last executing test programs: 3m29.787788406s ago: executing program 3 (id=4): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x1, 0xf0, 0x4}}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="937d1ec89a9ea95d", 0x8}, 0x1, 0x0, 0x0, 0x41}, 0x16b36278156b8d52) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_j1939(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)="937d1ec89a9ea95dc9", 0x9}, 0x1, 0x0, 0x0, 0x41}, 0x16b36278156b8d52) 3m28.834761698s ago: executing program 3 (id=9): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x18410, &(0x7f0000000180)=ANY=[@ANYRES8=0x0, @ANYRES64=0x0], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) write$P9_RREADLINK(r0, 0x0, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2\x00', 0x1ff) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) dup(r1) open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xc, &(0x7f0000f59ffc)=0x9, 0x4) bind$inet6(r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) 3m27.307266575s ago: executing program 3 (id=22): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x200080c0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x8029, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 3m24.714537711s ago: executing program 3 (id=69): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @private2, 0x10000000}, 0x1c) listen(0xffffffffffffffff, 0xb5d6) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c63", 0xe}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEV_UP(r3, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, 0x0, 0x4008801) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) write$nci(r2, &(0x7f0000000e80)=ANY=[@ANYBLOB="500238"], 0x3b) 3m24.661328541s ago: executing program 32 (id=69): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @private2, 0x10000000}, 0x1c) listen(0xffffffffffffffff, 0xb5d6) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c63", 0xe}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEV_UP(r3, 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r3, 0x0, 0x4008801) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) write$nci(r2, &(0x7f0000000e80)=ANY=[@ANYBLOB="500238"], 0x3b) 1m42.60766597s ago: executing program 5 (id=2734): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)={0x44, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x4000) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x28084) 1m42.548607199s ago: executing program 5 (id=2736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0xac, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8, 0xfff1}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x6c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x9}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x58, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x54, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3ff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x507}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xf}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xa52}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1fb}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xc06b}, @TCA_CHAIN={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1m42.485944856s ago: executing program 5 (id=2740): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b14032a9e6dcd01564ea909f178a2bbfb276442e2f7a282a5", 0x2a}], 0x1) 1m42.348829266s ago: executing program 5 (id=2746): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$eJzs3U1sHGcZAOB31uu1N5XcbZu0BSHFakQEDSS2l5IgIREqhHyoUCQuvS6J01heu5HtIidCxAUKRzihHDgUIXPoCfWABOKAKGckJK4o90jcIw4smtmZ9f7Y693GP0n6PNJ4vpn5ft55O/Pt7myjDeAza/HtmNyOJBYvvLWVbj/YqTcf7NRXi3JETEVEKaLcXkWyFpF8EnE12kt8Lt2Zd5fsN84bD//0m/P3P6q3t8r5ktUvDWu3qzVkhO18idmImMjXYyrv19/1eHOgv3tjdZ104k4Tdq5IHJy01oDtcZqPcN8CT7p7EROTe+yvRZyKiOn8fUDks0PpmMM7dGPNcgAAAPBkmjiowvOP4lFsxczxhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADPhqT9m4FJvpSK8mwkxe//V/J9qUrlhOMd7isHHP/g5jEFAgAAAAAAAABH4uP8i/uzj+JRbMVMsb+VZN/5v5ZtnM7+PhfvxUYsxXpcjK1oxGZsxnrMR0zOdHVY2Wpsbq7PD7b8daQtW63WvbzlQkTUBlouHMNJAwAAAAAAAMCz6yexGDMnHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHRLIibaq2w5XZRrUSpHxHREVNJ62xF/KcpPuuqQY389xjgAAADghBQfjWeS/7ULrST7zP9y9rl/Ot6LtdiM5diMZizFjexZQPtTf+mf2/Xmg536aroMdvzt/4wVR9ZjREzE+/uMPJfVONNpsRjfje/HhZiNa7Eey/HDaMRmLMVsVNOTiEYkUau2n17Uijj3jvdqz9a1/tjO9m2/mkVSjZuxnMV2Ma5Xov3YJDuHdMxXu0b7YyWib8T30+wk38qNmKMbXf+9fpU/l8m1nh+xj6NRy858spORuTT3eTZeGJ77Ma+T/pHmo9R5BnV6d5R0s3+kIuc/GCfnp/J1muuf9+b8sI35KK0/EwtRyq++iJd7c377i/df7G385X/97dqt0trKrZsbF47wlB7H7EEVJotCfybqXZl4ZfjVl2eimWZie/RMTPbvmB615dGq5NnIpqIRZ8vvZKVGvNZ1Cb4bN2IpLsdczMeVmItvxELUO1dYupzpyWu5vtqbk+xeKw3Ob8OexJ77UlelXxxQ+XileXmhK6/dM10tO5bvufrLmOu6+l4cfvWN/SqQjv/5vJyO8dPOK86ToCcT+dxcRPfS8Ez8tpX+3Wiurazfatwecbzz+Tq9bT/onZt/N3rU/a/uhyG9XtIZt5xtZTmpFtdLeuylTrS9+ark37i025UGjp3pHKvFTCzH9/a9Uyv5e7jBntrHXuk+9u/dmbOSv78pjvW8y4l3o5m9C+lz4FQNwDE79fqpSvVh9R/VD6s/q96qvjX95tSVqS9UYvLv5T9P/KH0+9I3k9fjw/hxzJx0pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CzYuHN3pdFsLq13CjHdv+dxC5V9xxpeiNKBdXaeG63DqEUMHyvJC5XDPfensVCNvj3FLyw9bs8fR8SQOpXHDj4Z+xobu5Dm4VA6LH44LdvTmhijeblotXedcmxMx0ojKe9xx03t3gVRW2k0/9vqaV6NrlsGeMZd2ly9fWnjzt2vLq823ll6Z2lt4crlK5frX5//2qWby82lufbfk44SOAobd+5OnHQMAAAAAAAAAAAAwHjy//t/81P/Y4byAXUq6xt7j3z2uE8VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeEotvh2T25HE/NzFuXT7wU69mS5FebdmOSJKEZH8KCL5JOJqtJeodXWX7DfOGw+jdP7+R/XdvspF/dKwdqPZzpeYjYiJfH2wqT26Gezveld/258qvKRzhmnCzhWJg5P2/wAAAP//vnbzsA==") chroot(&(0x7f0000000a40)='./file0\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) 1m42.209969151s ago: executing program 5 (id=2751): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0x1, 0x8070bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0x10, 0x10}, {0xfff1, 0x8}, {0x5, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48044}, 0x40000) 1m41.752836779s ago: executing program 5 (id=2763): r0 = socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0x14, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x8, @local, 0x9}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x7, 0x1) 1m41.673683586s ago: executing program 33 (id=2763): r0 = socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0x14, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x8, @local, 0x9}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x7, 0x1) 4.127579489s ago: executing program 0 (id=4027): r0 = socket(0xa, 0x5, 0x0) connect$inet(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x258a, 0x6a88, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x2, 0x6e}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x0, 0x22, 0x2, {0x2, 0x1}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.142097793s ago: executing program 6 (id=4044): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000780)='./bus\x00', 0x20008c0, &(0x7f00000007c0)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0xff}}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@check_strict}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@fat=@dmask={'dmask', 0x3d, 0x8000000000000000}}, {@utf8no}, {@shortname_winnt}, {@shortname_mixed}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlate}], [{@permit_directio}, {@appraise_type}, {@audit}, {@hash}]}, 0x0, 0x36f, &(0x7f0000002140)="$eJzs3U9oHFUYAPBvO5vdtFCTg1AULKM3QUNb8aCnlJJCcS8qi38O6mJTld0oZHGxOWQbL+JR8Kgnbx704KFnERTx5sGrFaQqHrQHoWBxZHdndyfZ3TYpxhr8/SDLy/e+b96bzLAzGbIvLy1H8/xcXLh27WrMz5eivHxmOa6XYjGSGLoUk+amxACAg+F6lsXv2cAuS0r7PCUAYJ/1r/+vHC1E3v7yZvmZqz8AHHj57/+HR4Ep1/f5WcVv7Nu0AIB9NPH8/4Ft3ZX8K1cu/FUAAHBQPf3c80+crkU8labzEWvvdOqdejw+7j99IV6LVqzGiViIGxGDG4XeS6n/evZcbeVEmqbd+Gkx6r2KTj1irdupD+4UTif9+mqcjIVYzOvzu40sy5Kzn9VWTqZ9EXGp2x8/1kqd+lwcycf//kisxqlI4+6J+ohztZVTab6B+tqwvhuxNX5u0Zv/UizEty/H8Yg4H73a4W1NbWXzZJqeyWrb6jv1aj9vYOYTEAAAAAAAAAAAAAAAAAAAAAAAuC1L6cjiaP2bbLx+z9LSlP7++jiD+nx9oK3B+kBZNYss++2th+vvJrFtfaCd6/N06uU4dGd3HQAAAAAAAAAAAAAAAAAAAP4z2hcr0Wi1VtfbFzeaxUZ3vX3xUET0Iq9//ckXh2My5xaNcj5GoSvNQxvNRpYMk7MkzzkUhfKkN/hwgx9fHs24OER1tBdTp1Gd3dVqHb3/xw/GkfuS4Zb/GuckMX0Hkx3TKDbW7hpMaS8/qFHj1C1yrmRZNqt884XJqihFlPd+4CYb84VI1mt8dfXVex5pH3u0H/k8G3jwoYVnrrz/0S/NRqs3cvSPYGW9fSNrNvLvp59ssxtJ4fwpxaBRKp4J5VnllY1mY2t7VyP57tdn733vm92NnhUjb07JSQa782kv8mIyOrFblUFOb5o7qg5PG2su9npQOrdzKI99uNy4vPnDz7utKrxJTFuo44/j/9RbEAAAAAAAAAAAAAAAAAAAkCt8VjyXf9h37mZVjz25/zMDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH/P+P//FxpbE5GZjXJE5JE/uzGZU11db0dU7vRuAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP/d3AAAA//9JsGhw") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000440)={{0x2, 