last executing test programs: 6.16912718s ago: executing program 4 (id=1474): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000055a60701000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000400008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.009745869s ago: executing program 3 (id=1475): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) sendmsg$inet(r3, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 5.960633432s ago: executing program 4 (id=1476): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0000800000000180c200000086dd"], 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0xa, 0x0, 0x0) 5.729818495s ago: executing program 4 (id=1478): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r2, &(0x7f00000001c0)=[{0x0}], 0x1) 5.093704843s ago: executing program 3 (id=1480): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000004) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000700)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x101, 0x8, 0x101}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2, 0x1, 0xd8}, 0x14) 4.762760472s ago: executing program 3 (id=1481): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) syz_emit_ethernet(0xda, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) fcntl$setstatus(r2, 0x4, 0x5000) r4 = syz_open_procfs(0x0, &(0x7f0000001300)='net/kcm\x00') prctl$PR_SET_PTRACER(0x59616d61, r0) read$char_usb(r4, &(0x7f0000000040)=""/4109, 0x100d) 4.737305133s ago: executing program 1 (id=1482): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000480)="4991cab2103cfc40c27f9740951ce09de83575da60bf1d273c8aecb55a00df8b470943cc80a808419c751ddbc5d0d794", 0x30}], 0x2) 4.305682339s ago: executing program 1 (id=1485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001708000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74f280, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x18, 0xb}, {0x6, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x1, 0x406, 0x4, 0xffffffff, 0xb}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x7fffffff, 0xac5d, 0x5, 0x52780f82}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.27730495s ago: executing program 2 (id=1486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0x18, 0x890d}, @void, @eth={@link_local, @local, @void, {@generic={0x8848}}}}, 0x12) 3.982594128s ago: executing program 2 (id=1488): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="0000800000000180c200000086dd"], 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x25, 0x0, @val=@iter={0x0}}, 0x20) 3.92856691s ago: executing program 1 (id=1490): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x20}, 0x38) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2ded, 0x4000, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r4, r3, &(0x7f00000000c0)=0x8e, 0x180000504) ioprio_get$uid(0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000200)=ANY=[@ANYRES8], 0xb) r5 = syz_open_dev$vim2m(&(0x7f0000000140), 0x2004, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000100)=0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f00000002c0)=[r1], 0x1) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x401e80) bind$packet(0xffffffffffffffff, 0x0, 0x0) 3.729462142s ago: executing program 2 (id=1491): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) 3.42901586s ago: executing program 1 (id=1492): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 3.239666291s ago: executing program 2 (id=1493): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="0500ec752ded7a92cb0c46c1573d00000000008510000002000000850000007600000095000000f8375c"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1900000004", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000005c0)="6994efb37011ac20cb3958d93f0c1e489df8b608190ff45c3e9c48d092cc878459aa6ea9e698b2780532ec909b183aa458428a228932cbfa59c9d38e18769ad59487fcd9eb660282c06c4c732312ac3b3a5766ddf5080ad12f96b4629062e2ff246fcd05b253d3b62beb8d625add12", 0x0, 0x2}, 0x20) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x0) 3.068164741s ago: executing program 1 (id=1494): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x20, 0x80, 0x1c, {0xff, 0x2270, 0x1000, 0x9, 0x44, 0x8000, 0xfffd, 0xec, 0x100, 0xfffc, 0x3, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000680)=0x1, 0x4) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f00000041c0)={0x2020}, 0x2020) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$tmpfs(0x0, 0x0, 0x0, 0x4000, &(0x7f0000000a00)={[{@inode32}]}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000800)={0x40, 0xb}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x7f}, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 2.654034155s ago: executing program 0 (id=1497): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f7465616d"], 0x110}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2.57382337s ago: executing program 4 (id=1498): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000480)="4991cab2103cfc40c27f9740951ce09de83575da60bf1d273c8aecb55a00df8b470943cc80a808419c751ddbc5d0d794", 0x30}], 0x2) 2.299145926s ago: executing program 3 (id=1499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x4000004) socket$nl_xfrm(0x10, 0x3, 0x6) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x10d083, 0x0) 2.23020716s ago: executing program 0 (id=1500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x44, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 2.05114558s ago: executing program 0 (id=1501): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001708000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x74f280, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x60000) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0x18, 0xb}, {0x6, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x0, 0x1, 0x406, 0x4, 0xffffffff, 0xb}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x7fffffff, 0xac5d, 0x5, 0x52780f82}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004060}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000000300)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.989709424s ago: executing program 4 (id=1502): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001980)=[{{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000001c0)="f5c4ca300465bd53be3b3ea84c2507d424ae705440b24018798856dd795f0e5dbb3a58eaf21556359658a6f94fa579410e4d7c2c86f0c96a889d5ee5cbc397df9660eb53b56c6ead4ecdbc7eba7bc1e3b0ad4527fd81b771cdcbaf9c16bf990f3f821123a5223b95fe1c426b88a78a1f74ab577edee2d2d31ba731b51e7486bf4b43624862031308403d08d24f9b2ed4ae2e8434647382002f380e373c5ff3e3824847b26e8f627c8be824d957fd4221172501276669", 0xb6}, {&(0x7f0000000400)="2a153ea712eb55d955ba48bdd6de5bdc688c9688225bbdcb28ccbc3ec3dc9d6c8118186634755002fecd068347e05a65d462fec7c967f8aa98cb47b1c379d13a51353ae29f6420d2eac34acb3d85fd9d78a377e7eb2456c4d889c47f33af90582552e0445cbcd72e9d6d00a1d55d320cc2b5dd0e361890", 0x77}, {&(0x7f00000009c0)="c32dae0f7feed76baada67049b3aba346d91f9736edc080c05d301660dce59756eb846317e7970d9192849a98a0edd91c6b27fbe5418224eb04400bad9f9fdfc82042c7b719a720fd03925d4e7e77c0234cf2171bec249965c8611bfc41b8981e2cf323ddc34d6bbfb25443adaaa2bdebd5fd03ea2828cdad8dcd027d812ee32c08c9a8bb37911aba0d1592c4d71e3102d0365823f30a69ae3866ca6af324c862becb0459b252de677fd1880a0349b5d803689281973e71363772a571749abbc60958cedf831f073fa06b390a18c49e7c4189c56c1bfa4e77a5fce2241", 0xdd}, {&(0x7f0000000740)="76fe6fd3d04b16ddae812dee2d45f4a5a81ca3410321dc281045be9506cee3a61d9ffa7391ffea86f32bddf2eceee473b486d6138d88f671cdbcd844f3f2457051aacfe387b0d6380df135b75cd2998a7a", 0x51}, {&(0x7f0000001a80)="f0bab719253e2f1dce397f32d179f29738dd6f00c70f535d751352e8ee975a6211ca416b5e76b366e33463a98925998bf95c202e61201df0562406dd374e3ddf8caaf0547676e728ea88ef53db3f17410c6e3229f09775e0675b2412d8e3c8308acfbc7c34475b78a0f8c861ee10d6389ee6625bb8570d2cf2f39594e82fffb885d82e0035122ced2ecfb8d0c2f3b98a5751811f50c26b0eda", 0x99}, {&(0x7f0000000c80)="2bf0f80879e055cacaf748d4a8c68d704d2ed010ceebd4e28e8c4a23fc9607b90e4cddcaaf39d8ad66d1dceaba5512b0e46bf841ae8439f58f45bb0e97059bea2a647f54d96561e94ebd92d59c85ba2b2477ffa74ddebd31", 0x58}, {&(0x7f0000000d00)="3c8e30cc80ff534d20f8158b7b345c5d0aae8306f2150d975d81fb074b6ba67fd3a7d625a3fa924c0efe28e3084bf116159da6d951e9", 0x36}], 0x7}}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001300)="bbef3434c306a2ef3126ae62e0a8c95325971e0606bb408b428d3a5b72053c183c5e77e0fef0fa043a1092a58676f2315438693864d96c53e26e4e85316658860ba32237c9eb3c2620ac8d88d17938a0239ee22856f6d93e2e234546c3e6d52be5ac5ad8e2f63797ab91c1fdbb707e70bff1d94c3f9f2b59497d4877", 0x7c}, {&(0x7f0000001380)="fa8b0c5cf8e561ae9a1f891f41c074444b452f198b3260093d907984d89106ba0f0de209bf854a9754bb660b229fa1d851a748ec2ac50714df57861e4b", 0x3d}, {&(0x7f00000013c0)="f262cee1f127fddbb2c479e9eec302917e11bcd4af7853042594db186ce45585987e254c7e6fb10d11867643f2c55052831cd00441b5fc7e498591bc447aa18a66a3a98b392a2f6739d4ca6d69a6c1593d7910251e0bf62ead8409319ece016d84663b701fa0be25bd6ef55ea622a7c67adba725e690be8405509caa42890fb7b95e2d6863e54a01f1f3a5d646", 0x8d}, {&(0x7f0000001480)="667a0d850a62b92cc92e3d1687ce665bb2d8df4ba3124650c25618352063e7143bf60b383136e4a1d279084399374eeb186b48c58261c7831bc93cee1b64", 0x3e}], 0x4}}], 0x2, 0x40) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.785703726s ago: executing program 2 (id=1503): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x248) close(r1) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40043d0d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB, @ANYRESHEX=r3]) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 1.765498937s ago: executing program 0 (id=1504): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 745.827276ms ago: executing program 3 (id=1505): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001200010000000000000000001c8be1f3d9c1a38b079e90e0000002000000000000000000000000000004d50000000014000d00200100000000000000000000000000000c00150000000000000000000800180003000000"], 0x50}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x21}, 0x2}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x4, 0x700000000000000}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x28, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100fdffffff0400d1000800000008000300", @ANYRES32=r4], 0x20}}, 0x0) 737.947117ms ago: executing program 4 (id=1506): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x8, 0x4c, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x43}}, {@multicast2, 0x4000}]}, @lsrr={0x83, 0xb, 0xcb, [@broadcast, @multicast2]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14, 0x0) accept4$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14, 0x80000) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80400, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r7, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000240), &(0x7f00000002c0)=0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_create1(0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 688.53271ms ago: executing program 2 (id=1507): mount(0x0, 0x0, 0x0, 0xa00000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x15) 441.195424ms ago: executing program 0 (id=1508): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) 273.386984ms ago: executing program 1 (id=1509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x67) r3 = socket(0x10, 0x3, 0x0) recvmsg$inet_nvme(r3, &(0x7f0000000480)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000380)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {0x0}, {0x0}], 0x3, &(0x7f00000003c0)=""/136, 0x88}, 0x12100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80800, 0x10a) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/wireless\x00') r9 = msgget(0x1, 0x244) msgctl$MSG_STAT(r9, 0xb, 0x0) pread64(r8, &(0x7f00000000c0)=""/144, 0x90, 0x2f) connect$can_bcm(r7, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x2, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x24000895) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000040)=0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0x0, 0x20007, 0x4000}, 0x80, 0x200, 0x4, 0x0, 0x4, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0x6, 0x0, 0xfffffffd}}}}]}, 0x78}}, 0x0) 314.59µs ago: executing program 0 (id=1510): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f7465616d"], 0x110}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 0s ago: executing program 3 (id=1511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x44, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "57b8"}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) kernel console output (not intermixed with test programs): ink: 28 bytes leftover after parsing attributes in process `syz.4.40'. [ 88.915251][ T4515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.42'. [ 89.314535][ T4525] netlink: 'syz.3.47': attribute type 13 has an invalid length. [ 89.384174][ T4527] netlink: 32 bytes leftover after parsing attributes in process `syz.4.48'. [ 89.967879][ T4525] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.975957][ T4525] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.660359][ T4525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.733356][ T4525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.364819][ T4525] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.374189][ T4525] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.390375][ T4525] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.408695][ T4525] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.804840][ T4534] device syzkaller0 entered promiscuous mode [ 92.008419][ T4552] device syzkaller0 entered promiscuous mode [ 92.133876][ T4553] device syzkaller0 entered promiscuous mode [ 92.635328][ T4561] netlink: 'syz.2.56': attribute type 39 has an invalid length. [ 92.936225][ T4585] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20004 [ 92.996594][ T4589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 93.031926][ T4589] ksmbd: Unknown IPC event: 0, ignore. [ 93.252847][ T4572] device syzkaller0 entered promiscuous mode [ 93.897599][ T4607] device syzkaller0 entered promiscuous mode [ 93.912774][ T4609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.69'. [ 94.448747][ T4626] device syzkaller0 entered promiscuous mode [ 94.737241][ T4632] tipc: Started in network mode [ 94.755117][ T4632] tipc: Node identity 46241ab32432, cluster identity 4711 [ 94.779761][ T4632] tipc: Enabled bearer , priority 0 [ 94.800311][ T4634] device syzkaller0 entered promiscuous mode [ 94.868397][ T4632] tipc: Resetting bearer [ 94.900138][ T4630] tipc: Resetting bearer [ 94.960531][ T4630] tipc: Disabling bearer [ 94.986108][ T4636] device syzkaller0 entered promiscuous mode [ 95.397494][ T4649] device syzkaller0 entered promiscuous mode [ 95.775718][ T4659] device syzkaller0 entered promiscuous mode [ 96.144992][ T4673] netlink: 52 bytes leftover after parsing attributes in process `syz.2.95'. [ 96.194347][ T4675] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 96.210748][ T4673] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.218470][ T4673] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.245152][ T4676] netlink: 76 bytes leftover after parsing attributes in process `syz.2.95'. [ 96.283704][ T4676] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.290979][ T4676] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.299270][ T4676] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.306511][ T4676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.322203][ T4676] netlink: 52 bytes leftover after parsing attributes in process `syz.2.95'. [ 96.336511][ T4681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.97'. [ 96.356046][ T4676] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.363333][ T4676] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.664755][ T4688] device syzkaller0 entered promiscuous mode [ 96.944295][ T4696] device syzkaller0 entered promiscuous mode [ 97.101698][ T4700] device syzkaller0 entered promiscuous mode [ 97.358416][ T4710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 97.533299][ T4709] netlink: 76 bytes leftover after parsing attributes in process `syz.3.110'. [ 