953][ T8811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.410512][ T8811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.415566][ T8812] syz.0.1453 sent an empty control message without MSG_MORE. [ 188.589896][ T8855] loop4: detected capacity change from 0 to 40427 [ 188.596154][ T8855] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 188.597627][ T8855] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 188.603126][ T8855] F2FS-fs (loop4): invalid crc value [ 188.657083][ T8855] F2FS-fs (loop4): Found nat_bits in checkpoint [ 188.845151][ T8855] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 188.846349][ T8855] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 189.077390][ T8871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.078942][ T8871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.168634][ T8876] netem: change failed [ 189.474606][ T8890] overlayfs: overlapping lowerdir path [ 189.796316][ T8895] TC_ACT_REPEAT abuse ? [ 189.797313][ C0] TC_ACT_REPEAT abuse ? [ 189.919194][ T4373] TC_ACT_REPEAT abuse ? [ 189.975350][ T8907] tipc: Enabled bearer , priority 0 [ 189.976950][ T8907] device syzkaller0 entered promiscuous mode [ 189.983427][ T8907] tipc: Resetting bearer [ 189.985459][ T8906] tipc: Resetting bearer [ 190.039493][ T8906] tipc: Disabling bearer [ 190.107277][ T8913] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1490'. [ 190.109473][ T8909] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1490'. [ 190.136912][ T8915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.138421][ T8915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.212108][ T8920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 190.217310][ T8920] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 190.360671][ T8922] device syzkaller0 left promiscuous mode [ 190.362191][ T8922] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 190.605559][ T8935] loop0: detected capacity change from 0 to 40427 [ 190.607533][ T8935] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 190.608860][ T8935] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 190.612215][ T8935] F2FS-fs (loop0): invalid crc value [ 190.626363][ T8935] F2FS-fs (loop0): Found nat_bits in checkpoint [ 190.634219][ T8935] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 190.635411][ T8935] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 190.750360][ T8947] tipc: Enabling of bearer rejected, already enabled [ 190.755570][ T8947] device syzkaller0 entered promiscuous mode [ 190.757935][ T8947] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 190.881719][ T8959] overlayfs: overlapping lowerdir path [ 191.276397][ T8966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.297094][ T8966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.418402][ T8975] TC_ACT_REPEAT abuse ? [ 191.419470][ C0] TC_ACT_REPEAT abuse ? [ 191.422096][ T8975] TC_ACT_REPEAT abuse ? [ 191.427802][ T8971] TC_ACT_REPEAT abuse ? [ 191.430007][ T4473] TC_ACT_REPEAT abuse ? [ 191.431028][ C1] TC_ACT_REPEAT abuse ? [ 191.605629][ T8989] tipc: Enabling of bearer rejected, already enabled [ 191.778986][ T4473] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 191.878566][ T9017] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 191.881096][ T9017] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.882433][ T9017] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.915591][ T9006] loop5: detected capacity change from 0 to 40427 [ 191.926208][ T9006] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 191.927533][ T9006] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 191.933466][ T9006] F2FS-fs (loop5): invalid crc value [ 191.934213][ T4373] net_ratelimit: 9 callbacks suppressed [ 191.934221][ T4373] TC_ACT_REPEAT abuse ? [ 191.956983][ T9006] F2FS-fs (loop5): Found nat_bits in checkpoint [ 192.013634][ T9022] overlayfs: overlapping lowerdir path [ 192.252595][ T9006] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 192.253764][ T9006] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 192.269142][ T4473] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.270798][ T4473] usb 1-1: config 0 has no interfaces? [ 192.273654][ T4473] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 192.275161][ T4473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.276390][ T4473] usb 1-1: Product: syz [ 192.277099][ T4473] usb 1-1: Manufacturer: syz [ 192.279110][ T4473] usb 1-1: SerialNumber: syz [ 192.282012][ T4473] usb 1-1: config 0 descriptor?? [ 192.422397][ T9035] tipc: Enabled bearer , priority 0 [ 192.424016][ T9035] device syzkaller0 entered promiscuous mode [ 192.429679][ T9035] tipc: Resetting bearer [ 192.432132][ T9034] tipc: Resetting bearer [ 192.489919][ T9034] tipc: Disabling bearer [ 192.540074][ T4770] TC_ACT_REPEAT abuse ? [ 192.645451][ T4374] usb 1-1: USB disconnect, device number 12 [ 192.776856][ T9043] tipc: Resetting bearer [ 193.062278][ T9063] tipc: Enabling of bearer rejected, already enabled [ 193.069122][ T9063] device syzkaller0 entered promiscuous mode [ 193.070375][ T9063] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 193.308853][ T9076] overlayfs: overlapping lowerdir path [ 193.554231][ T9079] device syzkaller0 left promiscuous mode [ 193.555342][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 193.779961][ T9069] loop3: detected capacity change from 0 to 40427 [ 193.790186][ T9069] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 193.794224][ T9069] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 193.805206][ T9069] F2FS-fs (loop3): invalid crc value [ 193.827167][ T9069] F2FS-fs (loop3): Found nat_bits in checkpoint [ 193.846941][ T9069] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 193.848420][ T9069] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 193.862277][ T9099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.865844][ T9099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.970384][ T9101] tipc: Enabling of bearer rejected, already enabled [ 193.972151][ T9101] device syzkaller0 entered promiscuous mode [ 194.064079][ T9107] tipc: Enabling of bearer rejected, already enabled [ 194.189220][ T9110] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1560'. [ 194.286869][ T9115] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1561'. [ 194.372193][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 194.384171][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 194.386408][ T9120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 194.796671][ T9136] overlayfs: overlapping lowerdir path [ 194.990188][ T9137] netlink: 'syz.3.1564': attribute type 1 has an invalid length. [ 194.991565][ T9137] netlink: 'syz.3.1564': attribute type 2 has an invalid length. [ 195.148116][ T9144] tipc: Enabling of bearer rejected, already enabled [ 195.311907][ T9150] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1573'. [ 195.693365][ T9171] tipc: Enabling of bearer rejected, already enabled [ 195.885847][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1586'. [ 195.889945][ T9184] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 196.056156][ T9198] tipc: Enabling of bearer rejected, already enabled [ 196.153169][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1597'. [ 196.156363][ T9209] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 196.320589][ T4373] TC_ACT_REPEAT abuse ? [ 196.957353][ T9236] tipc: Enabling of bearer rejected, already enabled [ 196.975960][ T9236] device syzkaller0 entered promiscuous mode [ 196.977029][ T9236] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 196.977705][ T9238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.980690][ T9238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.077247][ T9246] TC_ACT_REPEAT abuse ? [ 197.078434][ C1] TC_ACT_REPEAT abuse ? [ 197.080871][ T9246] netlink: 324 bytes leftover after parsing attributes in process `syz.5.1610'. [ 197.127292][ T9253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.128759][ T9253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.166720][ T9256] tipc: Enabled bearer , priority 0 [ 197.170084][ T9256] device syzkaller0 entered promiscuous mode [ 197.179489][ T9256] tipc: Resetting bearer [ 197.184820][ T9255] tipc: Resetting bearer [ 197.282272][ T9255] tipc: Disabling bearer [ 197.373279][ T9267] tipc: Enabled bearer , priority 0 [ 197.374993][ T9267] device syzkaller0 entered promiscuous mode [ 197.425589][ T9267] tipc: Resetting bearer [ 197.432723][ T9266] tipc: Resetting bearer [ 197.479460][ T9266] tipc: Disabling bearer [ 197.646974][ T9285] device syzkaller0 entered promiscuous mode [ 199.529213][ T4395] TC_ACT_REPEAT abuse ? [ 200.167401][ T9307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.169291][ T9307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.707404][ T9310] TC_ACT_REPEAT abuse ? [ 203.843221][ C1] TC_ACT_REPEAT abuse ? [ 