0x4e23, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x2, {0x2, 0x4e20, @remote}, 'wg0\x00'}) 2.522318436s ago: executing program 2 (id=4051): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000009c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x2924, 0xffff, 0x9dff, 0xf}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xfe86, 0xfffffff9, 0x0, 0xf, "01040000000000002400a14b5ea25c999600"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 2.31609906s ago: executing program 4 (id=4054): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000009b40)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 2.266854563s ago: executing program 4 (id=4055): listen(0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 2.265742168s ago: executing program 6 (id=4056): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) dup(0xffffffffffffffff) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.214630743s ago: executing program 0 (id=4057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b14032a9e6dcd01564ea909f178a2bbfb276442e2f7a282a5", 0x2a}], 0x1) 2.194377789s ago: executing program 4 (id=4059): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x158b8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xa}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7d", 0x4}], 0x2}, 0x5) 2.08864015s ago: executing program 1 (id=4062): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101080000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff08000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "2c78002c88baae6df2663eefe2b18a1467"}]}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d3"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}}, 0x0) 1.929701288s ago: executing program 1 (id=4063): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x9) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.575490633s ago: executing program 2 (id=4064): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)=""/85, 0x55}, {&(0x7f00000047c0)=""/4014, 0xfae}, {&(0x7f0000000380)=""/236, 0xec}, {&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000000)=""/32, 0x20}], 0x5}, 0xbf9d5a5a4c2f3718) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 1.396913877s ago: executing program 6 (id=4065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x100, {0x0, 0xa, 0x40}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) 1.150203912s ago: executing program 2 (id=4066): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) write(r0, &(0x7f0000000100)="240000001e005f0214ffffffffff00010000001d000000f66895e2922ade67874cb88c24", 0x24) 1.12275692s ago: executing program 6 (id=4067): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000780)='./bus\x00', 0x20008c0, &(0x7f00000007c0)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0xff}}, {@shortname_lower}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@check_strict}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@fat=@dmask={'dmask', 0x3d, 0x8000000000000000}}, {@utf8no}, {@shortname_winnt}, {@shortname_mixed}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlate}], [{@permit_directio}, {@appraise_type}, {@audit}, {@hash}]}, 0x0, 0x36f, &(0x7f0000002140)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000440)={{0x2, 0x4e23, @multicast2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x2, {0x2, 0x4e20, @remote}, 'wg0\x00'}) 1.122638102s ago: executing program 2 (id=4068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) 1.121720419s ago: executing program 0 (id=4069): listen(0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 1.10313237s ago: executing program 4 (id=4070): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00'}) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x18, r1, 0x6a98047402e98331, 0x0, 0x25dfdbfe, {}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x841}, 0x4080084) 1.006133526s ago: executing program 1 (id=4071): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001400)="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", 0x11d}, {&(0x7f0000000140)="937df4e4eadc6dccf4bcb7bb3ad5a6590c3309df46dd02f8e085f852448c686d2c29e740a901be19e2524899a6d680e7d0e811a4416faa66d07fb0fa7eb0282aea7f3531a560754b1292cf99bba5416ed995f275022034f1b9de5c86083dbd3034855b4454a24c836a4c8b816ecb9e43326af8d3d8f135fb163f59d31a234f9a2d57111804492ec49f66ed19c57704025940280f07397b93c201118579e1c52738c5b38de4", 0xa5}, {&(0x7f0000000400)="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", 0x3c1}], 0x3, 0x0, 0x0, 0x10000000}, 0x52cc) close(0x3) 710.192566ms ago: executing program 0 (id=4072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 709.981862ms ago: executing program 2 (id=4073): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000580), 0x4, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x73, 0x18, 0x7, 0x0, "d80004000000000000957f00003d4a100a000000000020020661e6e66b8b37ff"}) 683.242026ms ago: executing program 0 (id=4074): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c29ebab028deda501009bdeffafde2500", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x700, 0x0, 0x0}) 576.726936ms ago: executing program 0 (id=4075): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) dup(0xffffffffffffffff) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 250.638381ms ago: executing program 6 (id=4076): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000008c0)=""/85, 0x55}, {&(0x7f00000047c0)=""/4014, 0xfae}, {0x0}, {&(0x7f0000000380)=""/236, 0xec}, {&(0x7f0000000a80)=""/231, 0xe7}, {&(0x7f0000000000)=""/32, 0x20}], 0x6}, 0xbf9d5a5a4c2f3718) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 215.248927ms ago: executing program 4 (id=4077): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000000f"], 0x3c}, 0x1, 0x0, 0x0, 0x4008840}, 0x10) 154.284185ms ago: executing program 2 (id=4078): syz_open_procfs(0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xb05, 0x196b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x9, 0x6, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) 154.088284ms ago: executing program 1 (id=4079): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r1, &(0x7f00000000c0), 0x12) 140.674364ms ago: executing program 1 (id=4080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003f00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfa, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x158b8}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xa}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7d", 0x4}], 0x2}, 0x5) 23.623512ms ago: executing program 1 (id=4081): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x9) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9.863569ms ago: executing program 4 (id=4082): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0xb3) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x9) 0s ago: executing program 6 (id=4083): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000840)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): r [ 141.196339][T14277] tipc: Disabling bearer [ 141.281475][T14293] tipc: Enabled bearer , priority 0 [ 141.283627][T14291] tipc: Disabling bearer [ 141.339122][T14298] netlink: 'syz.2.2759': attribute type 2 has an invalid length. [ 141.749515][T14315] loop2: detected capacity change from 0 to 128 [ 