97.947347][ T4732] device syzkaller0 entered promiscuous mode [ 98.102538][ T4736] tipc: Started in network mode [ 98.119927][ T4736] tipc: Node identity a6d1deb638ab, cluster identity 4711 [ 98.163327][ T4736] tipc: Enabled bearer , priority 10 [ 98.188508][ T4741] device syzkaller0 entered promiscuous mode [ 98.207673][ T4739] device syzkaller0 entered promiscuous mode [ 98.226362][ T4736] tipc: Resetting bearer [ 98.289185][ T4735] tipc: Resetting bearer [ 98.312946][ T4735] tipc: Disabling bearer [ 98.354573][ T4747] tipc: Enabled bearer , priority 0 [ 98.371654][ T4744] device syzkaller0 entered promiscuous mode [ 98.404946][ T4744] tipc: Resetting bearer [ 98.433858][ T4743] tipc: Resetting bearer [ 98.545876][ T4743] tipc: Disabling bearer [ 98.631004][ T4749] device syzkaller0 entered promiscuous mode [ 98.855004][ T4757] netlink: 200 bytes leftover after parsing attributes in process `syz.2.131'. [ 98.897136][ T4757] device veth0 entered promiscuous mode [ 98.952816][ T4756] device veth0 left promiscuous mode [ 99.262252][ T4777] netlink: 'syz.1.140': attribute type 13 has an invalid length. [ 99.581285][ T4777] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.589010][ T4777] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.648620][ T4777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.757255][ T4777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.280896][ T4777] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.290055][ T4777] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.299354][ T4777] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.308523][ T4777] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.543786][ T4777] syz.1.140 (4777) used greatest stack depth: 20656 bytes left [ 102.246165][ T4841] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.291020][ T4847] tipc: Started in network mode [ 102.310587][ T4847] tipc: Node identity 7e866d67206, cluster identity 4711 [ 102.338913][ T4847] tipc: Enabled bearer , priority 0 [ 102.376397][ T4849] device syzkaller0 entered promiscuous mode [ 102.468318][ T4841] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.523397][ T4847] tipc: Resetting bearer [ 102.626878][ T4841] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.641131][ T4846] tipc: Resetting bearer [ 102.664910][ T4846] tipc: Disabling bearer [ 102.674585][ T4863] netlink: 'syz.3.162': attribute type 8 has an invalid length. [ 102.684434][ T4865] netlink: 'syz.1.163': attribute type 1 has an invalid length. [ 102.913482][ T4841] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.135540][ T4882] netlink: 'syz.3.167': attribute type 1 has an invalid length. [ 103.280264][ T4841] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.395938][ T4841] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.416187][ T4878] device syzkaller0 entered promiscuous mode [ 103.441246][ T4841] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.522558][ T4841] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.597664][ T4897] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 103.802914][ T4905] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 103.839577][ T4903] netlink: 'syz.4.176': attribute type 8 has an invalid length. [ 103.888353][ T4905] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 103.993009][ T4905] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 104.355518][ T4926] device syzkaller0 entered promiscuous mode [ 104.843179][ T4942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.186'. [ 105.003858][ T4947] netlink: 'syz.1.191': attribute type 8 has an invalid length. [ 105.149681][ T4953] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 105.189456][ T4953] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 105.201598][ T4953] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 105.238608][ T4957] device macvlan2 entered promiscuous mode [ 105.255234][ T4957] device bond1 entered promiscuous mode [ 105.262080][ T4957] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 105.300212][ T4957] device bond1 left promiscuous mode [ 105.514782][ T4963] tipc: Enabled bearer , priority 0 [ 105.522315][ T4963] device syzkaller0 entered promiscuous mode [ 105.542604][ T4963] tipc: Resetting bearer [ 105.574114][ T4962] tipc: Resetting bearer [ 105.625914][ T4962] tipc: Disabling bearer [ 106.216359][ T4779] hid-generic 0005:10CF:0009.0001: unknown main item tag 0x0 [ 106.236447][ T4779] hid-generic 0005:10CF:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 106.424199][ T4996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.210'. [ 106.567896][ T4999] netlink: 60 bytes leftover after parsing attributes in process `syz.2.211'. [ 107.130351][ T5014] netlink: 'syz.2.217': attribute type 1 has an invalid length. [ 107.190975][ T5014] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 107.238203][ T5014] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 107.298928][ T5019] xt_hashlimit: size too large, truncated to 1048576 [ 107.600311][ T5023] netlink: 16 bytes leftover after parsing attributes in process `syz.0.220'. [ 107.882206][ T5029] tipc: Started in network mode [ 107.903178][ T5029] tipc: Node identity d62ee07e913b, cluster identity 4711 [ 107.918727][ T5029] tipc: Enabled bearer , priority 0 [ 107.945130][ T5032] device syzkaller0 entered promiscuous mode [ 107.967466][ T5031] netlink: 'syz.2.223': attribute type 39 has an invalid length. [ 108.005761][ T5029] tipc: Resetting bearer [ 108.013730][ T5028] tipc: Resetting bearer [ 108.092407][ T5028] tipc: Disabling bearer [ 108.141219][ T5037] netlink: 'syz.2.225': attribute type 13 has an invalid length. [ 108.199492][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.221029][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.239667][ T5037] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.410969][ T5039] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 108.490626][ T5039] device syzkaller0 entered promiscuous mode [ 109.313857][ T5054] netlink: 16 bytes leftover after parsing attributes in process `syz.2.232'. [ 109.621897][ T5062] netlink: 'syz.2.235': attribute type 39 has an invalid length. [ 109.752063][ T5064] device syzkaller0 entered promiscuous mode [ 110.394174][ T5078] netlink: 52 bytes leftover after parsing attributes in process `syz.1.242'. [ 110.420314][ T5078] netlink: 52 bytes leftover after parsing attributes in process `syz.1.242'. [ 111.023630][ T5098] netlink: 'syz.4.252': attribute type 1 has an invalid length. [ 111.184122][ T5100] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 111.214094][ T5100] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 111.370326][ T5112] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.502087][ T5107] device macvlan2 entered promiscuous mode [ 111.523702][ T5112] netlink: 40 bytes leftover after parsing attributes in process `syz.2.255'. [ 111.553583][ T5107] device bond1 entered promiscuous mode [ 111.576874][ T5107] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 111.603697][ T5107] device bond1 left promiscuous mode [ 111.686971][ T5120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.255'. [ 111.727753][ T5120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.255'. [ 111.757646][ T5120] netlink: 'syz.2.255': attribute type 14 has an invalid length. [ 112.140923][ T5145] netlink: 'syz.3.263': attribute type 1 has an invalid length. [ 112.299826][ T5149] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 112.316478][ T5149] bond3: (slave batadv2): making interface the new active one [ 112.333948][ T5149] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 112.352871][ T5152] netlink: 16 bytes leftover after parsing attributes in process `syz.0.266'. [ 113.197260][ T5187] device syzkaller0 entered promiscuous mode [ 113.314105][ T5190] netlink: 'syz.4.280': attribute type 39 has an invalid length. [ 113.553036][ T5198] tipc: Started in network mode [ 113.564595][ T5198] tipc: Node identity 62095d139aa7, cluster identity 4711 [ 113.571906][ T5198] tipc: Enabled bearer , priority 0 [ 113.642828][ T5201] device syzkaller0 entered promiscuous mode [ 113.662193][ T5205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.286'. [ 113.676421][ T5200] netlink: 'syz.3.284': attribute type 1 has an invalid length. [ 113.760953][ T5206] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 113.776068][ T5206] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 113.812234][ T5214] tipc: Resetting bearer [ 113.827579][ T5211] netlink: 'syz.4.288': attribute type 13 has an invalid length. [ 114.998476][ T5211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.047549][ T5211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.521475][ T5211] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.530529][ T5211] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.540818][ T5211] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.550074][ T5211] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.738837][ T5195] tipc: Resetting bearer [ 115.802710][ T5195] tipc: Disabling bearer [ 115.829128][ T27] tipc: Node number set to 4172176659 [ 115.839264][ T5240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 116.116207][ T5250] syz.3.295 sent an empty control message without MSG_MORE. [ 116.163352][ T5249] tipc: Enabled bearer , priority 10 [ 116.176468][ T5249] device syzkaller0 entered promiscuous mode [ 116.251381][ T5252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.298'. [ 116.288886][ T5252] netlink: 20 bytes leftover after parsing attributes in process `syz.0.298'. [ 116.335070][ T5248] tipc: Resetting bearer [ 116.391772][ T5248] tipc: Disabling bearer [ 116.543941][ T5261] netlink: 'syz.0.301': attribute type 8 has an invalid length. [ 117.432587][ T5292] ip6_vti0 speed is unknown, defaulting to 1000 [ 117.459321][ T5292] ip6_vti0 speed is unknown, defaulting to 1000 [ 117.525788][ T5294] netlink: 'syz.0.315': attribute type 1 has an invalid length. [ 117.585224][ T5292] ip6_vti0 speed is unknown, defaulting to 1000 [ 118.060323][ T5292] infiniband syz2: set down [ 118.066972][ T4324] ip6_vti0 speed is unknown, defaulting to 1000 [ 118.094456][ T5292] infiniband syz2: added ip6_vti0 [ 118.119976][ T5312] tipc: Enabled bearer , priority 10 [ 118.138655][ T5312] device syzkaller0 entered promiscuous mode [ 118.187326][ T5292] RDS/IB: syz2: added [ 118.192268][ T5292] smc: adding ib device syz2 with port count 1 [ 118.200038][ T5292] smc: ib device syz2 port 1 has pnetid [ 118.258548][ T4324] ip6_vti0 speed is unknown, defaulting to 1000 [ 118.318930][ T5318] netlink: 20 bytes leftover after parsing attributes in process `syz.0.324'. [ 118.370020][ T5292] ip6_vti0 speed is unknown, defaulting to 1000 [ 118.379532][ T5311] tipc: Resetting bearer [ 118.450681][ T5311] tipc: Disabling bearer [ 118.752654][ T5292] ip6_vti0 speed is unknown, defaulting to 1000 [ 118.817940][ T5336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.328'. [ 119.058281][ T5343] netlink: 'syz.2.330': attribute type 1 has an invalid length. [ 119.118205][ T5292] ip6_vti0 speed is unknown, defaulting to 1000 [ 119.438123][ T5292] ip6_vti0 speed is unknown, defaulting to 1000 [ 119.642981][ T5360] team0 (unregistering): Port device team_slave_0 removed [ 119.671343][ T5360] team0 (unregistering): Port device team_slave_1 removed [ 119.705769][ T5292] ip6_vti0 speed is unknown, defaulting to 1000 [ 120.154032][ T5344] infiniband !yz!: set down [ 120.163461][ T5344] infiniband !yz!: added team_slave_0 [ 120.190467][ T5344] rdma_rxe: unable to create cq [ 120.209107][ T5344] infiniband !yz!: Couldn't create ib_mad CQ [ 120.224907][ T5372] tipc: Enabled bearer , priority 0 [ 120.233341][ T5372] device syzkaller0 entered promiscuous mode [ 120.251171][ T5344] infiniband !yz!: Couldn't open port 1 [ 120.324757][ T5344] RDS/IB: !yz!: added [ 120.339657][ T5344] smc: adding ib device !yz! with port count 1 [ 120.361970][ T5344] smc: ib device !yz! port 1 has pnetid [ 120.369004][ T5375] tipc: Resetting bearer [ 120.404571][ T5371] tipc: Resetting bearer [ 120.494659][ T5371] tipc: Disabling bearer [ 120.673971][ T5385] netlink: 60 bytes leftover after parsing attributes in process `syz.4.350'. [ 121.441780][ T5414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.363'. [ 121.647838][ T5420] netlink: 60 bytes leftover after parsing attributes in process `syz.4.365'. [ 121.674356][ T5406] netlink: 'syz.3.360': attribute type 16 has an invalid length. [ 121.694272][ T5406] netlink: 'syz.3.360': attribute type 17 has an invalid length. [ 121.741630][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 121.783774][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 121.811090][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 121.819681][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 121.828287][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 121.836038][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 121.844086][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 121.852037][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 121.861248][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 121.869188][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 121.877569][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 121.885530][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 121.893861][ T5406] infiniband syz2: set active [ 121.899787][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 121.907755][ T5406] infiniband syz2: set active [ 121.912862][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 121.921488][ T5406] infiniband syz2: set active [ 121.927693][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): sit0: link becomes ready [ 121.941344][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): ip6tnl0: link becomes ready [ 121.950974][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gre0: link becomes ready [ 121.967874][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 121.983510][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): ip6gretap0: link becomes ready [ 122.002542][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.012502][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.026755][ T5406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.042186][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 122.060546][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 122.072182][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): nlmon0: link becomes ready [ 122.089214][ T5406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.133497][ T4785] ip6_vti0 speed is unknown, defaulting to 1000 [ 122.141838][ T4790] ip6_vti0 speed is unknown, defaulting to 1000 [ 122.148832][ T27] ip6_vti0 speed is unknown, defaulting to 1000 [ 122.157344][ T27] ip6_vti0 speed is unknown, defaulting to 1000 [ 122.947021][ T5444] netlink: 'syz.1.376': attribute type 10 has an invalid length. [ 122.982379][ T5444] team0: Port device macvlan1 added [ 123.156395][ T5449] tipc: Enabled bearer , priority 10 [ 123.163875][ T5449] device syzkaller0 entered promiscuous mode [ 123.231464][ T5448] tipc: Resetting bearer [ 123.301218][ T5448] tipc: Disabling bearer [ 123.369107][ T5451] netlink: 76 bytes leftover after parsing attributes in process `syz.3.379'. [ 123.726537][ T5462] device syzkaller0 entered promiscuous mode [ 123.767781][ T5465] netlink: 32 bytes leftover after parsing attributes in process `syz.2.386'. [ 123.783076][ T5465] netlink: 32 bytes leftover after parsing attributes in process `syz.2.386'. [ 123.892036][ T5470] tipc: Enabled bearer , priority 0 [ 123.907090][ T5467] device syzkaller0 entered promiscuous mode [ 123.996979][ T5472] netlink: 60 bytes leftover after parsing attributes in process `syz.2.389'. [ 124.028602][ T5466] tipc: Resetting bearer [ 124.093213][ T5466] tipc: Disabling bearer [ 124.121127][ T5474] netlink: 'syz.0.390': attribute type 1 has an invalid length. [ 124.239350][ T5479] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 124.261305][ T5479] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 124.330817][ T5482] bond2: (slave