205.919065][ T4770] TC_ACT_REPEAT abuse ? [ 208.680147][ T9298] tipc: Enabling of bearer rejected, already enabled [ 208.910650][ T9343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.912477][ T9343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.119310][ T4395] TC_ACT_REPEAT abuse ? [ 209.481260][ T9366] TC_ACT_REPEAT abuse ? [ 209.482475][ C0] TC_ACT_REPEAT abuse ? [ 209.486941][ T9366] TC_ACT_REPEAT abuse ? [ 209.488624][ T39] TC_ACT_REPEAT abuse ? [ 209.499137][ C0] TC_ACT_REPEAT abuse ? [ 209.508254][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1654'. [ 209.522565][ T9366] TC_ACT_REPEAT abuse ? [ 209.523751][ C1] TC_ACT_REPEAT abuse ? [ 209.575944][ T4328] Bluetooth: hci5: link tx timeout [ 209.576892][ T4328] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 209.577536][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1656'. [ 209.688246][ T9374] loop5: detected capacity change from 0 to 40427 [ 209.708180][ T9374] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 209.709692][ T9374] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 209.711885][ T9374] F2FS-fs (loop5): invalid crc value [ 209.730870][ T9374] F2FS-fs (loop5): Found nat_bits in checkpoint [ 209.747101][ T9374] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 209.748306][ T9374] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 209.768127][ T9382] netem: change failed [ 209.816919][ T9392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.819111][ T9392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.823673][ T9389] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1659'. [ 209.826082][ T9379] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1659'. [ 209.847624][ T9394] TC_ACT_REPEAT abuse ? [ 209.848585][ C0] TC_ACT_REPEAT abuse ? [ 210.792133][ T9425] overlayfs: missing 'lowerdir' [ 211.083909][ T9431] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1676'. [ 211.086110][ T9428] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1676'. [ 211.127842][ T9435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1679'. [ 211.186304][ T9438] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 211.238151][ T9442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1682'. [ 211.270249][ T9444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.276378][ T9444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.385801][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1694'. [ 212.585985][ T9492] device syzkaller0 entered promiscuous mode [ 212.587518][ T9492] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 212.612987][ T9494] tipc: Enabled bearer , priority 0 [ 212.616848][ T9494] device syzkaller0 entered promiscuous mode [ 212.681064][ T9493] tipc: Resetting bearer [ 212.760339][ T9493] tipc: Disabling bearer [ 213.101167][ T4374] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 213.630403][ T4374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.632231][ T4374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.633900][ T4374] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 213.635481][ T4374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.638354][ T4374] usb 1-1: config 0 descriptor?? [ 214.043393][ T4374] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 214.045910][ T4374] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 214.066260][ T9543] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 214.246424][ T4374] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 214.448707][ T4374] cp2112 0003:10C4:EA90.0004: error requesting SMBus config [ 214.453745][ T4374] cp2112: probe of 0003:10C4:EA90.0004 failed with error -32 [ 215.125862][ T9573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.128483][ T9573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.519147][ T4770] net_ratelimit: 4 callbacks suppressed [ 215.519158][ T4770] TC_ACT_REPEAT abuse ? [ 216.105675][ T4770] usb 1-1: USB disconnect, device number 13 [ 216.245670][ T9605] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 216.580733][ T9608] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1738'. [ 216.582576][ T9607] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1738'. [ 216.964839][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1742'. [ 217.107422][ T9625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.109162][ T9625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.768938][ T9635] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1749'. [ 