141.751206][T14315] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.752876][T14315] EXT4-fs (loop2): Test dummy encryption mode enabled [ 141.758904][ T4711] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.800596][T14315] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.815135][T14315] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 141.837953][ T4711] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.864266][T14315] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-ce" [ 141.892881][ T6573] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 141.895114][ T6573] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 141.897197][ T6573] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 141.900117][ T4711] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.900272][ T6573] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 141.903127][ T6573] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.906684][ T6578] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.946580][ T4711] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.049203][T14336] loop2: detected capacity change from 0 to 8192 [ 142.104974][T14346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.105153][T14346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.140037][ T4711] bridge_slave_1: left allmulticast mode [ 142.141063][ T4711] bridge_slave_1: left promiscuous mode [ 142.142221][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.158434][ T4711] ¾x9ÿ: left allmulticast mode [ 142.159379][ T4711] ¾x9ÿ: left promiscuous mode [ 142.159486][ T4711] bridge0: port 1(1¾x9ÿ) entered disabled state [ 142.226353][T14356] loop0: detected capacity change from 0 to 2048 [ 142.231205][T14356] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 142.231394][T14356] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 142.231401][T14356] UDF-fs: Scanning with blocksize 512 failed [ 142.239836][T14356] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 142.241875][T14356] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 142.241926][T14356] UDF-fs: Scanning with blocksize 1024 failed [ 142.243757][T14356] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 142.243800][T14356] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 142.243808][T14356] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 142.243813][T14356] UDF-fs: Scanning with blocksize 2048 failed [ 142.252831][T14356] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 142.253254][T14356] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 142.253368][T14356] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 142.253377][T14356] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 142.253384][T14356] UDF-fs: Scanning with blocksize 4096 failed [ 142.253389][T14356] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 142.482468][ T4711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.516676][ T4711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.528188][ T4711] bond0 (unregistering): Released all slaves [ 142.557548][ T4711] bond1 (unregistering): Released all slaves [ 142.560712][ T4711] bond2 (unregistering): Released all slaves [ 142.593379][T14326] chnl_net:caif_netlink_parms(): no params data found [ 142.607943][ T4711] tipc: Disabling bearer [ 142.609241][ T4711] tipc: Left network mode [ 142.667456][T14379] batadv_slave_1: entered promiscuous mode [ 142.667837][T14377] batadv_slave_1: left promiscuous mode [ 143.024306][T14326] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.024806][T14326] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.024874][T14326] bridge_slave_0: entered allmulticast mode [ 143.030417][T14326] bridge_slave_0: entered promiscuous mode [ 143.033946][T14389] __nla_validate_parse: 16 callbacks suppressed [ 143.033975][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2787'. [ 143.046583][T14326] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.047004][T14326] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.047230][T14326] bridge_slave_1: entered allmulticast mode [ 143.047789][T14326] bridge_slave_1: entered promiscuous mode [ 143.056207][T14398] syzkaller0: entered promiscuous mode [ 143.056675][T14398] syzkaller0: entered allmulticast mode [ 143.081965][T14326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.084378][T14326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.150588][ T4711] hsr_slave_0: left promiscuous mode [ 143.151769][ T4711] hsr_slave_1: left promiscuous mode [ 143.152205][ T4711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.152216][ T4711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.153197][ T4711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.153207][ T4711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.170275][ T4711] veth1_macvtap: left promiscuous mode [ 143.170336][ T4711] veth0_macvtap: left promiscuous mode [ 143.170386][ T4711] veth1_vlan: left allmulticast mode [ 143.170397][ T4711] veth1_vlan: left promiscuous mode [ 143.170434][ T4711] veth0_vlan: left promiscuous mode [ 143.177730][T14413] xt_hashlimit: size too large, truncated to 1048576 [ 143.359848][ T4711] team0 (unregistering): Port device team_slave_1 removed [ 143.371425][ T4711] team0 (unregistering): Port device team_slave_0 removed [ 143.501519][T14416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2793'. [ 143.523279][T14326] team0: Port device team_slave_0 added [ 143.527275][T14326] team0: Port device team_slave_1 added [ 143.528898][T14413] ¾x9ÿ: renamed from bridge_slave_0 [ 143.531458][T14416] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2793'. [ 143.551707][T14326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.552914][T14326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.558094][T14326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.560463][T14326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.561679][T14326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.569301][T14326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.575947][T14420] loop0: detected capacity change from 0 to 764 [ 143.662874][T14326] hsr_slave_0: entered promiscuous mode [ 143.663759][T14326] hsr_slave_1: entered promiscuous mode [ 143.664011][T14326] debugfs: 'hsr0' already exists in 'hsr' [ 143.664022][T14326] Cannot create hsr debugfs directory [ 143.670722][T14428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2799'. [ 143.674525][T14422] syzkaller0: entered promiscuous mode [ 143.674677][T14422] syzkaller0: entered allmulticast mode [ 143.763835][T14431] syzkaller0: entered promiscuous mode [ 143.763874][T14431] syzkaller0: entered allmulticast mode [ 143.798978][T14437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.800866][T14437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.836496][T14444] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2803'. [ 143.862487][T14444] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2803'. [ 143.931663][T14453] tipc: Enabled bearer , priority 0 [ 143.933364][T14453] syzkaller0: entered promiscuous mode [ 143.934304][T14453] syzkaller0: entered allmulticast mode [ 143.947298][T14453] tipc: Resetting bearer [ 143.947576][ T6577] Bluetooth: hci2: command tx timeout [ 143.950468][T14452] tipc: Resetting bearer [ 143.955839][T14452] tipc: Disabling bearer [ 143.960505][T14457] syzkaller0: entered promiscuous mode [ 143.960542][T14457] syzkaller0: entered allmulticast mode [ 144.024544][T14462] loop1: detected capacity change from 0 to 512 [ 144.032413][T14462] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 144.045566][T14462] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 144.045724][T14462] EXT4-fs (loop1): 1 truncate cleaned up [ 144.046167][T14462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.048159][T14464] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2809'. [ 144.065494][T14326] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 