gretap1): making interface the new active one [ 124.351672][ T5482] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 124.370664][ T5478] tipc: Enabled bearer , priority 0 [ 124.398700][ T5485] device syzkaller0 entered promiscuous mode [ 124.561987][ T5478] tipc: Resetting bearer [ 124.593458][ T5476] tipc: Resetting bearer [ 124.645460][ T5476] tipc: Disabling bearer [ 124.668062][ T5502] netlink: 36 bytes leftover after parsing attributes in process `syz.0.396'. [ 125.060951][ T5515] device syzkaller0 entered promiscuous mode [ 125.179205][ T5519] tipc: Enabled bearer , priority 0 [ 125.211645][ T5519] device syzkaller0 entered promiscuous mode [ 125.263845][ T5518] tipc: Resetting bearer [ 125.351793][ T5518] tipc: Disabling bearer [ 125.524010][ T5532] netlink: 36 bytes leftover after parsing attributes in process `syz.1.410'. [ 125.960952][ T5545] netlink: 60 bytes leftover after parsing attributes in process `syz.1.414'. [ 126.027212][ T5549] device syzkaller0 entered promiscuous mode [ 126.301934][ T5557] tipc: Enabled bearer , priority 0 [ 126.339986][ T5557] device syzkaller0 entered promiscuous mode [ 126.405133][ T5560] netlink: 36 bytes leftover after parsing attributes in process `syz.1.421'. [ 126.452862][ T5556] tipc: Resetting bearer [ 126.514052][ T5556] tipc: Disabling bearer [ 127.461785][ T5606] netlink: 60 bytes leftover after parsing attributes in process `syz.0.432'. [ 127.638233][ T5611] netlink: 52 bytes leftover after parsing attributes in process `syz.4.433'. [ 128.393472][ T5636] netlink: 52 bytes leftover after parsing attributes in process `syz.4.446'. [ 128.415877][ T5637] tipc: Enabled bearer , priority 10 [ 128.496023][ T5637] tipc: Resetting bearer [ 128.550146][ T5634] tipc: Disabling bearer [ 128.686565][ T5650] netlink: 44 bytes leftover after parsing attributes in process `syz.3.447'. [ 128.756761][ T5652] netlink: 'syz.4.449': attribute type 13 has an invalid length. [ 129.214934][ T5664] netlink: 20 bytes leftover after parsing attributes in process `syz.1.453'. [ 129.608377][ T5677] netlink: 'syz.4.459': attribute type 39 has an invalid length. [ 129.992099][ T5699] netlink: 20 bytes leftover after parsing attributes in process `syz.1.468'. [ 130.011588][ T5689] device syzkaller0 entered promiscuous mode [ 130.556514][ T5722] rdma_rxe: already configured on ip6_vti0 [ 132.031104][ T5712] team0 (unregistering): Port device team_slave_0 removed [ 132.040904][ T5712] team0 (unregistering): Port device team_slave_1 removed [ 132.071412][ T5712] team0 (unregistering): Port device macvlan1 removed [ 132.570397][ T5741] device syzkaller0 entered promiscuous mode [ 132.667641][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.887748][ T5758] pimreg0: tun_chr_ioctl cmd 1074812118 [ 133.151490][ T5766] tipc: Enabled bearer , priority 0 [ 133.169551][ T5766] device syzkaller0 entered promiscuous mode [ 133.259054][ T5771] tipc: Resetting bearer [ 133.375248][ T5765] tipc: Resetting bearer [ 133.413177][ T5765] tipc: Disabling bearer [ 133.673790][ T5790] device syzkaller0 entered promiscuous mode [ 134.111698][ T5801] device syzkaller0 entered promiscuous mode [ 134.366582][ T5808] device syzkaller0 entered promiscuous mode [ 134.543729][ T5814] netlink: 'syz.3.505': attribute type 13 has an invalid length. [ 134.661773][ T5814] infiniband syz2: set down [ 134.993676][ T14] ip6_vti0 speed is unknown, defaulting to 1000 [ 135.004306][ T5819] netlink: 'syz.2.507': attribute type 39 has an invalid length. [ 135.022404][ T14] ip6_vti0 speed is unknown, defaulting to 1000 [ 135.212973][ T5822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.508'. [ 135.262867][ T5825] device syzkaller0 entered promiscuous mode [ 135.471814][ T5830] netlink: 60 bytes leftover after parsing attributes in process `syz.2.514'. [ 136.461815][ T5871] netlink: 20 bytes leftover after parsing attributes in process `syz.4.524'. [ 136.805501][ T5880] device syzkaller0 entered promiscuous mode [ 137.184718][ T5892] netlink: 'syz.4.533': attribute type 4 has an invalid length. [ 137.212512][ T5892] netlink: 176 bytes leftover after parsing attributes in process `syz.4.533'. [ 137.876654][ T5926] netlink: 'syz.0.544': attribute type 16 has an invalid length. [ 137.896158][ T5926] netlink: 48 bytes leftover after parsing attributes in process `syz.0.544'. [ 137.946372][ T5927] netlink: 52 bytes leftover after parsing attributes in process `syz.1.543'. [ 137.984510][ T5930] netlink: 52 bytes leftover after parsing attributes in process `syz.1.543'. [ 138.397367][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.4.549'. [ 138.522277][ T5949] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 138.573267][ T5951] netlink: 209840 bytes leftover after parsing attributes in process `syz.1.552'. [ 139.067718][ T5965] device syzkaller0 entered promiscuous mode [ 141.707404][ T6020] rdma_rxe: rxe_register_device failed with error -23 [ 141.735332][ T6020] rdma_rxe: failed to add ip6_vti0 [ 142.044116][ T6038] netlink: 20 bytes leftover after parsing attributes in process `syz.3.584'. [ 142.057077][ T6036] netlink: 'syz.1.583': attribute type 39 has an invalid length. [ 142.192275][ T6032] device syzkaller0 entered promiscuous mode [ 144.805873][ T6085] rdma_rxe: rxe_register_device failed with error -23 [ 144.868085][ T6087] tipc: Enabled bearer , priority 10 [ 144.879903][ T6085] rdma_rxe: failed to add ip6_vti0 [ 144.896916][ T6092] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.593'. [ 144.921709][ T6087] tipc: Resetting bearer [ 144.985375][ T6086] tipc: Disabling bearer [ 146.214818][ T6112] netlink: 52 bytes leftover after parsing attributes in process `syz.0.600'. [ 146.247171][ T6112] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.255620][ T6112] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.449468][ T6127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.605'. [ 146.699201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 146.714285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 146.722532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 146.730884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 146.739141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 146.747491][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 146.755728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 146.764254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 146.774260][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 146.784257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 147.158138][ T6141] netlink: 'syz.0.606': attribute type 1 has an invalid length. [ 147.218673][ T6144] netlink: 20 bytes leftover after parsing attributes in process `syz.3.610'. [ 147.282707][ T6146] netlink: 60 bytes leftover after parsing attributes in process `syz.1.609'. [ 147.695241][ T6161] netlink: 52 bytes leftover after parsing attributes in process `syz.2.616'. [ 147.950862][ T6166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.618'. [ 149.168177][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.620'. [ 149.280486][ T6178] device syzkaller0 entered promiscuous mode [ 149.498897][ T6182] tipc: Enabled bearer , priority 10 [ 149.528530][ T6182] tipc: Resetting bearer [ 149.552579][ T6181] tipc: Disabling bearer [ 149.792841][ T6188] loop2: detected capacity change from 0 to 128 [ 149.924637][ T6188] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 150.020482][ T6194] netlink: 'syz.0.629': attribute type 39 has an invalid length. [ 150.150190][ T6196] loop2: detected capacity change from 0 to 512 [ 150.171661][ T6196] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 150.251514][ T6196] EXT4-fs (loop2): 1 truncate cleaned up [ 150.257879][ T6196] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 150.315067][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.632'. [ 152.486657][ T6214] netlink: 52 bytes leftover after parsing attributes in process `syz.3.636'. [ 152.509569][ T6215] loop0: detected capacity change from 0 to 16 [ 152.586682][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 152.615595][ T6215] erofs: (device loop0): mounted with root inode @ nid 36. [ 152.691975][ T6215] syz.0.635: attempt to access beyond end of device [ 152.691975][ T6215] loop0: rw=524288, sector=1342177272, nr_sectors = 32 limit=16 [ 152.781166][ T6215] syz.0.635: attempt to access beyond end of device [ 152.781166][ T6215] loop0: rw=0, sector=1342177272, nr_sectors = 8 limit=16 [ 152.802744][ T26] audit: type=1800 audit(1769675599.924:2): pid=6215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.635" name="file1" dev="loop0" ino=86 res=0 errno=0 [ 153.074846][ T6224] device syzkaller0 entered promiscuous mode [ 153.248752][ T6230] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 153.431759][ T6234] input: syz0 as /devices/virtual/input/input5 [ 153.664545][ T4787] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 154.094657][ T4787] usb 3-1: Using ep0 maxpacket: 32 [ 154.171648][ T4787] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 154.201088][ T4787] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 154.223288][ T4787] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 154.260018][ T4787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.276967][ T4787] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 154.288185][ T6243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.646'. [ 154.297475][ T4787] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 154.320098][ T4787] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 154.330650][ T4787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.350787][ T4787] usb 3-1: config 0 descriptor?? [ 154.592927][ T4787] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 154.651205][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 154.703142][ T4787] usb 3-1: USB disconnect, device number 2 [ 154.781405][ T4787] usblp0: removed [ 155.069223][ T6265] device syzkaller0 entered promiscuous mode [ 155.241359][ T4787] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 155.454458][ T4787] usb 3-1: Using ep0 maxpacket: 32 [ 155.468351][ T4787] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 155.489610][ T4787] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 155.510710][ T4787] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 155.533897][ T4787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 155.560732][ T4787] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 155.581019][ T4787] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 155.622761][ T4787] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 155.642534][ T4787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.677505][ T4787] usb 3-1: config 0 descriptor?? [ 155.927675][ T4787] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 156.131068][ T4787] usb 3-1: USB disconnect, device number 3 [ 156.169056][ T4787] usblp0: removed [ 156.947319][ T6290] loop2: detected capacity change from 0 to 128 [ 156.968716][ T6290] ======================================================= [ 156.968716][ T6290] WARNING: The mand mount option has been deprecated and [ 156.968716][ T6290] and is ignored by this kernel. Remove the mand [ 156.968716][ T6290] option from the mount to silence this warning. [ 156.968716][ T6290] ======================================================= [ 157.160017][ T6290] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 157.181954][ T6290] FAT-fs (loop2): Filesystem has been set read-only [ 157.384381][ T6292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.658'. [ 159.490142][ T6311] loop1: detected capacity change from 0 to 128 [ 159.564611][ T6311] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 159.582316][ T6311] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.630245][ T6311] syz.1.662[6311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.630390][ T6311] syz.1.662[6311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 159.645994][ T6315] netlink: 'syz.3.664': attribute type 1 has an invalid length. [ 159.671175][ T6311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.662'. [ 160.056775][ T4280] EXT4-fs (loop1): unmounting filesystem. [ 160.514454][ T52] block nbd2: Attempted send on invalid socket [ 160.539026][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.660375][ T52] block nbd2: Attempted send on invalid socket [ 160.667395][ T52] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.677669][ T6332] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 160.695773][ T3105] block nbd2: Attempted send on invalid socket [ 160.702081][ T3105] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.714687][ T6332] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 160.744502][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 160.853944][ T6334] tipc: Enabled bearer , priority 0 [ 160.860727][ T6332] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 160.871270][ T6332] UDF-fs: Scanning with blocksize 512 failed [ 160.886108][ T52] block nbd2: Attempted send on invalid socket [ 160.892372][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.902614][ T52] block nbd2: Attempted send on invalid socket [ 160.908862][ T52] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.918931][ T6332] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 160.929232][ T52] block nbd2: Attempted send on invalid socket [ 160.936342][ T52] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.955728][ T6334] tipc: Resetting bearer [ 160.964006][ T6332] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 160.978532][ T6332] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 161.016005][ T14] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.038145][ T14] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 161.051360][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.074363][ T6332] UDF-fs: Scanning with blocksize 1024 failed [ 161.085435][ T3105] block nbd2: Attempted send on invalid socket [ 161.086633][ T14] usb 5-1: config 0 descriptor?? [ 161.091679][ T3105] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.114620][ T52] block nbd2: Attempted send on invalid socket [ 161.120852][ T52] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.150513][ T6332] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 161.404722][ T3105] block nbd2: Attempted send on invalid socket [ 161.410962][ T3105] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.420711][ T6332] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 161.438696][ T6338] device syzkaller0 entered promiscuous mode [ 161.447260][ T6332] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 161.462380][ T6332] UDF-fs: Scanning with blocksize 2048 failed [ 161.479694][ T3105] block nbd2: Attempted send on invalid socket [ 161.481389][ T6331] tipc: Disabling bearer [ 161.486679][ T3105] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 161.543666][ T6332] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 161.636678][ T6332] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 161.684523][ T6332] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 161.694642][ T6332] UDF-fs: Scanning with blocksize 4096 failed [ 161.704988][ T6332] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 161.800163][ T14] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 161.850206][ T14] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0002/input/input6 [ 161.899143][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'. [ 162.078679][ T14] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 162.204158][ T6328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.239106][ T6328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.261101][ T4257] usb 5-1: USB disconnect, device number 2 [ 162.527104][ T6345] fido_id[6345]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 164.454421][ T6372] netlink: 'syz.4.681': attribute type 1 has an invalid length. [ 164.655293][ T6380] tipc: Enabling of bearer rejected, failed to enable media [ 164.802844][ T6386] netlink: 'syz.4.686': attribute type 1 has an invalid length. [ 165.826680][ T6400] netlink: 76 bytes