217.770883][ T9634] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.1749'. [ 217.812660][ T9637] tipc: Enabling of bearer rejected, already enabled [ 218.092528][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1754'. [ 218.228234][ T9659] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 218.628877][ T4374] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 218.719334][ T4770] TC_ACT_REPEAT abuse ? [ 218.798963][ C0] Unable to handle kernel paging request at virtual address dfff800000000000 [ 218.800525][ C0] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 218.801909][ C0] Mem abort info: [ 218.802452][ C0] ESR = 0x0000000096000006 [ 218.803194][ C0] EC = 0x25: DABT (current EL), IL = 32 bits [ 218.804083][ C0] SET = 0, FnV = 0 [ 218.804669][ C0] EA = 0, S1PTW = 0 [ 218.805276][ C0] FSC = 0x06: level 2 translation fault [ 218.806167][ C0] Data abort info: [ 218.806724][ C0] ISV = 0, ISS = 0x00000006 [ 218.807412][ C0] CM = 0, WnR = 0 [ 218.807974][ C0] [dfff800000000000] address between user and kernel address ranges [ 218.809296][ C0] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 218.810337][ C0] Modules linked in: [ 218.810851][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 218.811903][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 218.813372][ C0] pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 218.814660][ C0] pc : fq_codel_enqueue+0x79c/0xf38 [ 218.815535][ C0] lr : fq_codel_enqueue+0x728/0xf38 [ 218.816354][ C0] sp : ffff8000080073a0 [ 218.817085][ C0] x29: ffff8000080074a0 x28: 0000000000000000 x27: 0000000000000000 [ 218.818388][ C0] x26: 0000000000000000 x25: 0000000000000001 x24: ffff000106a00000 [ 218.819725][ C0] x23: 0000000000000000 x22: ffff0000c3048ad0 x21: ffff800008007600 [ 218.819998][ T4374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.820987][ C0] x20: dfff800000000000 x19: 0000000000000000 x18: 00000000ff8d3a60 [ 218.822906][ T4374] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.824046][ C0] x17: 0000000000c200d0 x16: ffff8000082d22d4 x15: 0000000000000000 [ 218.825626][ T4374] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 218.826804][ C0] x14: 0000000000000003 x13: 1ffff00002a180b1 x12: 0000000000ff0100 [ 218.828234][ T4374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.829476][ C0] x11: ff0080000ffaca10 x10: 0000000000000000 x9 : 1fffe00020d40000 [ 218.829500][ C0] x8 : 0000000000000000 x7 : ffff8000083b9864 x6 : 0000000000000000 [ 218.829510][ C0] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 218.834573][ C0] x2 : ffff0000c3048b28 x1 : 0000000000000000 x0 : 0000000000000000 [ 218.835899][ C0] Call trace: [ 218.836044][ T4374] usb 1-1: config 0 descriptor?? [ 218.836447][ C0] fq_codel_enqueue+0x79c/0xf38 [ 218.837869][ C0] netem_dequeue+0xa74/0x107c [ 218.838651][ C0] __qdisc_run+0x224/0x1368 [ 218.839340][ C0] __dev_queue_xmit+0xc18/0x309c [ 218.840128][ C0] tipc_l2_send_msg+0x29c/0x35c [ 218.840893][ C0] tipc_bearer_xmit_skb+0x244/0x384 [ 218.841726][ C0] tipc_disc_timeout+0x4c8/0x608 [ 218.842448][ C0] call_timer_fn+0x1b8/0x964 [ 218.843259][ C0] __run_timers+0x460/0x6bc [ 218.844046][ C0] run_timer_softirq+0x7c/0x114 [ 218.844841][ C0] handle_softirqs+0x318/0xc6c [ 218.845610][ C0] __do_softirq+0x14/0x20 [ 218.846380][ C0] ____do_softirq+0x14/0x20 [ 218.847168][ C0] call_on_irq_stack+0x30/0x48 [ 218.847897][ C0] do_softirq_own_stack+0x20/0x2c [ 218.848651][ C0] __irq_exit_rcu+0x23c/0x43c [ 218.849333][ C0] irq_exit_rcu+0x14/0x84 [ 218.850069][ C0] el1_interrupt+0x38/0x54 [ 218.850771][ C0] el1h_64_irq_handler+0x18/0x24 [ 218.851576][ C0] el1h_64_irq+0x64/0x68 [ 218.852336][ C0] arch_local_irq_enable+0xc/0x18 [ 218.853180][ C0] default_idle_call+0x68/0xdc [ 218.854027][ C0] do_idle+0x1d8/0x4bc [ 218.854700][ C0] cpu_startup_entry+0x5c/0x74 [ 218.855514][ C0] rest_init+0x2d4/0x2f0 [ 218.856186][ C0] start_kernel+0x0/0x554 [ 218.856906][ C0] start_kernel+0x4a4/0x554 [ 218.857595][ C0] __primary_switched+0xb8/0xc0 [ 218.858405][ C0] Code: aa1803e0 9624a7a8 f9400317 d343fee8 (38746908) [ 218.859638][ C0] ---[ end trace 0000000000000000 ]--- [ 219.144812][ C0] Kernel panic - not syncing: Oops: Fatal exception in interrupt [ 219.145995][ C0] SMP: stopping secondary CPUs [ 219.146826][ C0] Kernel Offset: disabled [ 219.147570][ C0] CPU features: 0x080000,000f0097,a65bfea7 [ 219.148563][ C0] Memory Limit: none [ 219.429447][ C0] Rebooting in 86400 seconds..