144.072974][T14326] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 144.080921][T14326] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 144.096853][T14326] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 144.104507][ T6580] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.160613][T14478] syzkaller0: entered promiscuous mode [ 144.160652][T14478] syzkaller0: entered allmulticast mode [ 144.208247][T14326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.215682][T14326] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.218710][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.218760][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.227857][T14487] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2814'. [ 144.227898][T14487] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2814'. [ 144.232375][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.232423][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.257129][T14326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.261587][T14326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.294278][T14490] syzkaller0: entered promiscuous mode [ 144.294345][T14490] syzkaller0: entered allmulticast mode [ 144.311135][T14494] syzkaller0: entered promiscuous mode [ 144.311173][T14494] syzkaller0: entered allmulticast mode [ 144.359072][T14504] tipc: Enabled bearer , priority 0 [ 144.365475][T14504] syzkaller0: entered promiscuous mode [ 144.365506][T14504] syzkaller0: entered allmulticast mode [ 144.388378][T14326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.399439][T14504] tipc: Resetting bearer [ 144.428175][T14503] tipc: Resetting bearer [ 144.442193][T14503] tipc: Disabling bearer [ 144.451588][T14511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2819'. [ 144.456589][T14514] syzkaller0: entered promiscuous mode [ 144.457610][T14514] syzkaller0: entered allmulticast mode [ 144.589463][T14326] veth0_vlan: entered promiscuous mode [ 144.590982][T14326] veth1_vlan: entered promiscuous mode [ 144.603346][T14537] loop1: detected capacity change from 0 to 1024 [ 144.615792][T14531] syzkaller0: entered promiscuous mode [ 144.615832][T14531] syzkaller0: entered allmulticast mode [ 144.712235][T14537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.729935][ T6580] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.835000][T14553] loop0: detected capacity change from 0 to 512 [ 144.847919][T14553] EXT4-fs (loop0): Test dummy encryption mode enabled [ 144.847987][T14553] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 144.973878][T14326] veth0_macvtap: entered promiscuous mode [ 144.982566][T14553] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 144.982708][T14553] EXT4-fs (loop0): orphan cleanup on readonly fs [ 144.988602][T14553] EXT4-fs error (device loop0): xattr_find_entry:337: inode #15: comm syz.0.2828: corrupted xattr entries [ 144.991056][T14553] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 144.991275][T14553] EXT4-fs (loop0): 1 orphan inode deleted [ 144.994674][T14326] veth1_macvtap: entered promiscuous mode [ 144.996419][T14553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 144.999062][T14558] loop4: detected capacity change from 0 to 256 [ 144.999565][T14558] exfat: Deprecated parameter 'utf8' [ 145.016694][T14558] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 145.036422][T14558] fuse: Bad value for 'fd' [ 145.060358][T14556] syzkaller0: entered promiscuous mode [ 145.060405][T14556] syzkaller0: entered allmulticast mode [ 145.079687][T14326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.118559][T14565] loop2: detected capacity change from 0 to 1024 [ 145.130131][T14326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.133655][T14565] syz.2.2833: attempt to access beyond end of device [ 145.133655][T14565] loop2: rw=8390657, sector=5778, nr_sectors = 2 limit=1024 [ 145.133774][T14565] Buffer I/O error on dev loop2, logical block 2889, lost async page write [ 145.135155][T14565] syz.2.2833: attempt to access beyond end of device [ 145.135155][T14565] loop2: rw=8388608, sector=5778, nr_sectors = 2 limit=1024 [ 145.138287][T14565] syz.2.2833: attempt to access beyond end of device [ 145.138287][T14565] loop2: rw=8388608, sector=5778, nr_sectors = 2 limit=1024 [ 145.154252][ T1082] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.168045][ T1082] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.173107][ T1082] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.175528][ T1082] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.299311][ T1452] hfsplus: b-tree write err: -5, ino 8 [ 145.492068][ T6570] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.519233][T14574] syzkaller0: entered promiscuous mode [ 145.519276][T14574] syzkaller0: entered allmulticast mode [ 145.524039][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.524057][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.585739][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.585774][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.635383][T14582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.637153][T14582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.669542][T14586] tipc: Started in network mode [ 145.670522][T14586] tipc: Node identity 9af4467c6d2f, cluster identity 4711 [ 145.672139][T14586] tipc: Enabled bearer , priority 0 [ 145.683928][T14586] syzkaller0: entered promiscuous mode [ 145.685357][T14586] syzkaller0: entered allmulticast mode [ 145.691971][T14586] tipc: Resetting bearer [ 145.693644][T14585] syzkaller0: entered promiscuous mode [ 145.693683][T14585] syzkaller0: entered allmulticast mode [ 145.699507][T14584] tipc: Resetting bearer [ 145.705934][T14584] tipc: Disabling bearer [ 145.765796][T14592] syzkaller0: entered promiscuous mode [ 145.765822][T14592] syzkaller0: entered allmulticast mode [ 145.859554][T14597] syzkaller0: entered promiscuous mode [ 145.859591][T14597] syzkaller0: entered allmulticast mode [ 145.918710][T14605] loop0: detected capacity change from 0 to 256 [ 145.924117][T14605] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.967749][T14607] syzkaller0: entered promiscuous mode [ 145.967779][T14607] syzkaller0: entered allmulticast mode [ 146.019654][ T6577] Bluetooth: hci2: command tx timeout [ 146.039760][T14614] xt_hashlimit: size too large, truncated to 1048576 [ 146.049346][T14615] mmap: syz.4.2851 (14615) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 146.159685][T14623] syzkaller0: entered promiscuous mode [ 146.159723][T14623] syzkaller0: entered allmulticast mode [ 146.199545][T14626] loop0: detected capacity change from 0 to 128 [ 146.204247][T14626] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 146.260679][ T6573] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.266598][ T6573] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.269286][ T6573] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.271527][ T6573] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.273101][ T6573] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.359939][T14635] syzkaller0: entered promiscuous mode [ 146.359974][T14635] syzkaller0: entered allmulticast mode [ 146.495075][T14643] loop2: detected capacity change from 0 to 1024 [ 146.509193][T14643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.513419][T14627] chnl_net:caif_netlink_parms(): no params data found [ 146.604525][ T6578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.834705][T14658] hub 8-0:1.0: USB hub found [ 146.835314][T14658] hub 8-0:1.0: 8 ports detected [ 147.132185][T14663] xt_hashlimit: size too large, truncated to 1048576 [ 147.146626][ T1452] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.198475][T14627] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.199259][T14627] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.199344][T14627] bridge_slave_0: entered allmulticast mode [ 147.201340][T14627] bridge_slave_0: entered promiscuous mode [ 147.202520][T14627] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.203229][T14627] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.203297][T14627] bridge_slave_1: entered allmulticast mode [ 147.204275][T14627] bridge_slave_1: entered promiscuous mode [ 147.256663][ T1452] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.272686][T14627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.275092][T14627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.296828][T14627] team0: Port device team_slave_0 added [ 147.311352][T14627] team0: Port device team_slave_1 added [ 147.330200][ T1452] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.335463][T14627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.336625][T14627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.340490][T14627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.345755][T14627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.347000][T14627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 147.350936][T14627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.353067][T14676] tipc: Enabled bearer , priority 0 [ 147.360584][T14676] syzkaller0: entered promiscuous mode [ 147.360642][T14676] syzkaller0: entered allmulticast mode [ 147.373827][ T1452] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.394009][T14676] tipc: Resetting bearer [ 147.401208][T14627] hsr_slave_0: entered promiscuous mode [ 147.401589][T14627] hsr_slave_1: entered promiscuous mode [ 147.401811][T14627] debugfs: 'hsr0' already exists in 'hsr' [ 147.401821][T14627] Cannot create hsr debugfs directory [ 147.402398][T14674] tipc: Resetting bearer [ 147.409655][T14674] tipc: Disabling bearer [ 147.521941][T14688] loop0: detected capacity change from 0 to 512 [ 147.523559][T14688] ext4: Unknown parameter 'noacl' [ 147.530250][ T1452] batadv1: left allmulticast mode [ 147.530321][ T1452] batadv1: left promiscuous mode [ 147.530425][ T1452] bridge0: port 3(batadv1) entered disabled state [ 147.541879][ T1452] bridge_slave_1: left allmulticast mode [ 147.541908][ T1452] bridge_slave_1: left promiscuous mode [ 147.541979][ T1452] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.544201][ T1452] ¾x9ÿ: left allmulticast mode [ 147.544210][ T1452] ¾x9ÿ: left promiscuous mode [ 147.544262][ T1452] bridge0: port 1(1¾x9ÿ) entered disabled state [ 147.596065][T14696] xt_hashlimit: size too large, truncated to 1048576 [ 147.624690][T14692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 147.658206][T14692] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.2875: lblock 3 mapped to illegal pblock 3 (length 3) [ 147.665612][T14692] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 147.667838][T14692] EXT4-fs (loop4): This should not happen!! Data will be lost [ 147.667838][T14692] [ 147.689831][T14692] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.2875: lblock 3 mapped to illegal pblock 3 (length 3) [ 147.710651][T14692] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.2875: lblock 3 mapped to illegal pblock 3 (length 3) [ 147.717126][T14692] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.2875: lblock 3 mapped to illegal pblock 3 (length 3) [ 147.721992][T14692] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.2875: lblock 3 mapped to illegal pblock 3 (length 3) [ 147.724799][T14692] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.2875: lblock 3 mapped to illegal pblock 3 (length 3) [ 147.729281][T14692] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.2875: lblock 3 mapped to illegal pblock 3 (length 3) [ 147.732202][T14692] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.2875: lblock 3 mapped to illegal pblock 3 (length 3) [ 147.739642][T14692] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.2875: lblock 3 mapped to illegal pblock 3 (length 3) [ 147.739902][T14692] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.2875: lblock 3 mapped to illegal pblock 3 (length 3) [ 147.799718][ T377] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 147.799765][ T377] EXT4-fs (loop4): This should not happen!! Data will be lost [ 147.799765][ T377] [ 147.803155][ T6569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 147.891586][T14713] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.903791][ T6569] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.096467][ T6577] Bluetooth: hci2: command tx timeout [ 148.103409][ T1452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.115576][ T1452] bond_slave_0: left promiscuous mode [ 148.121685][ T1452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.145517][ T1452] bond_slave_1: left promiscuous mode [ 148.146249][ T1452] bond0 (unregistering): Released all slaves [ 148.148160][ T1452] bond1 (unregistering): Released all slaves [ 148.283047][ T1452] tipc: Left network mode [ 148.288183][T14733] syzkaller0: entered promiscuous mode [ 148.288208][T14733] syzkaller0: entered allmulticast mode [ 148.304057][T14729] tipc: Enabled bearer , priority 0 [ 148.321642][T14728] tipc: Resetting bearer [ 148.330697][T14728] tipc: Disabling bearer [ 148.335280][ T6577] Bluetooth: hci5: command tx timeout [ 148.652843][T14758] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.653040][T14758] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.720079][T14765] set_capacity_and_notify: 3 callbacks suppressed [ 148.721278][T14765] loop6: detected capacity change from 0 to 512 [ 148.724554][T14765] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 148.734202][T14765] EXT4-fs (loop6): 1 orphan inode deleted [ 148.735617][T14765] EXT4-fs (loop6): 1 truncate cleaned up [ 148.737540][T14765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.755858][T14326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.804399][T14770] __nla_validate_parse: 8 callbacks suppressed [ 148.804442][T14770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2896'. [ 148.808839][T14772] xt_hashlimit: size too large, truncated to 1048576 [ 148.838273][ T1452] hsr_slave_0: left promiscuous mode [ 148.840317][ T1452] hsr_slave_1: left promiscuous mode [ 148.845275][ T1452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.846455][ T1452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.852950][ T1452] veth1_macvtap: left promiscuous mode [ 148.853951][ T1452] veth0_macvtap: left promiscuous mode [ 148.854856][ T1452] veth1_vlan: left allmulticast mode [ 148.855828][ T1452] veth1_vlan: left promiscuous mode [ 148.856738][ T1452] veth0_vlan: left promiscuous mode [ 149.027124][ T1452] team0 (unregistering): Port device team_slave_1 removed [ 149.041940][ T1452] team0 (unregistering): Port device team_slave_0 removed [ 149.227711][T14775] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 149.235085][T14776] wlan0: renamed from syz_tun (while UP) [ 149.367358][T14627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 149.374044][T14627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 149.414926][T14807] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2907'. [ 149.423105][T14804] loop0: detected capacity change from 0 to 1024 [ 149.424065][T14627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 149.438415][T14627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 149.665710][T14828] loop6: detected capacity change from 0 to 512 [ 149.671507][T14828] EXT4-fs (loop6): Test dummy encryption mode enabled [ 149.671556][T14828] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 149.757119][T14831] hfsplus: failed to extend attributes file [ 149.787919][T14828] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 149.789121][T14828] EXT4-fs (loop6): orphan cleanup on readonly fs [ 149.799530][T14828] EXT4-fs error (device loop6): xattr_find_entry:337: inode #15: comm syz.6.2909: corrupted xattr entries [ 