leftover after parsing attributes in process `syz.2.685'. [ 167.180495][ T6424] tipc: Enabled bearer , priority 0 [ 167.201883][ T6424] tipc: Resetting bearer [ 167.260838][ T6423] tipc: Disabling bearer [ 167.278459][ T6428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.693'. [ 167.354301][ T4257] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 167.508723][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 167.536632][ T4257] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 167.552244][ T4257] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 167.582400][ T4257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.619698][ T4257] usb 5-1: config 0 descriptor?? [ 167.639731][ T4257] pwc: Askey VC010 type 2 USB webcam detected. [ 167.733353][ T6441] device syzkaller0 entered promiscuous mode [ 167.756100][ T6445] loop3: detected capacity change from 0 to 1024 [ 168.417164][ T6448] tipc: Enabling of bearer rejected, failed to enable media [ 168.585050][ T4257] pwc: recv_control_msg error -71 req 02 val 2700 [ 168.602708][ T4257] pwc: recv_control_msg error -71 req 02 val 2c00 [ 168.633967][ T4257] pwc: recv_control_msg error -71 req 04 val 1000 [ 168.667304][ T4257] pwc: recv_control_msg error -71 req 04 val 1300 [ 168.700774][ T6414] hfsplus: b-tree write err: -5, ino 4 [ 168.715718][ T4257] pwc: recv_control_msg error -71 req 04 val 1400 [ 168.748107][ T4257] pwc: recv_control_msg error -71 req 02 val 2000 [ 168.811475][ T4257] pwc: recv_control_msg error -71 req 02 val 2100 [ 168.852499][ T4257] pwc: recv_control_msg error -71 req 04 val 1500 [ 168.887088][ T4257] pwc: recv_control_msg error -71 req 02 val 2500 [ 168.922787][ T4257] pwc: recv_control_msg error -71 req 02 val 2400 [ 168.971710][ T4257] pwc: recv_control_msg error -71 req 02 val 2600 [ 169.020119][ T4257] pwc: recv_control_msg error -71 req 02 val 2900 [ 169.062557][ T4257] pwc: recv_control_msg error -71 req 02 val 2800 [ 169.118048][ T4257] pwc: recv_control_msg error -71 req 04 val 1100 [ 169.170086][ T4257] pwc: recv_control_msg error -71 req 04 val 1200 [ 169.253631][ T4257] pwc: Registered as video103. [ 169.289862][ T4257] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 169.369218][ T4257] usb 5-1: USB disconnect, device number 3 [ 169.452752][ T6471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.708'. [ 169.743788][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.712'. [ 169.977912][ T6485] device syzkaller0 entered promiscuous mode [ 170.202714][ T6495] netlink: 52 bytes leftover after parsing attributes in process `syz.2.718'. [ 170.245456][ T6495] netlink: 76 bytes leftover after parsing attributes in process `syz.2.718'. [ 170.278340][ T6495] netlink: 52 bytes leftover after parsing attributes in process `syz.2.718'. [ 170.627029][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.721'. [ 170.960404][ T6516] tipc: Enabling of bearer rejected, failed to enable media [ 171.451960][ T6534] tipc: Enabling of bearer rejected, failed to enable media [ 171.554431][ T14] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 171.605537][ T6539] device syzkaller0 entered promiscuous mode [ 171.746247][ T14] usb 5-1: config 210 has an invalid interface number: 31 but max is 0 [ 171.765850][ T14] usb 5-1: config 210 has no interface number 0 [ 171.815978][ T14] usb 5-1: config 210 interface 31 has no altsetting 0 [ 171.839699][ T14] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=a8.5c [ 171.863418][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.879662][ T14] usb 5-1: Product: syz [ 171.921731][ T14] usb 5-1: Manufacturer: syz [ 171.939011][ T14] usb 5-1: SerialNumber: syz [ 171.989523][ T14] ttusb_dec_send_command: command bulk message failed: error -22 [ 172.021977][ T14] ttusb-dec: probe of 5-1:210.31 failed with error -22 [ 172.117258][ T6554] device syzkaller0 entered promiscuous mode [ 172.193454][ T14] usb 5-1: USB disconnect, device number 4 [ 172.313871][ T6556] netlink: 52 bytes leftover after parsing attributes in process `syz.3.730'. [ 173.928840][ T52] nbd_handle_cmd: 2 callbacks suppressed [ 173.928869][ T52] block nbd3: Attempted send on invalid socket [ 173.941622][ T52] blk_print_req_error: 2 callbacks suppressed [ 173.941638][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.967368][ T52] block nbd3: Attempted send on invalid socket [ 173.973700][ T52] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 173.983756][ T6572] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 174.142698][ T3105] block nbd3: Attempted send on invalid socket [ 174.149054][ T3105] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 174.158657][ T6572] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 174.170836][ T6572] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 174.184393][ T6572] UDF-fs: Scanning with blocksize 512 failed [ 174.191275][ T3105] block nbd3: Attempted send on invalid socket [ 174.197656][ T3105] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 174.207892][ T52] block nbd3: Attempted send on invalid socket [ 174.214123][ T52] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 174.225073][ T6572] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 174.257189][ T3105] block nbd3: Attempted send on invalid socket [ 174.263441][ T3105] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 174.324932][ T6572] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 174.384874][ T6572] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 174.404005][ T6572] UDF-fs: Scanning with blocksize 1024 failed [ 174.424125][ T52] block nbd3: Attempted send on invalid socket [ 174.431067][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 174.441813][ T52] block nbd3: Attempted send on invalid socket [ 174.448462][ T52] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 174.460296][ T6572] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 174.469276][ T6581] device syzkaller0 entered promiscuous mode [ 174.477718][ T3105] block nbd3: Attempted send on invalid socket [ 174.483960][ T3105] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 174.506771][ T6572] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 174.565968][ T6572] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 174.576119][ T6572] UDF-fs: Scanning with blocksize 2048 failed [ 174.591737][ T6583] device syzkaller0 entered promiscuous mode [ 174.603885][ T52] block nbd3: Attempted send on invalid socket [ 174.610337][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 174.627511][ T6572] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 174.641818][ T6572] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 174.659379][ T6572] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 174.694485][ T6572] UDF-fs: Scanning with blocksize 4096 failed [ 174.711497][ T6572] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 175.152588][ T6589] tipc: Enabling of bearer rejected, failed to enable media [ 175.314883][ T6593] device syzkaller0 entered promiscuous mode [ 175.499026][ T6601] netlink: 52 bytes leftover after parsing attributes in process `syz.4.743'. [ 177.512600][ T6656] netlink: 52 bytes leftover after parsing attributes in process `syz.0.762'. [ 178.238390][ T6671] netlink: 280 bytes leftover after parsing attributes in process `syz.4.766'. [ 178.319923][ T6675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.768'. [ 178.374942][ T6673] device syzkaller0 entered promiscuous mode [ 179.857525][ T6707] netlink: 52 bytes leftover after parsing attributes in process `syz.4.776'. [ 179.944669][ T6709] netlink: 60 bytes leftover after parsing attributes in process `syz.1.777'. [ 180.251610][ T6723] device syzkaller0 entered promiscuous mode [ 181.500178][ T6732] netlink: 248 bytes leftover after parsing attributes in process `syz.0.786'. [ 181.539623][ T6733] tipc: Enabling of bearer rejected, failed to enable media [ 181.747523][ T6738] rdma_rxe: rxe_register_device failed with error -23 [ 181.781555][ T6738] rdma_rxe: failed to add ip6_vti0 [ 181.829049][ T6743] netlink: 32 bytes leftover after parsing attributes in process `syz.2.788'. [ 181.894678][ T6743] netlink: 32 bytes leftover after parsing attributes in process `syz.2.788'. [ 182.157321][ T6749] netlink: 52 bytes leftover after parsing attributes in process `syz.3.790'. [ 182.566101][ T6760] netlink: 60 bytes leftover after parsing attributes in process `syz.3.793'. [ 183.521512][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.796'. [ 183.621423][ T6778] device syzkaller0 entered promiscuous mode [ 185.195143][ T6797] netlink: 52 bytes leftover after parsing attributes in process `syz.4.804'. [ 185.255347][ T6797] netlink: 76 bytes leftover after parsing attributes in process `syz.4.804'. [ 185.292705][ T6797] netlink: 52 bytes leftover after parsing attributes in process `syz.4.804'. [ 185.458818][ T6804] device syzkaller0 entered promiscuous mode [ 185.846989][ T6817] rdma_rxe: rxe_register_device failed with error -23 [ 185.854008][ T6817] rdma_rxe: failed to add ip6_vti0 [ 185.891663][ T6818] device syzkaller0 entered promiscuous mode [ 187.512709][ T6843] netlink: 'syz.1.822': attribute type 39 has an invalid length. [ 188.542509][ T6855] device syzkaller0 entered promiscuous mode [ 189.329308][ T6882] netlink: 'syz.2.836': attribute type 13 has an invalid length. [ 189.357679][ T6882] netlink: 'syz.2.836': attribute type 27 has an invalid length. [ 189.931796][ T6891] netlink: 'syz.4.838': attribute type 39 has an invalid length. [ 190.334604][ T6908] device syzkaller0 entered promiscuous mode [ 190.981736][ T6922] rdma_rxe: rxe_register_device failed with error -23 [ 191.000122][ T6922] rdma_rxe: failed to add ip6_vti0 [ 191.759253][ T6936] netlink: 'syz.0.853': attribute type 39 has an invalid length. [ 193.193593][ T6953] device syzkaller0 entered promiscuous mode [ 194.106984][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.126236][ T3105] nbd_handle_cmd: 2 callbacks suppressed [ 194.126257][ T3105] block nbd3: Attempted send on invalid socket [ 194.138792][ T3105] blk_print_req_error: 2 callbacks suppressed [ 194.138807][ T3105] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 194.156005][ T3105] block nbd3: Attempted send on invalid socket [ 194.162288][ T3105] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 194.171667][ T6974] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 194.181559][ T3105] block nbd3: Attempted send on invalid socket [ 194.187864][ T3105] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 194.197216][ T6974] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 194.206820][ T6974] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 194.214579][ T6974] UDF-fs: Scanning with blocksize 512 failed [ 194.221331][ T3105] block nbd3: Attempted send on invalid socket [ 194.227600][ T3105] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 194.237128][ T3105] block nbd3: Attempted send on invalid socket [ 194.243341][ T3105] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 194.252647][ T6974] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 194.262516][ T3105] block nbd3: Attempted send on invalid socket [ 194.268946][ T3105] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 194.278406][ T6974] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 194.288237][ T6974] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 194.295852][ T6974] UDF-fs: Scanning with blocksize 1024 failed [ 194.302898][ T3105] block nbd3: Attempted send on invalid socket [ 194.309213][ T3105] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 194.318907][ T3105] block nbd3: Attempted send on invalid socket [ 194.325180][ T3105] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 194.334628][ T6974] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 194.345086][ T3105] block nbd3: Attempted send on invalid socket [ 194.351290][ T3105] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 194.360820][ T6974] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 194.370343][ T6974] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 194.378005][ T6974] UDF-fs: Scanning with blocksize 2048 failed [ 194.384698][ T3105] block nbd3: Attempted send on invalid socket [ 194.390904][ T3105] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 194.400390][ T6974] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 194.410145][ T6974] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 194.419832][ T6974] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 194.427410][ T6974] UDF-fs: Scanning with blocksize 4096 failed [ 194.433485][ T6974] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 194.597135][ T6977] netlink: 'syz.1.866': attribute type 13 has an invalid length. [ 194.622450][ T6977] netlink: 'syz.1.866': attribute type 27 has an invalid length. [ 196.830080][ T7011] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 196.840190][ T7011] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 196.849782][ T7011] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 196.857369][ T7011] UDF-fs: Scanning with blocksize 512 failed [ 196.864869][ T7011] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 196.874745][ T7011] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 196.884552][ T7011] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 196.892179][ T7011] UDF-fs: Scanning with blocksize 1024 failed [ 196.904397][ T7011] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 196.914280][ T7011] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 196.923801][ T7011] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 196.931375][ T7011] UDF-fs: Scanning with blocksize 2048 failed [ 196.938235][ T7011] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 196.948077][ T7011] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 196.957664][ T7011] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 196.965254][ T7011] UDF-fs: Scanning with blocksize 4096 failed [ 196.971327][ T7011] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 197.129178][ T7015] netlink: 'syz.3.879': attribute type 13 has an invalid length. [ 197.171772][ T7015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.879'. [ 197.960988][ T7044] tipc: Enabled bearer , priority 10 [ 198.060791][ T7044] tipc: Resetting bearer [ 198.347840][ T7042] tipc: Disabling bearer [ 199.276739][ T52] nbd_handle_cmd: 15 callbacks suppressed [ 199.276774][ T52] block nbd4: Attempted send on invalid socket [ 199.289990][ T52] blk_print_req_error: 15 callbacks suppressed [ 199.290021][ T52] I/O error, dev nbd4, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.311930][ T7076] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 199.390909][ T3105] block nbd4: Attempted send on invalid socket [ 199.397248][ T3105] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.406774][ T7076] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 199.441699][ T7076] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 199.514404][ T7076] UDF-fs: Scanning with blocksize 512 failed [ 199.578935][ T3105] block nbd4: Attempted send on invalid socket [ 199.585269][ T3105] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.595618][ T3105] block nbd4: Attempted send on invalid socket [ 199.601837][ T3105] I/O error, dev nbd4, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.614327][ T7076] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 199.634815][ T52] block nbd4: Attempted send on invalid socket [ 199.641068][ T52] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.651404][ T7076] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 199.691641][ T7076] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 199.742987][ T7076] UDF-fs: Scanning with blocksize 1024 failed [ 199.752847][ T52] block nbd4: Attempted send on invalid socket [ 199.759212][ T52] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.785618][ T3105] block nbd4: Attempted send on invalid socket [ 199.791863][ T3105] I/O error, dev nbd4, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.804909][ T7076] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 199.824795][ T7036] loop1: detected