149.806235][T14828] EXT4-fs (loop6): 1 orphan inode deleted [ 149.813413][T14828] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 150.026759][T14834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.028633][T14834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.040871][T14834] loop2: detected capacity change from 0 to 16 [ 150.052067][T14834] erofs (device loop2): mounted with root inode @ nid 36. [ 150.087445][T14836] xt_hashlimit: size too large, truncated to 1048576 [ 150.102883][T14627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.110652][T14627] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.112295][ T240] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.112320][ T240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.120488][ T240] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.120530][ T240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.175311][ T6577] Bluetooth: hci2: command tx timeout [ 150.224271][T14846] tipc: Enabled bearer , priority 0 [ 150.232341][T14846] tipc: Resetting bearer [ 150.239740][T14844] tipc: Disabling bearer [ 150.280203][T14627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.301822][T14627] veth0_vlan: entered promiscuous mode [ 150.305714][T14627] veth1_vlan: entered promiscuous mode [ 150.312209][T14627] veth0_macvtap: entered promiscuous mode [ 150.314769][T14627] veth1_macvtap: entered promiscuous mode [ 150.331360][T14627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.332318][T14326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.341961][T14627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.371353][ T3388] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.372958][ T3388] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.372990][ T3388] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.373005][ T3388] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.425751][ T6577] Bluetooth: hci5: command tx timeout [ 150.490540][T14860] syzkaller0: entered promiscuous mode [ 150.490582][T14860] syzkaller0: entered allmulticast mode [ 150.492748][ T1452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.492874][ T1452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.506175][ T4711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.506207][ T4711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.605856][T14871] xt_hashlimit: size too large, truncated to 1048576 [ 150.680408][T14878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2923'. [ 150.690931][ T6573] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 150.693478][ T6573] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 150.695102][ T6573] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 150.700145][ T6573] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 150.701847][ T6573] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 150.734921][T14878] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2923'. [ 150.804564][T14892] loop6: detected capacity change from 0 to 1024 [ 150.818638][T14892] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 150.880570][T14894] loop2: detected capacity change from 0 to 8192 [ 150.903314][T14900] tipc: Enabled bearer , priority 0 [ 150.903676][T14900] syzkaller0: entered promiscuous mode [ 150.903687][T14900] syzkaller0: entered allmulticast mode [ 150.912480][T14894] loop2: p1 p2 p4 < > [ 150.912514][T14894] loop2: partition table partially beyond EOD, truncated [ 150.912628][T14894] loop2: p1 start 16777216 is beyond EOD, truncated [ 150.912637][T14894] loop2: p2 size 515840 extends beyond EOD, truncated [ 150.922467][T14894] loop2: p4 start 16777216 is beyond EOD, truncated [ 150.950600][ T6209] loop2: p1 p2 p4 < > [ 150.951411][ T6209] loop2: partition table partially beyond EOD, truncated [ 150.953074][ T6209] loop2: p1 start 16777216 is beyond EOD, truncated [ 150.954307][ T6209] loop2: p2 size 515840 extends beyond EOD, truncated [ 150.956722][ T6209] loop2: p4 start 16777216 is beyond EOD, truncated [ 151.001104][T14900] tipc: Resetting bearer [ 151.014947][T14898] tipc: Resetting bearer [ 151.033309][T14898] tipc: Disabling bearer [ 151.050650][T13769] udevd[13769]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 151.062939][T13760] udevd[13760]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 151.099952][T14919] syzkaller0: entered promiscuous mode [ 151.101023][T14919] syzkaller0: entered allmulticast mode [ 151.175002][T14927] xt_hashlimit: size too large, truncated to 1048576 [ 152.497055][ T6573] Bluetooth: hci5: command tx timeout [ 152.628761][T14879] chnl_net:caif_netlink_parms(): no params data found [ 152.690632][T14972] binder: 14959:14972 ioctl c0306201 0 returned -14 [ 152.692843][T14972] loop6: detected capacity change from 0 to 128 [ 152.735451][ T6573] Bluetooth: hci4: command tx timeout [ 152.749439][T14879] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.751992][T14972] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 152.758849][T14972] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.761158][T14879] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.762523][T14879] bridge_slave_0: entered allmulticast mode [ 152.765435][T14879] bridge_slave_0: entered promiscuous mode [ 152.784254][T14879] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.785669][T14879] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.785813][T14879] bridge_slave_1: entered allmulticast mode [ 152.786311][T14879] bridge_slave_1: entered promiscuous mode [ 152.801883][T14879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.802818][T14879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.808151][T14980] loop0: detected capacity change from 0 to 128 [ 152.810439][T14980] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 152.813748][T14980] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 153.588682][T14879] team0: Port device team_slave_0 added [ 153.589442][T14879] team0: Port device team_slave_1 added [ 153.663015][T14879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.663041][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.663359][T14879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.669829][T14879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.669861][T14879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.670265][T14879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.706148][T14984] syzkaller0: entered promiscuous mode [ 153.707167][T14984] syzkaller0: entered allmulticast mode [ 153.709102][T14986] tipc: Enabling of bearer rejected, failed to enable media [ 153.712847][T14986] syzkaller0: entered promiscuous mode [ 153.712898][T14986] syzkaller0: entered allmulticast mode [ 153.770427][T14989] xt_hashlimit: size too large, truncated to 1048576 [ 153.858216][T14999] loop6: detected capacity change from 0 to 128 [ 153.859862][T14999] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.864831][T14999] EXT4-fs (loop6): Test dummy encryption mode enabled [ 153.889433][T14999] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 153.926089][T14326] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 154.414483][ T6048] bridge_slave_1: left allmulticast mode [ 154.414511][ T6048] bridge_slave_1: left promiscuous mode [ 154.415058][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.417536][ T6048] ¾x9ÿ: left allmulticast mode [ 154.417553][ T6048] ¾x9ÿ: left promiscuous mode [ 154.417616][ T6048] bridge0: port 1(1¾x9ÿ) entered disabled state [ 154.585661][ T6573] Bluetooth: hci5: command tx timeout [ 154.632956][ T6048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.656205][ T6048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.666335][ T6048] bond0 (unregistering): Released all slaves [ 154.670636][T14879] hsr_slave_0: entered promiscuous mode [ 154.671238][T14879] hsr_slave_1: entered promiscuous mode [ 154.682426][T15009] tipc: Enabled bearer , priority 0 [ 154.682597][T15010] syzkaller0: entered promiscuous mode [ 154.682610][T15010] syzkaller0: entered allmulticast mode [ 154.684272][T15017] tipc: Resetting bearer [ 154.703876][T15006] tipc: Resetting bearer [ 154.724771][T15006] tipc: Disabling bearer [ 154.761761][T15023] tipc: Enabling of bearer rejected, failed to enable media [ 154.761945][ T6048] tipc: Left network mode [ 154.815745][ T6573] Bluetooth: hci4: command tx timeout [ 155.849148][T15058] syzkaller0: entered promiscuous mode [ 155.849188][T15058] syzkaller0: entered allmulticast mode [ 155.869174][T15043] binder: 15036:15043 ioctl c0306201 0 returned -14 [ 155.872768][T15043] loop1: detected capacity change from 0 to 512 [ 155.877431][T15043] EXT4-fs: Ignoring removed nobh option [ 155.878370][T15067] xt_hashlimit: size too large, truncated to 1048576 [ 155.909676][ T6048] hsr_slave_0: left promiscuous mode [ 155.911134][ T6048] hsr_slave_1: left promiscuous mode [ 155.912679][T15043] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 155.912720][T15043] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0002] [ 155.912754][T15043] System zones: 0-2, 18-18, 34-34 [ 155.912907][T15043] EXT4-fs (loop1): orphan cleanup on readonly fs [ 155.914231][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.923200][ T6048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.943842][T15043] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 155.962033][T15043] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2960: corrupted inode contents [ 155.963033][T15043] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.2960: mark_inode_dirty error [ 155.963194][T15043] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2960: corrupted inode contents [ 155.963305][T15043] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.2960: mark_inode_dirty error [ 155.963427][T15043] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2960: corrupted inode contents [ 155.963548][T15043] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 155.963664][T15043] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.2960: corrupted inode contents [ 155.963766][T15043] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.2960: mark_inode_dirty error [ 155.963962][T15043] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 155.964438][T15043] EXT4-fs (loop1): 1 truncate cleaned up [ 155.966250][ T240] __quota_error: 41 callbacks suppressed [ 155.966259][ T240] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 155.966279][ T240] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 1 [ 155.970118][T15043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 156.006481][T14627] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.147150][ T6048] team0 (unregistering): Port device team_slave_1 removed [ 156.161642][ T6048] team0 (unregistering): Port device team_slave_0 removed [ 156.340159][T15075] syzkaller0: entered promiscuous mode [ 156.340198][T15075] syzkaller0: entered allmulticast mode [ 156.446805][T15088] loop2: detected capacity change from 0 to 2048 [ 156.476700][T15088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 156.499749][T15088] EXT4-fs (loop2): shut down requested (1) [ 156.519428][ T6578] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 156.896088][ T6572] Bluetooth: hci4: command tx timeout [ 157.094087][T15091] tipc: Enabling of bearer rejected, failed to enable media [ 157.095887][T15099] syzkaller0: entered promiscuous mode [ 157.095902][T15099] syzkaller0: entered allmulticast mode [ 157.198704][T15132] tipc: Enabled bearer , priority 0 [ 157.199028][T15132] syzkaller0: entered promiscuous mode [ 157.199038][T15132] syzkaller0: entered allmulticast mode [ 157.251697][T15132] tipc: Resetting bearer [ 157.254320][T15130] tipc: Resetting bearer [ 158.218110][T15130] tipc: Disabling bearer [ 158.446399][T15156] xt_hashlimit: size too large, truncated to 1048576 [ 158.463625][T15157] loop2: detected capacity change from 0 to 256 [ 158.465592][T15157] vfat: Bad value for 'dmask' [ 158.540427][ T6048] IPVS: stop unused estimator thread 0... [ 158.543764][T14879] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.554967][T14879] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.626632][T15154] syzkaller0: entered promiscuous mode [ 158.626736][T15154] syzkaller0: entered allmulticast mode [ 158.805427][ T6572] Bluetooth: hci3: command 0x0406 tx timeout [ 158.806602][ T6572] Bluetooth: hci1: command 0x0406 tx timeout [ 158.826005][T14879] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.830705][T14879] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.941027][T14879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.975451][ T6573] Bluetooth: hci4: command tx timeout [ 158.997064][T14879] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.005304][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.005347][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.011801][ T3388] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.011845][ T3388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.030231][T15184] syzkaller0: entered promiscuous mode [ 159.031469][T15184] syzkaller0: entered allmulticast mode [ 159.041572][T15190] tipc: Started in network mode [ 159.041620][T15190] tipc: Node identity 1eae087f8119, cluster identity 4711 [ 159.042089][T15190] tipc: Enabled bearer , priority 0 [ 160.753617][T15219] xt_hashlimit: size too large, truncated to 1048576 [ 160.936086][T15190] syzkaller0: entered promiscuous mode [ 160.936120][T15190] syzkaller0: entered allmulticast mode [ 160.944240][T15210] tipc: Resetting bearer [ 160.944496][ T10] tipc: Node number set to 2679572607 [ 160.946054][T15188] tipc: Resetting bearer [ 160.952117][T15188] tipc: Disabling bearer [ 160.980043][T14879] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.992376][T14879] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.025839][T15226] syzkaller0: entered promiscuous mode [ 161.025872][T15226] syzkaller0: entered allmulticast mode [ 161.047926][T14879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.189288][T15252] loop2: detected capacity change from 0 to 2048 [ 161.190171][T15252] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 161.191282][T15252] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.373443][T15265] loop6: detected capacity change from 0 to 256 [ 161.375373][T15265] exfat: Invalid uid '0x00000000ffffffff' [ 161.392071][T14879] veth0_vlan: entered promiscuous mode [ 161.394077][T14879] veth1_vlan: entered promiscuous mode [ 161.415132][T14879] veth0_macvtap: entered promiscuous mode [ 161.416693][T14879] veth1_macvtap: entered promiscuous mode [ 161.419687][T14879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.420652][T14879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.431296][ T144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.433181][ T144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.434914][ T144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.439541][ T144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.750804][T15275] loop6: detected capacity change from 0 to 512 [ 161.764965][T15275] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2999: invalid indirect mapped block 256 (level 2) [ 161.768885][T15275] EXT4-fs (loop6): 2 truncates cleaned up [ 161.770498][T15275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.850411][ T240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.850441][ T240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.891179][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.892746][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.274942][T15291] xt_hashlimit: size too large, truncated to 1048576 [ 162.282828][T15290] tipc: Enabled bearer , priority 0 [ 162.336969][T15290] syzkaller0: entered promiscuous mode [ 162.337000][T15290] syzkaller0: entered allmulticast mode [ 