capacity change from 0 to 32768 [ 199.853991][ T3105] block nbd4: Attempted send on invalid socket [ 199.860739][ T3105] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.870422][ T7076] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 199.889884][ T7076] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 199.922620][ T7036] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.889 (7036) [ 199.934806][ T7076] UDF-fs: Scanning with blocksize 2048 failed [ 199.962463][ T52] block nbd4: Attempted send on invalid socket [ 199.970307][ T52] I/O error, dev nbd4, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.980597][ T52] block nbd4: Attempted send on invalid socket [ 199.987067][ T52] I/O error, dev nbd4, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 199.997936][ T7076] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 200.019945][ T7076] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 200.081347][ T7076] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 200.090699][ T7076] UDF-fs: Scanning with blocksize 4096 failed [ 200.097412][ T7076] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 200.131641][ T7036] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 200.214602][ T7036] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 200.253534][ T7036] BTRFS info (device loop1): using free space tree [ 200.605067][ T7036] BTRFS info (device loop1): enabling ssd optimizations [ 200.834360][ T4257] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 200.873287][ T4280] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 201.054289][ T4257] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 201.079082][ T4257] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.134696][ T4257] usb 5-1: config 0 has no interfaces? [ 201.158861][ T4257] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 201.199594][ T4257] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.248318][ T4257] usb 5-1: config 0 descriptor?? [ 201.306440][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 201.312593][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 201.319149][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 204.787439][ T4257] usb 5-1: USB disconnect, device number 5 [ 206.478054][ T7188] netlink: 'syz.3.923': attribute type 39 has an invalid length. [ 206.504519][ T4324] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 206.697471][ T4324] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.737109][ T4324] usb 1-1: config 0 has no interface number 0 [ 206.811475][ T4324] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 207.030747][ T4324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.074553][ T4324] usb 1-1: Product: syz [ 207.078801][ T4324] usb 1-1: Manufacturer: syz [ 207.102159][ T4324] usb 1-1: SerialNumber: syz [ 208.101096][ T4324] usb 1-1: config 0 descriptor?? [ 208.451582][ T4324] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 208.485937][ T4324] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 208.496821][ T4324] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 208.506649][ T4324] usb 1-1: media controller created [ 208.684525][ T4324] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.446653][ T4324] usb 1-1: DVB: registering adapter 1 frontend 0 (E3C EC100 DVB-T)... [ 209.491145][ T4324] dvbdev: dvb_create_media_entity: media entity 'E3C EC100 DVB-T' registered. [ 209.964736][ T4324] DVB: Unable to find symbol mxl5005s_attach() [ 210.904847][ T4324] usb 1-1: USB disconnect, device number 2 [ 211.027247][ T7221] device syzkaller0 entered promiscuous mode [ 211.174348][ T4336] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 211.389266][ T4336] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 211.416264][ T4336] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 211.449853][ T4336] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 211.474343][ T4336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.505641][ T4336] usb 4-1: config 0 descriptor?? [ 211.541424][ T4336] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 212.737739][ T7245] overlayfs: missing 'lowerdir' [ 212.763219][ T7244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.844703][ T7244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.513408][ T7248] overlayfs: unrecognized mount option "/" or missing value [ 214.263925][ T4257] usb 4-1: USB disconnect, device number 2 [ 215.167848][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.951'. [ 215.408775][ T7286] netlink: 76 bytes leftover after parsing attributes in process `syz.1.952'. [ 215.577651][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.951'. [ 220.282600][ T7336] device syzkaller0 entered promiscuous mode [ 221.431700][ T7355] netlink: 16 bytes leftover after parsing attributes in process `syz.2.970'. [ 222.638008][ T7361] rdma_rxe: already configured on ip6_vti0 [ 222.805491][ T7367] device syzkaller0 entered promiscuous mode [ 223.771210][ T7377] ip6_vti0 speed is unknown, defaulting to 1000 [ 225.989463][ T7400] device syzkaller0 entered promiscuous mode [ 226.365334][ T7405] device syzkaller0 entered promiscuous mode [ 227.138375][ T7410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.990'. [ 227.347711][ T7396] loop2: detected capacity change from 0 to 32768 [ 227.524319][ T4336] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 227.729680][ T4336] usb 2-1: Using ep0 maxpacket: 32 [ 227.739101][ T4336] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 214, changing to 11 [ 227.770905][ T4336] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.844239][ T4336] usb 2-1: config 0 interface 0 has no altsetting 0 [ 227.854520][ T4336] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 227.884553][ T4336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.915556][ T4336] usb 2-1: config 0 descriptor?? [ 228.333857][ T7433] device syzkaller0 entered promiscuous mode [ 228.354007][ T4336] input: HID 28bd:0933 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0933.0003/input/input8 [ 228.470276][ T4336] uclogic 0003:28BD:0933.0003: input,hidraw0: USB HID v5f.b2 Mouse [HID 28bd:0933] on usb-dummy_hcd.1-1/input0 [ 228.506707][ T7438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1001'. [ 228.652925][ T4530] usb 2-1: USB disconnect, device number 2 [ 228.965110][ T7439] fido_id[7439]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 229.526857][ T7441] loop2: detected capacity change from 0 to 40427 [ 229.546982][ T7441] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 229.564626][ T7441] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 229.656698][ T7441] F2FS-fs (loop2): invalid crc value [ 229.717805][ T7441] F2FS-fs (loop2): Found nat_bits in checkpoint [ 229.911742][ T7441] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 229.920787][ T7441] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 232.025189][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 232.396674][ T7457] device syzkaller0 entered promiscuous mode [ 232.709102][ T7484] device syzkaller0 entered promiscuous mode [ 232.873483][ T7490] tipc: Enabled bearer , priority 0 [ 232.900477][ T4530] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 232.989525][ T7490] device syzkaller0 entered promiscuous mode [ 232.997460][ T7490] tipc: Resetting bearer [ 233.003828][ T7493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1014'. [ 233.045582][ T7489] tipc: Resetting bearer [ 233.077590][ T7495] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1015'. [ 233.084513][ T4530] usb 4-1: Using ep0 maxpacket: 16 [ 233.093910][ T4530] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 233.121173][ T4530] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 233.152009][ T4530] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.191312][ T4530] usb 4-1: config 1 interface 0 has no altsetting 0 [ 233.213907][ T4530] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 233.252006][ T4530] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.271704][ T4530] usb 4-1: Product: syz [ 233.291531][ T4530] usb 4-1: Manufacturer: syz [ 233.296537][ T4530] usb 4-1: SerialNumber: syz [ 233.385278][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1016'. [ 233.541435][ T4530] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 233.883740][ T7482] usblp0:failed reading printer status (-32) [ 233.895591][ T4257] usb 4-1: USB disconnect, device number 3 [ 233.918553][ T4257] usblp0: removed [ 234.518383][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1018'. [ 235.997602][ T7489] tipc: Disabling bearer [ 236.014346][ T4336] tipc: Node number set to 1592159591 [ 236.920240][ T7527] netlink: 'syz.1.1021': attribute type 10 has an invalid length. [ 236.930967][ T7526] device syzkaller0 entered promiscuous mode [ 238.944655][ T7557] fuse: Bad value for 'fd' [ 239.075290][ T7561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1031'. [ 239.667306][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1033'. [ 240.077422][ T7581] device syzkaller0 entered promiscuous mode [ 241.004472][ T4530] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 242.024122][ T7611] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1048'. [ 242.034242][ T4530] usb 1-1: Using ep0 maxpacket: 16 [ 242.042599][ T4530] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 242.071780][ T7606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 242.109082][ T4530] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 242.134330][ T4530] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.169354][ T4530] usb 1-1: Product: syz [ 242.191779][ T4530] usb 1-1: Manufacturer: syz [ 242.203624][ T4530] usb 1-1: SerialNumber: syz [ 242.252176][ T4530] usb 1-1: config 0 descriptor?? [ 242.290991][ T4530] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 242.330943][ T4530] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 242.757497][ T7628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1049'. [ 242.914013][ T4530] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 242.939427][ T7620] device syzkaller0 entered promiscuous mode [ 243.563004][ T4530] em28xx 1-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 243.583229][ T4530] em28xx 1-1:0.0: board has no eeprom [ 243.675396][ T4530] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 243.683313][ T4530] em28xx 1-1:0.0: dvb set to bulk mode. [ 243.705095][ T4530] usb 1-1: USB disconnect, device number 3 [ 243.721909][ T4257] em28xx 1-1:0.0: Binding DVB extension [ 243.734898][ T4530] em28xx 1-1:0.0: Disconnecting em28xx [ 243.915692][ T4257] em28xx 1-1:0.0: Registering input extension [ 243.929600][ T4530] em28xx 1-1:0.0: Closing input extension [ 243.981530][ T4530] em28xx 1-1:0.0: Freeing device [ 247.675006][ T7644] device syzkaller0 entered promiscuous mode [ 248.409043][ T7669] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1060'. [ 248.569754][ T7673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1059'. [ 251.231574][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1069'. [ 251.518190][ T7711] device syzkaller0 entered promiscuous mode [ 252.399824][ T7717] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1074'. [ 252.680708][ T7727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1077'. [ 252.951575][ T7709] loop1: detected capacity change from 0 to 32768 [ 253.026499][ T7709] XFS (loop1): Mounting V5 Filesystem [ 253.140940][ T7709] XFS (loop1): Starting recovery (logdev: internal) [ 253.181714][ T7709] XFS (loop1): Ending recovery (logdev: internal) [ 253.271099][ T7752] netlink: 'syz.0.1082': attribute type 1 has an invalid length. [ 253.445535][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1083'. [ 253.465020][ T7752] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.560475][ T4280] XFS (loop1): Unmounting Filesystem [ 255.189979][ T7769] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1089'. [ 255.262801][ T7769] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1089'. [ 255.292651][ T7769] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.299892][ T7769] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.307444][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.314661][ T7769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.375140][ T4577] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.394732][ T7769] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1089'. [ 255.652893][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.714094][ T7787] device syzkaller0 entered promiscuous mode [ 256.401210][ T7800] device syzkaller0 entered promiscuous mode [ 258.112359][ T3105] nbd_handle_cmd: 1 callbacks suppressed [ 258.112380][ T3105] block nbd2: Attempted send on invalid socket [ 258.124454][ T3105] blk_print_req_error: 1 callbacks suppressed [ 258.124469][ T3105] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.144799][ T52] block nbd2: Attempted send on invalid socket [ 258.151054][ T52] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.160671][ T7822] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 258.232824][ T52] block nbd2: Attempted send on invalid socket [ 258.239078][ T52] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.248808][ T7822] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 258.258848][ T7822] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 258.267175][ T7822] UDF-fs: Scanning with blocksize 512 failed [ 258.299975][ T52] block nbd2: Attempted send on invalid socket [ 258.306267][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.317471][ T3105] block nbd2: Attempted send on invalid socket [ 258.323733][ T3105] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.334025][ T7822] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 258.351464][ T52] block nbd2: Attempted send on invalid socket [ 258.357872][ T52] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.371831][ T7822] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 258.381692][ T7822] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 258.391557][ T7822] UDF-fs: Scanning with blocksize 1024 failed [ 258.406061][ T52] block nbd2: Attempted send on invalid socket [ 258.412298][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.422517][ T3105] block nbd2: Attempted send on invalid socket [ 258.428912][ T3105] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.439435][ T7822] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 258.453956][ T52] block nbd2: Attempted send on invalid socket [ 258.460236][ T52] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.469682][ T7822] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 258.479522][ T7822] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 258.487551][ T7822] UDF-fs: Scanning with blocksize 2048 failed [ 258.495887][ T52] block nbd2: Attempted send on invalid socket [ 258.502083][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.512142][ T7822] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 258.524098][ T7822] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 258.534295][ T7822] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 258.541951][ T7822] UDF-fs: Scanning with blocksize 4096 failed [ 258.548497][ T7822] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 258.675455][ T7824] device syzkaller0 entered promiscuous mode [ 260.242886][ T7843] batman_adv: batadv0: Adding interface: dummy0 [ 260.249386][ T7843] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.275529][ T7843] batman_adv: batadv0: Interface activated: dummy0 [ 260.293370][ T7843] batadv0: mtu less than device minimum [ 260.318316][ T7843] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 260.330395][ T7843] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 260.341926][ T7843] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 260.353493][ T7843] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 260.365123][ T7843] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 260.376812][ T7843] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 260.388366][ T7843] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 260.399899][ T7843] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 260.411474][ T7843] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 260.591458][ T7853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1116'. [ 260.794591][ T7856] tipc: Enabled bearer , priority 0 [ 261.023911][ T7856] device syzkaller0 entered promiscuous mode [ 261.076252][ T7856] tipc: Resetting bearer [ 261.171801][ T7863] device syzkaller0 entered promiscuous mode [ 261.231266][ T7855] tipc: Resetting bearer [ 262.249755][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1123'. [ 264.384250][ T4324] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 264.416674][ T7855] tipc: Disabling bearer [ 264.436173][ T7866] device syzkaller0 entered promiscuous mode [ 264.594308][ T4324] usb 4-1: Using ep0 maxpacket: 16 [ 264.601382][ T4324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 264.622331][ T4324] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 264.632873][ T4324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.650822][ T4324] usb 4-1: Product: syz [ 264.657514][ T4324] usb 4-1: Manufacturer: syz [ 264.662166][ T4324] usb 4-1: SerialNumber: syz [ 264.669963][ T4324] usb 4-1: config 0 descriptor?? [ 264.679106][ T4324] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 264.689018][ T4324] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 264.726052][ T7888] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 264.745856][ T7888] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 264.787037][ T7892] device syzkaller0 entered promiscuous mode [ 264.899693][ T7896] device syzkaller0 entered promiscuous mode [ 265.361854][ T4324] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 265.447306][ T7908] device syzkaller0 entered promiscuous mode [ 265.792688][ T4324] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 265.815686][ T4324] em28xx 4-1:0.0: board has no eeprom [ 265.914573][ T4324] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 265.934032][ T4324] em28xx 4-1:0.0: dvb set to bulk mode. [ 266.034568][ T4324] usb 4-1: USB disconnect, device number 4 [ 266.075898][ T4324] em28xx 4-1:0.0: Disconnecting em28xx [ 266.161346][ T4530] em28xx 4-1:0.0: Binding DVB extension [ 266.456170][ T4530] em28xx 4-1:0.0: Registering input extension [ 266.471518][ T4324] em28xx 4-1:0.0: Closing input extension [ 266.506154][ T4324] em28xx 4-1:0.0: Freeing device [ 270.609397][ T7968] device syzkaller0 entered promiscuous mode [ 270.906646][ T7984] tipc: Enabled bearer , priority 0 [ 270.955989][ T7983] tipc: Disabling bearer [ 271.847393][ T8002] netlink: 'syz.4.1148': attribute type 1 has an invalid length. [ 273.557790][ T8021] device syzkaller0 entered promiscuous mode [ 276.702765][ T8049] device syzkaller0 entered promiscuous mode [ 277.471823][ T8084] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1163'. [ 278.745725][ T8098] netlink: 'syz.3.1167': attribute type 1 has an invalid length. [ 281.759333][ T8142] device syzkaller0 entered promiscuous mode [ 281.941999][ T8149] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1177'. [ 282.454314][ T4792] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 282.644332][ T4792] usb 4-1: Using ep0 maxpacket: 32 [ 282.900270][ T4792] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 282.919196][ T8154] ip6_vti0 speed is unknown, defaulting to 1000 [ 283.220489][ T4792] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 283.243428][ T4792] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 283.274502][ T4792] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 283.286579][ T4792] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 283.298330][ T4792] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 283.312079][ T4792] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 283.321499][ T4792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.416723][ T4792] usb 4-1: config 0 descriptor?? [ 283.651287][ T4792] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 283.683881][ T4792] usb 4-1: USB disconnect, device number 5 [ 283.726810][ T4792] usblp0: removed [ 283.784502][ T52] nbd_handle_cmd: 2 callbacks suppressed [ 283.784527][ T52] block nbd0: Attempted send on invalid socket [ 283.797098][ T52] blk_print_req_error: 2 callbacks suppressed [ 283.797110][ T52] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.813748][ T3105] block nbd0: Attempted send on invalid socket [ 283.820243][ T3105] I/O error, dev nbd0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 283.829901][ T8161] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 283.998358][ T3105] block nbd0: Attempted send on invalid socket [ 284.004689][ T3105] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 284.014870][ T8161] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 284.284599][ T4530] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 284.295447][ T8161] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 284.303308][ T8161] UDF-fs: Scanning with blocksize 512 failed [ 284.352682][ T52] block nbd0: Attempted send on invalid socket [ 284.359277][ T52] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 284.391803][ T52] block nbd0: Attempted send on invalid socket [ 284.398173][ T52] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 284.408290][ T8161] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 284.422904][ T52] block nbd0: Attempted send on invalid socket [ 284.430451][ T52] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 284.440931][ T8161] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 284.463319][ T8161] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 284.472612][ T8161] UDF-fs: Scanning with blocksize 1024 failed [ 284.475910][ T4530] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.542657][ T4530] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.598097][ T4530] usb 3-1: Product: syz [ 284.624304][ T4530] usb 3-1: Manufacturer: syz [ 284.651668][ T8167] overlayfs: empty lowerdir [ 284.662484][ T4530] usb 3-1: SerialNumber: syz [ 285.616332][ T52] block nbd0: Attempted send on invalid socket [ 285.622622][ T52] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 285.634701][ T3105] block nbd0: Attempted send on invalid socket [ 285.640972][ T3105] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 285.650883][ T8161] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 285.714565][ T52] block nbd0: Attempted send on invalid socket [ 285.720872][ T52] I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 285.732268][ T8161] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 285.742404][ T8161] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 285.766691][ T8161] UDF-fs: Scanning with blocksize 2048 failed [ 285.817340][ T52] block nbd0: Attempted send on invalid socket [ 285.823621][ T52] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 285.834899][ T8161] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 285.845667][ T8161] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 285.855802][ T8161] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 285.863934][ T8161] UDF-fs: Scanning with blocksize 4096 failed [ 285.870829][ T8161] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 285.934323][ T5236] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 286.154433][ T5236] usb 2-1: Using ep0 maxpacket: 8 [ 286.171539][ T5236] usb 2-1: config 0 has no interfaces? [ 286.205933][ T5236] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 286.224287][ T4783] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 286.238129][ T5236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.272468][ T5236] usb 2-1: config 0 descriptor?? [ 286.434507][ T4783] usb 4-1: Using ep0 maxpacket: 8 [ 286.442870][ T4783] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 286.463508][ T4783] usb 4-1: config 179 has no interface number 0 [ 286.486692][ T4783] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 286.523913][ T4783] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 286.560614][ T4783] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 286.572948][ T4530] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 286.605194][ T4783] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 286.621355][ T4783] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 286.635249][ T4783] usb 4-1: config 179 interface 65 has no altsetting 0 [ 286.642462][ T4783] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 286.652505][ T4783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.759719][ T4783] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input11 [ 286.874415][ T4530] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 286.949672][ T4530] usb 3-1: USB disconnect, device number 4 [ 286.994964][ T4530] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 288.201518][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1188'. [ 288.747268][ T8194] device syzkaller0 entered promiscuous mode [ 288.884073][ T5236] usb 2-1: USB disconnect, device number 3 [ 289.002726][ T4783] usb 4-1: USB disconnect, device number 6 [ 289.002782][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 289.020836][ T4783] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 290.261243][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1196'. [ 290.767833][ T8222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1200'. [ 290.834008][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1199'. [ 291.247644][ T8232] device syzkaller0 entered promiscuous mode [ 291.338725][ T8234] device syzkaller0 entered promiscuous mode [ 291.585917][ T8236] device syzkaller0 entered promiscuous mode [ 295.277040][ T8245] device syzkaller0 entered promiscuous mode [ 295.317493][ T8272] netlink: 'syz.2.1210': attribute type 1 has an invalid length. [ 295.399297][ T8255] ip6_vti0 speed is unknown, defaulting to 1000 [ 295.585841][ T8279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1212'. [ 295.997776][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1217'. [ 296.460252][ T8305] device syzkaller0 entered promiscuous mode [ 297.130951][ T8324] netlink: 'syz.3.1225': attribute type 1 has an invalid length. [ 297.145348][ T8325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1226'. [ 297.200946][ T8330] device syzkaller0 entered promiscuous mode [ 297.291664][ T8329] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 297.352926][ T8329] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 298.493798][ T8341] ip6_vti0 speed is unknown, defaulting to 1000 [ 300.101271][ T8364] device syzkaller0 entered promiscuous mode [ 300.262296][ T8368] device syzkaller0 entered promiscuous mode [ 300.683261][ T8377] netlink: 'syz.3.1239': attribute type 1 has an invalid length. [ 300.950875][ T8382] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 300.975651][ T8382] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 301.004312][ T8381] device syzkaller0 entered promiscuous mode [ 301.380368][ T8393] device syzkaller0 entered promiscuous mode [ 301.538895][ T8407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1246'. [ 302.257480][ T8419] device syzkaller0 entered promiscuous mode [ 303.480620][ T8434] netlink: 'syz.2.1254': attribute type 1 has an invalid length. [ 304.033607][ T8434] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 304.106939][ T8434] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 304.439047][ T8452] device syzkaller0 entered promiscuous mode [ 304.611923][ T52] nbd_handle_cmd: 2 callbacks suppressed [ 304.624487][ T52] block nbd2: Attempted send on invalid socket [ 304.632304][ T52] blk_print_req_error: 2 callbacks suppressed [ 304.632468][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 304.694603][ T52] block nbd2: Attempted send on invalid socket [ 304.720598][ T52] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.104282][ T8456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 305.174835][ T3105] block nbd2: Attempted send on invalid socket [ 305.181054][ T3105] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.190981][ T8456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 305.201016][ T8456] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 305.289187][ T8456] UDF-fs: Scanning with blocksize 512 failed [ 305.317829][ T3105] block nbd2: Attempted send on invalid socket [ 305.324071][ T3105] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.334188][ T3105] block nbd2: Attempted send on invalid socket [ 305.340419][ T3105] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.350271][ T8456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 305.385337][ T52] block nbd2: Attempted send on invalid socket [ 305.391564][ T52] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.401230][ T8456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 305.411794][ T8460] device syzkaller0 entered promiscuous mode [ 305.434798][ T8456] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 305.442381][ T8456] UDF-fs: Scanning with blocksize 1024 failed [ 305.455417][ T52] block nbd2: Attempted send on invalid socket [ 305.461648][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.475658][ T52] block nbd2: Attempted send on invalid socket [ 305.482169][ T52] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.492422][ T8456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 305.504850][ T52] block nbd2: Attempted send on invalid socket [ 305.511125][ T52] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.522055][ T8456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 305.531969][ T8456] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 305.541923][ T8456] UDF-fs: Scanning with blocksize 2048 failed [ 305.553495][ T52] block nbd2: Attempted send on invalid socket [ 305.559795][ T52] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.596046][ T8456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 305.617516][ T8456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 305.658144][ T8456] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 305.687029][ T8456] UDF-fs: Scanning with blocksize 4096 failed [ 305.706379][ T8456] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 305.744315][ T8466] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 305.986073][ T8466] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 306.297890][ T8463] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 306.377678][ T8469] device macvlan2 entered promiscuous mode [ 306.396478][ T8469] device bond2 entered promiscuous mode [ 306.402255][ T8469] device gretap1 entered promiscuous mode [ 306.411415][ T8469] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 306.778802][ T8469] device bond2 left promiscuous mode [ 306.796397][ T8469] device gretap1 left promiscuous mode [ 307.323569][ T8480] ip6_vti0 speed is unknown, defaulting to 1000 [ 308.455709][ T8497] netlink: 'syz.1.1270': attribute type 1 has an invalid length. [ 308.713708][ T8504] device syzkaller0 entered promiscuous mode [ 314.298151][ T8515] device syzkaller0 entered promiscuous mode [ 314.325082][ T8578] device syzkaller0 entered promiscuous mode [ 314.873807][ T8598] netlink: 'syz.2.1285': attribute type 1 has an invalid length. [ 315.004072][ T52] nbd_handle_cmd: 2 callbacks suppressed [ 315.004093][ T52] block nbd3: Attempted send on invalid socket [ 315.016634][ T52] blk_print_req_error: 2 callbacks suppressed [ 315.020886][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 315.036891][ T52] block nbd3: Attempted send on invalid socket [ 315.043069][ T52] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 315.053094][ T8601] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 315.063070][ T52] block nbd3: Attempted send on invalid socket [ 315.069383][ T52] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 315.078908][ T8601] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 315.088667][ T8601] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 315.096268][ T8601] UDF-fs: Scanning with blocksize 512 failed [ 315.103081][ T52] block nbd3: Attempted send on invalid socket [ 315.109322][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 315.119002][ T52] block nbd3: Attempted send on invalid socket [ 315.125391][ T52] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 315.134710][ T8601] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 315.144594][ T52] block nbd3: Attempted send on invalid socket [ 315.151336][ T52] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 315.160883][ T8601] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 315.170485][ T8601] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 315.178091][ T8601] UDF-fs: Scanning with blocksize 1024 failed [ 315.184826][ T52] block nbd3: Attempted send on invalid socket [ 315.191031][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 315.200553][ T52] block nbd3: Attempted send on invalid socket [ 315.206777][ T52] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 315.216187][ T8601] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 315.226034][ T52] block nbd3: Attempted send on invalid socket [ 315.232256][ T52] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 315.241803][ T8601] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 315.251695][ T8601] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 315.259338][ T8601] UDF-fs: Scanning with blocksize 2048 failed [ 315.266031][ T52] block nbd3: Attempted send on invalid socket [ 315.272260][ T52] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 315.281867][ T8601] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 315.291634][ T8601] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 315.301224][ T8601] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 315.308953][ T8601] UDF-fs: Scanning with blocksize 4096 failed [ 315.315087][ T8601] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 316.805217][ T8619] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1294'. [ 316.883153][ T8621] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1294'. [ 316.987039][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.239308][ T8621] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1294'. [ 317.499222][ T8627] device syzkaller0 entered promiscuous mode [ 321.511648][ T8644] device syzkaller0 entered promiscuous mode [ 321.721765][ T8687] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1308'. [ 321.853681][ T3105] nbd_handle_cmd: 2 callbacks suppressed [ 321.853703][ T3105] block nbd2: Attempted send on invalid socket [ 321.867917][ T3105] blk_print_req_error: 2 callbacks suppressed [ 321.867934][ T3105] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 321.883343][ T8687] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1308'. [ 321.892619][ T3105] block nbd2: Attempted send on invalid socket [ 321.898951][ T3105] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 321.908515][ T8689] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 321.918399][ T3105] block nbd2: Attempted send on invalid socket [ 321.924649][ T3105] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 321.933922][ T8689] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 321.943526][ T8689] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 321.951439][ T8689] UDF-fs: Scanning with blocksize 512 failed [ 321.958185][ T3105] block nbd2: Attempted send on invalid socket [ 321.964480][ T3105] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 321.974209][ T3105] block nbd2: Attempted send on invalid socket [ 321.980555][ T3105] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 321.989952][ T8689] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 321.999874][ T3105] block nbd2: Attempted send on invalid socket [ 322.006130][ T3105] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 322.015807][ T8689] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 322.025482][ T8689] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 322.033126][ T8689] UDF-fs: Scanning with blocksize 1024 failed [ 322.040009][ T3105] block nbd2: Attempted send on invalid socket [ 322.046281][ T3105] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 322.055808][ T3105] block nbd2: Attempted send on invalid socket [ 322.062003][ T3105] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 322.071428][ T8689] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 322.081251][ T3105] block nbd2: Attempted send on invalid socket [ 322.087649][ T3105] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 322.097054][ T8689] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 322.109248][ T8689] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 322.117059][ T8689] UDF-fs: Scanning with blocksize 2048 failed [ 322.123640][ T3105] block nbd2: Attempted send on invalid socket [ 322.130016][ T3105] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 322.139948][ T8689] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 322.149724][ T8689] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 322.159467][ T8689] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 322.167100][ T8689] UDF-fs: Scanning with blocksize 4096 failed [ 322.173180][ T8689] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 322.187029][ T8687] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1308'. [ 322.296071][ T8682] loop0: detected capacity change from 0 to 32768 [ 324.569952][ T8701] device syzkaller0 entered promiscuous mode [ 325.045227][ T8713] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 325.069365][ T8713] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 325.247271][ T8716] device macvlan2 entered promiscuous mode [ 325.343587][ T8716] device bond5 entered promiscuous mode [ 325.382721][ T8716] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 325.435292][ T8716] device bond5 left promiscuous mode [ 325.685196][ T8719] device syzkaller0 entered promiscuous mode [ 325.728479][ T8725] tipc: Enabling of bearer rejected, failed to enable media [ 327.029048][ T3105] nbd_handle_cmd: 2 callbacks suppressed [ 327.029070][ T3105] block nbd3: Attempted send on invalid socket [ 327.041489][ T3105] blk_print_req_error: 2 callbacks suppressed [ 327.041502][ T3105] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 327.058872][ T3105] block nbd3: Attempted send on invalid socket [ 327.065155][ T3105] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 327.074530][ T8750] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 327.084621][ T3105] block nbd3: Attempted send on invalid socket [ 327.090834][ T3105] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 327.100608][ T8750] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 327.110238][ T8750] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 327.117872][ T8750] UDF-fs: Scanning with blocksize 512 failed [ 327.124662][ T3105] block nbd3: Attempted send on invalid socket [ 327.130993][ T3105] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 327.140524][ T3105] block nbd3: Attempted send on invalid socket [ 327.146977][ T3105] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 327.156358][ T8750] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 327.166182][ T3105] block nbd3: Attempted send on invalid socket [ 327.172478][ T3105] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 327.181930][ T8750] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 327.191506][ T8750] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 327.199310][ T8750] UDF-fs: Scanning with blocksize 1024 failed [ 327.206082][ T3105] block nbd3: Attempted send on invalid socket [ 327.212295][ T3105] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 327.221858][ T3105] block nbd3: Attempted send on invalid socket [ 327.234751][ T3105] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 327.244374][ T8750] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 327.254220][ T3105] block nbd3: Attempted send on invalid socket [ 327.260415][ T3105] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 327.269833][ T8750] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 327.279418][ T8750] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 327.287018][ T8750] UDF-fs: Scanning with blocksize 2048 failed [ 327.293631][ T3105] block nbd3: Attempted send on invalid socket [ 327.299906][ T3105] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 327.310057][ T8750] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 327.319934][ T8750] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 327.329472][ T8750] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 327.337171][ T8750] UDF-fs: Scanning with blocksize 4096 failed [ 327.343245][ T8750] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 330.223880][ T8725] device syzkaller0 entered promiscuous mode [ 330.279248][ T8735] device syzkaller0 entered promiscuous mode [ 330.820789][ T8779] device syzkaller0 entered promiscuous mode [ 331.382398][ T8791] device syzkaller0 entered promiscuous mode [ 335.444881][ T8800] tipc: Enabling of bearer rejected, failed to enable media [ 335.460286][ T8809] ip6_vti0 speed is unknown, defaulting to 1000 [ 335.558093][ T8801] device syzkaller0 entered promiscuous mode [ 336.067122][ T8853] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1349'. [ 337.389896][ T8876] netlink: 'syz.3.1353': attribute type 1 has an invalid length. [ 337.447126][ T8876] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 337.458645][ T8876] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 337.535339][ T8877] device syzkaller0 entered promiscuous mode [ 340.418146][ T8881] device macvlan2 entered promiscuous mode [ 340.437592][ T8881] device bond8 entered promiscuous mode [ 340.451191][ T8881] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 340.465616][ T8881] device bond8 left promiscuous mode [ 340.593433][ T8886] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1357'. [ 340.612814][ T8887] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1357'. [ 340.704766][ T8887] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.711939][ T8887] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.719555][ T8887] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.726745][ T8887] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.922316][ T8887] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1357'. [ 340.944946][ T8887] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.952253][ T8887] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.362523][ T8907] tipc: Enabling of bearer rejected, failed to enable media [ 341.392130][ T8907] device syzkaller0 entered promiscuous mode [ 341.911763][ T8913] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1365'. [ 342.638638][ T8902] loop1: detected capacity change from 0 to 32768 [ 343.450457][ T8932] netlink: 'syz.2.1370': attribute type 1 has an invalid length. [ 343.661251][ T8935] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 343.739415][ T8935] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 343.879205][ T8932] device macvlan2 entered promiscuous mode [ 343.926073][ T8932] device bond6 entered promiscuous mode [ 343.971687][ T8932] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 344.049565][ T8932] device bond6 left promiscuous mode [ 344.895648][ T8947] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1373'. [ 344.912336][ T8947] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1373'. [ 344.921773][ T8947] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.929127][ T8947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.936695][ T8947] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.943817][ T8947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.961365][ T8947] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1373'. [ 345.009904][ T8947] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.017209][ T8947] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.261591][ T8952] tipc: Enabling of bearer rejected, failed to enable media [ 345.278859][ T8952] device syzkaller0 entered promiscuous mode [ 345.293051][ T8955] device syzkaller0 entered promiscuous mode [ 345.531585][ T8964] tipc: Enabled bearer , priority 0 [ 345.548342][ T8963] tipc: Disabling bearer [ 346.835070][ T8957] loop0: detected capacity change from 0 to 32768 [ 347.813157][ T8992] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1389'. [ 347.895209][ T8992] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1389'. [ 347.945771][ T8992] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.952966][ T8992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.960441][ T8992] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.967578][ T8992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.102109][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.126425][ T8992] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1389'. [ 348.204266][ T8992] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.211588][ T8992] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.759504][ T9004] device syzkaller0 entered promiscuous mode [ 348.902706][ T9006] tipc: Enabling of bearer rejected, failed to enable media [ 350.070791][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1395'. [ 350.594251][ T4779] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 350.744406][ T4779] usb 4-1: device descriptor read/64, error -71 [ 351.024273][ T4779] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 351.204233][ T4779] usb 4-1: device descriptor read/64, error -71 [ 351.261987][ T9043] device syzkaller0 entered promiscuous mode [ 351.334697][ T4779] usb usb4-port1: attempt power cycle [ 351.404352][ T4787] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 351.518312][ T9032] loop4: detected capacity change from 0 to 32768 [ 351.604304][ T4787] usb 2-1: Using ep0 maxpacket: 16 [ 351.613904][ T4787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 351.652454][ T4787] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 351.673020][ T9045] device syzkaller0 entered promiscuous mode [ 351.689692][ T4787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.722028][ T4787] usb 2-1: Product: syz [ 351.751298][ T4787] usb 2-1: Manufacturer: syz [ 351.756177][ T4779] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 351.769625][ T4787] usb 2-1: SerialNumber: syz [ 351.795406][ T4779] usb 4-1: device descriptor read/8, error -71 [ 351.805968][ T4787] usb 2-1: config 0 descriptor?? [ 351.825471][ T4787] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 351.850884][ T4787] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 351.992030][ T9048] tipc: Enabling of bearer rejected, failed to enable media [ 352.094404][ T4779] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 352.134879][ T4779] usb 4-1: device descriptor read/8, error -71 [ 352.264575][ T4779] usb usb4-port1: unable to enumerate USB device [ 352.429316][ T4787] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 352.968292][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1412'. [ 353.046797][ T4787] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 353.064874][ T9070] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1414'. [ 353.073632][ T4787] em28xx 2-1:0.0: board has no eeprom [ 353.095280][ T9070] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.102510][ T9070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.110089][ T9070] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.117317][ T9070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.194367][ T4787] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 353.210248][ T4787] em28xx 2-1:0.0: dvb set to bulk mode. [ 353.250683][ T4790] em28xx 2-1:0.0: Binding DVB extension [ 353.267466][ T4787] usb 2-1: USB disconnect, device number 4 [ 353.315959][ T4787] em28xx 2-1:0.0: Disconnecting em28xx [ 353.497408][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 353.643384][ T9081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1417'. [ 353.653446][ T4790] em28xx 2-1:0.0: Registering input extension [ 353.685012][ T4787] em28xx 2-1:0.0: Closing input extension [ 353.825409][ T4787] em28xx 2-1:0.0: Freeing device [ 354.291052][ T9086] tipc: Enabling of bearer rejected, failed to enable media [ 354.335179][ T9091] tipc: Enabling of bearer rejected, failed to enable media [ 355.504325][ T4257] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 355.684290][ T4257] usb 5-1: device descriptor read/64, error -71 [ 355.974344][ T4257] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 356.043427][ T9106] loop1: detected capacity change from 0 to 32768 [ 356.134461][ T4257] usb 5-1: device descriptor read/64, error -71 [ 356.491443][ T9115] ip6_vti0 speed is unknown, defaulting to 1000 [ 357.395003][ T4257] usb usb5-port1: attempt power cycle [ 358.009051][ T4257] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 358.016364][ T9106] (syz.1.1425,9106,1):ocfs2_journal_init:940 ERROR: Linux journal layer error [ 358.018692][ T9106] (syz.1.1425,9106,1):ocfs2_check_volume:2404 ERROR: Could not initialize journal! [ 358.035756][ T9106] (syz.1.1425,9106,0):ocfs2_check_volume:2489 ERROR: status = -22 [ 358.150730][ T9106] (syz.1.1425,9106,0):ocfs2_mount_volume:1821 ERROR: status = -22 [ 358.182324][ T9106] (syz.1.1425,9106,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 358.301633][ T4257] usb 5-1: device descriptor read/8, error -71 [ 358.488037][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1430'. [ 358.510194][ T9129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1431'. [ 358.780027][ T9133] netlink: 'syz.3.1434': attribute type 1 has an invalid length. [ 358.948243][ T9137] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 358.984010][ T9137] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 359.053672][ T9140] device macvlan2 entered promiscuous mode [ 359.085298][ T9140] device bond9 entered promiscuous mode [ 359.115352][ T9140] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 359.173868][ T9140] device bond9 left promiscuous mode [ 359.232714][ T9142] tipc: Enabling of bearer rejected, failed to enable media [ 359.276118][ T9156] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1437'. [ 359.874221][ T4783] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 359.974365][ T5236] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 360.044358][ T4783] usb 2-1: device descriptor read/64, error -71 [ 360.167047][ T5236] usb 5-1: unable to get BOS descriptor or descriptor too short [ 360.185809][ T5236] usb 5-1: not running at top speed; connect to a high speed hub [ 360.215503][ T5236] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.226702][ T9177] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1447'. [ 360.243645][ T5236] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.256813][ T5236] usb 5-1: string descriptor 0 read error: -22 [ 360.273474][ T5236] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.293230][ T5236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.329386][ T5236] usb 5-1: 0:2 : does not exist [ 360.364410][ T4783] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 360.371631][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1446'. [ 360.534367][ T4783] usb 2-1: device descriptor read/64, error -71 [ 360.674385][ T4783] usb usb2-port1: attempt power cycle [ 360.733014][ T9196] tipc: Enabling of bearer rejected, failed to enable media [ 360.752036][ T9194] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1451'. [ 360.916900][ T9199] tipc: Enabling of bearer rejected, failed to enable media [ 361.084335][ T4783] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 361.125831][ T4783] usb 2-1: device descriptor read/8, error -71 [ 361.241071][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1456'. [ 361.343139][ T5236] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 361.363644][ T5236] usb 5-1: Warning! Unlikely big volume range (=24452), cval->res is probably wrong. [ 361.383716][ T5236] usb 5-1: [5] FU [Mic Capture Volume] ch = 1, val = -4256/20196/1 [ 361.404321][ T4783] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 361.408129][ T5236] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 361.412270][ T4787] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 361.433571][ T5236] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 361.471728][ T4783] usb 2-1: device descriptor read/8, error -71 [ 361.510450][ T5236] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 361.543560][ T5236] usb 5-1: USB disconnect, device number 10 [ 361.599466][ T4783] usb usb2-port1: unable to enumerate USB device [ 361.646131][ T4787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.670096][ T4787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.683396][ T4787] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 361.698118][ T4787] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 361.713753][ T4787] usb 4-1: Manufacturer: syz [ 361.730526][ T4787] usb 4-1: config 0 descriptor?? [ 361.807456][ T6348] udevd[6348]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 362.150302][ T4787] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 362.167734][ T4787] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 362.184888][ T4787] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 362.194232][ T4787] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 362.204583][ T4787] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 362.211423][ T4787] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 362.228678][ T4787] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 362.264526][ T4787] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 362.290738][ T9229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1463'. [ 362.605612][ T9237] tipc: Enabling of bearer rejected, failed to enable media [ 362.797171][ T9241] tipc: Enabling of bearer rejected, failed to enable media [ 362.842258][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1468'. [ 363.361084][ T9253] tipc: Enabling of bearer rejected, failed to enable media [ 363.370937][ T9253] device syzkaller0 entered promiscuous mode [ 363.489999][ T4787] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 363.497697][ T4787] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 363.527355][ T4787] pyra: probe of 0003:1E7D:2CF6.0004 failed with error -71 [ 363.537493][ T4787] usb 4-1: USB disconnect, device number 11 [ 363.767923][ T9254] fido_id[9254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 364.021640][ T4324] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 364.168046][ T9274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 364.216209][ T4324] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 364.254354][ T4324] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 364.298402][ T4324] usb 3-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 364.329176][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.360641][ T4324] usb 3-1: config 0 descriptor?? [ 364.464334][ T4787] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 364.624239][ T4787] usb 5-1: device descriptor read/64, error -71 [ 364.724438][ T9280] tipc: Enabling of bearer rejected, failed to enable media [ 364.785722][ T4324] thrustmaster 0003:044F:B320.0005: unknown main item tag 0x0 [ 364.793336][ T4324] thrustmaster 0003:044F:B320.0005: item fetching failed at offset 6/7 [ 364.834808][ T4324] thrustmaster 0003:044F:B320.0005: parse failed [ 364.841252][ T4324] thrustmaster: probe of 0003:044F:B320.0005 failed with error -22 [ 364.904368][ T4787] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 364.985773][ T4324] usb 3-1: USB disconnect, device number 5 [ 365.084641][ T4787] usb 5-1: device descriptor read/64, error -71 [ 365.186351][ T9288] tipc: Enabling of bearer rejected, failed to enable media [ 365.214816][ T4787] usb usb5-port1: attempt power cycle [ 365.311545][ T9292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1483'. [ 365.631725][ T9298] device syzkaller0 entered promiscuous mode [ 365.638122][ T4787] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 365.690305][ T4787] usb 5-1: device descriptor read/8, error -71 [ 365.981546][ T4787] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 366.041545][ T4787] usb 5-1: device descriptor read/8, error -71 [ 366.091730][ T9315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1489'. [ 366.463116][ T9318] tipc: Enabling of bearer rejected, failed to enable media [ 366.484756][ T4787] usb usb5-port1: unable to enumerate USB device [ 366.933392][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1495'. [ 367.059769][ T9333] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1496'. [ 367.180524][ T4790] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 367.333489][ T9338] tipc: Enabling of bearer rejected, failed to enable media [ 367.378444][ T4790] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 367.394496][ T4790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.420485][ T4790] usb 2-1: Product: syz [ 367.433788][ T4790] usb 2-1: Manufacturer: syz [ 367.450135][ T4790] usb 2-1: SerialNumber: syz [ 367.917936][ T9349] device syzkaller0 entered promiscuous mode [ 368.252151][ T9355] netlink: 'syz.2.1503': attribute type 10 has an invalid length. [ 368.272966][ T9355] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.286332][ T9355] bond0: (slave team0): Enslaving as an active interface with an up link [ 368.563729][ T4790] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 368.712624][ T9358] tipc: Enabling of bearer rejected, failed to enable media [ 368.998949][ T4790] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 369.015699][ T4790] usb 2-1: USB disconnect, device number 9 [ 369.045219][ T4790] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 369.224981][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1505'. [ 369.308518][ T9373] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1506'. [ 369.552507][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1508'. [ 369.919175][ T9371] mmap: syz.2.1507 (9371) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 369.931473][ T9371] [ 369.933844][ T9371] ====================================================== [ 369.940885][ T9371] WARNING: possible circular locking dependency detected [ 369.948018][ T9371] syzkaller #0 Not tainted [ 369.952443][ T9371] ------------------------------------------------------ [ 369.959475][ T9371] syz.2.1507/9371 is trying to acquire lock: [ 369.965472][ T9371] ffff888027766140 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3a2/0x1c30 [ 369.976219][ T9371] [ 369.976219][ T9371] but task is already holding lock: [ 369.983604][ T9371] ffff8880748b35d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1a4/0x7b0 [ 369.993649][ T9371] [ 369.993649][ T9371] which lock already depends on the new lock. [ 369.993649][ T9371] [ 370.004070][ T9371] [ 370.004070][ T9371] the existing dependency chain (in reverse order) is: [ 370.013116][ T9371] [ 370.013116][ T9371] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 370.020712][ T9371] down_read_killable+0x4c/0x340 [ 370.026200][ T9371] mmap_read_lock_killable+0x1d/0x60 [ 370.032062][ T9371] lock_mm_and_find_vma+0x2b1/0x2f0 [ 370.037800][ T9371] do_user_addr_fault+0x2db/0xb10 [ 370.043383][ T9371] exc_page_fault+0x60/0x100 [ 370.048550][ T9371] asm_exc_page_fault+0x22/0x30 [ 370.053950][ T9371] fault_in_readable+0x13e/0x1f0 [ 370.059446][ T9371] fault_in_iov_iter_readable+0xbb/0x2e0 [ 370.065629][ T9371] generic_perform_write+0x1f1/0x5c0 [ 370.071466][ T9371] __generic_file_write_iter+0x148/0x2a0 [ 370.077646][ T9371] generic_file_write_iter+0xab/0x2e0 [ 370.083580][ T9371] vfs_write+0x4b1/0xa30 [ 370.088372][ T9371] ksys_write+0x14c/0x250 [ 370.093277][ T9371] do_syscall_64+0x4c/0xa0 [ 370.098244][ T9371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.104680][ T9371] [ 370.104680][ T9371] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 370.113398][ T9371] __lock_acquire+0x2d07/0x7d10 [ 370.118807][ T9371] lock_acquire+0x1bb/0x4a0 [ 370.123856][ T9371] down_write+0x36/0x60 [ 370.128558][ T9371] process_measurement+0x3a2/0x1c30 [ 370.134297][ T9371] ima_file_mmap+0x102/0x150 [ 370.139426][ T9371] __se_sys_remap_file_pages+0x559/0x7b0 [ 370.145607][ T9371] do_syscall_64+0x4c/0xa0 [ 370.150573][ T9371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.157007][ T9371] [ 370.157007][ T9371] other info that might help us debug this: [ 370.157007][ T9371] [ 370.167248][ T9371] Possible unsafe locking scenario: [ 370.167248][ T9371] [ 370.174709][ T9371] CPU0 CPU1 [ 370.180164][ T9371] ---- ---- [ 370.185554][ T9371] lock(&mm->mmap_lock); [ 370.189916][ T9371] lock(&sb->s_type->i_mutex_key#13); [ 370.197929][ T9371] lock(&mm->mmap_lock); [ 370.204797][ T9371] lock(&sb->s_type->i_mutex_key#13); [ 370.210282][ T9371] [ 370.210282][ T9371] *** DEADLOCK *** [ 370.210282][ T9371] [ 370.218462][ T9371] 1 lock held by syz.2.1507/9371: [ 370.223499][ T9371] #0: ffff8880748b35d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1a4/0x7b0 [ 370.233982][ T9371] [ 370.233982][ T9371] stack backtrace: [ 370.239902][ T9371] CPU: 1 PID: 9371 Comm: syz.2.1507 Not tainted syzkaller #0 [ 370.247292][ T9371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 370.257401][ T9371] Call Trace: [ 370.260715][ T9371] [ 370.263667][ T9371] dump_stack_lvl+0x188/0x24e [ 370.268370][ T9371] ? load_image+0x400/0x400 [ 370.272901][ T9371] ? show_regs_print_info+0x12/0x12 [ 370.278136][ T9371] ? print_circular_bug+0x12b/0x1a0 [ 370.283365][ T9371] check_noncircular+0x296/0x330 [ 370.288339][ T9371] ? look_up_lock_class+0x75/0x140 [ 370.293488][ T9371] ? add_chain_block+0x940/0x940 [ 370.298465][ T9371] ? lockdep_lock+0xf1/0x1f0 [ 370.303085][ T9371] ? __lock_acquire+0x13cf/0x7d10 [ 370.308159][ T9371] ? _find_first_zero_bit+0xcf/0x100 [ 370.313470][ T9371] __lock_acquire+0x2d07/0x7d10 [ 370.318355][ T9371] ? ima_match_policy+0x107/0x2120 [ 370.323487][ T9371] ? __lock_acquire+0x7d10/0x7d10 [ 370.328543][ T9371] ? verify_lock_unused+0x140/0x140 [ 370.333777][ T9371] ? ima_match_policy+0x107/0x2120 [ 370.338915][ T9371] ? ima_match_policy+0x2093/0x2120 [ 370.344147][ T9371] lock_acquire+0x1bb/0x4a0 [ 370.348678][ T9371] ? process_measurement+0x3a2/0x1c30 [ 370.354076][ T9371] ? __might_sleep+0xd0/0xd0 [ 370.358690][ T9371] ? read_lock_is_recursive+0x10/0x10 [ 370.364093][ T9371] ? ima_get_action+0x71/0xa0 [ 370.368794][ T9371] down_write+0x36/0x60 [ 370.372985][ T9371] ? process_measurement+0x3a2/0x1c30 [ 370.378382][ T9371] process_measurement+0x3a2/0x1c30 [ 370.383610][ T9371] ? ima_file_mmap+0x150/0x150 [ 370.388413][ T9371] ? aa_file_perm+0x112/0xf00 [ 370.393124][ T9371] ? aa_file_perm+0x112/0xf00 [ 370.397831][ T9371] ? mtree_load+0x100/0xa70 [ 370.402365][ T9371] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 370.408544][ T9371] ima_file_mmap+0x102/0x150 [ 370.413154][ T9371] ? end_current_label_crit_section+0x14b/0x170 [ 370.419419][ T9371] ? ima_file_free+0x3e0/0x3e0 [ 370.424208][ T9371] ? common_file_perm+0x171/0x1c0 [ 370.429259][ T9371] ? bpf_lsm_mmap_file+0x5/0x10 [ 370.434140][ T9371] ? security_mmap_file+0x11b/0x180 [ 370.439376][ T9371] __se_sys_remap_file_pages+0x559/0x7b0 [ 370.445090][ T9371] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 370.450838][ T9371] ? lock_chain_count+0x20/0x20 [ 370.455721][ T9371] ? lockdep_hardirqs_on+0x94/0x140 [ 370.460957][ T9371] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 370.466703][ T9371] do_syscall_64+0x4c/0xa0 [ 370.471144][ T9371] ? clear_bhb_loop+0x60/0xb0 [ 370.475848][ T9371] ? clear_bhb_loop+0x60/0xb0 [ 370.480551][ T9371] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 370.486478][ T9371] RIP: 0033:0x7fc5ff19aeb9 [ 370.490954][ T9371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.510590][ T9371] RSP: 002b:00007fc5fffe2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 370.519032][ T9371] RAX: ffffffffffffffda RBX: 00007fc5ff415fa0 RCX: 00007fc5ff19aeb9 [ 370.527034][ T9371] RDX: 0000000000000000 RSI: 0000000000200000 RDI: 00002000002ec000 [ 370.535035][ T9371] RBP: 00007fc5ff208c1f R08: 0000000000000000 R09: 0000000000000000 [ 370.543030][ T9371] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 370.551025][ T9371] R13: 00007fc5ff416038 R14: 00007fc5ff415fa0 R15: 00007ffe4d9c27a8 [ 370.559028][ T9371] [ 370.884120][ C1] sched: RT throttling activated [ 378.436890][ T1266] ieee802154 phy1 wpan1: encryption failed: -22