162.357878][T15290] tipc: Resetting bearer [ 162.359144][T15289] tipc: Resetting bearer [ 162.370764][T15289] tipc: Disabling bearer [ 162.456987][T15307] xt_bpf: check failed: parse error [ 162.462661][T15307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.463429][T15307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.699628][T14326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.756540][T15312] tipc: Enabling of bearer rejected, failed to enable media [ 162.759774][T15312] syzkaller0: entered promiscuous mode [ 162.763619][T15312] syzkaller0: entered allmulticast mode [ 162.874172][T15316] syzkaller0: entered promiscuous mode [ 162.876746][T15316] syzkaller0: entered allmulticast mode [ 162.885113][T15326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.886881][T15326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.902331][ T6577] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.905740][ T6577] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.911967][ T6577] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.923731][ T6577] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.923975][ T6577] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.659186][T15342] hub 8-0:1.0: USB hub found [ 163.660011][T15342] hub 8-0:1.0: 8 ports detected [ 163.723379][ T3388] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.723433][ T3388] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.806003][ T3388] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.806045][ T3388] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.829310][T15327] chnl_net:caif_netlink_parms(): no params data found [ 163.907011][ T3388] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.907048][ T3388] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.923743][T15367] syzkaller0: entered promiscuous mode [ 163.924832][T15367] syzkaller0: entered allmulticast mode [ 163.928708][T15327] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.928801][T15327] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.928899][T15327] bridge_slave_0: entered allmulticast mode [ 163.929401][T15327] bridge_slave_0: entered promiscuous mode [ 163.930274][T15327] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.930319][T15327] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.930370][T15327] bridge_slave_1: entered allmulticast mode [ 163.931772][T15327] bridge_slave_1: entered promiscuous mode [ 164.096833][ T6679] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 164.247348][ T6679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.249322][ T6679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.249338][ T6679] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 164.249363][ T6679] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 164.249375][ T6679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.258007][ T6679] usb 1-1: config 0 descriptor?? [ 164.504412][T15372] tipc: Enabled bearer , priority 0 [ 164.504828][T15373] syzkaller0: entered promiscuous mode [ 164.504837][T15373] syzkaller0: entered allmulticast mode [ 164.506887][T15381] tipc: Resetting bearer [ 164.510283][T15369] tipc: Resetting bearer [ 164.515754][T15369] tipc: Disabling bearer [ 164.526922][ T3388] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.526960][ T3388] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.531788][T15327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.532984][T15327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.541765][T15327] team0: Port device team_slave_0 added [ 164.543571][T15327] team0: Port device team_slave_1 added [ 164.584756][T15327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.584787][T15327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.584804][T15327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.596905][T15327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.596942][T15327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.596960][T15327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.620002][T15327] hsr_slave_0: entered promiscuous mode [ 164.620378][T15327] hsr_slave_1: entered promiscuous mode [ 164.620595][T15327] debugfs: 'hsr0' already exists in 'hsr' [ 164.620606][T15327] Cannot create hsr debugfs directory [ 164.668845][ T6679] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x7 [ 164.682258][ T6679] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 164.708358][ T3388] bridge_slave_1: left allmulticast mode [ 164.708397][ T3388] bridge_slave_1: left promiscuous mode [ 164.708491][ T3388] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.727165][ T3388] ¾x9ÿ: left allmulticast mode [ 164.727197][ T3388] ¾x9ÿ: left promiscuous mode [ 164.728471][ T3388] bridge0: port 1(1¾x9ÿ) entered disabled state [ 164.874492][ T6679] usb 1-1: USB disconnect, device number 5 [ 164.975397][ T6577] Bluetooth: hci0: command tx timeout [ 165.063841][ T3388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.096592][ T3388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.138229][ T3388] bond0 (unregistering): Released all slaves [ 165.179071][ T3388] bond1 (unregistering): Released all slaves [ 165.192949][T15399] tipc: Enabling of bearer rejected, failed to enable media [ 165.193217][T15402] syzkaller0: entered promiscuous mode [ 165.193232][T15402] syzkaller0: entered allmulticast mode [ 165.201568][T15407] syzkaller0: entered promiscuous mode [ 165.201601][T15407] syzkaller0: entered allmulticast mode [ 165.364897][T15425] binder: 15424:15425 BC_ACQUIRE_DONE node 63 has no pending acquire request [ 165.854735][ T3388] tipc: Left network mode [ 165.891679][T15445] syzkaller0: entered promiscuous mode [ 165.891720][T15445] syzkaller0: entered allmulticast mode [ 165.907055][T15460] loop1: detected capacity change from 0 to 1024 [ 165.922892][T15453] syzkaller0: entered promiscuous mode [ 165.922934][T15453] syzkaller0: entered allmulticast mode [ 165.927841][T15460] hfsplus: failed to extend attributes file [ 166.698382][T15497] loop6: detected capacity change from 0 to 128 [ 166.703734][T15497] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 166.711012][T15497] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.772514][T15499] loop6: detected capacity change from 0 to 512 [ 166.773943][T15499] EXT4-fs: Ignoring removed i_version option [ 166.773954][T15499] EXT4-fs: Ignoring removed oldalloc option [ 166.802829][T15499] EXT4-fs (loop6): 1 truncate cleaned up [ 166.803417][T15499] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.810818][T15499] EXT4-fs error (device loop6): ext4_lookup:1785: inode #13: comm syz.6.3036: iget: bad extra_isize 1 (inode size 256) [ 166.830733][T14326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.868447][T15503] loop6: detected capacity change from 0 to 2048 [ 166.908591][T15503] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.931217][T14326] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.065237][ T6577] Bluetooth: hci0: command 0x041b tx timeout [ 167.592522][T15512] syzkaller0: entered promiscuous mode [ 167.592575][T15512] syzkaller0: entered allmulticast mode [ 167.600164][T15523] loop0: detected capacity change from 0 to 1024 [ 167.629297][T15523] hfsplus: failed to extend attributes file [ 168.270712][T15553] loop0: detected capacity change from 0 to 512 [ 168.302784][T15553] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.3045: bad orphan inode 11862016 [ 168.320368][T15553] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 168.336904][ T3388] hsr_slave_0: left promiscuous mode [ 168.338595][ T3388] hsr_slave_1: left promiscuous mode [ 168.339893][ T3388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.341132][ T3388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.342691][ T3388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.344026][ T3388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.362990][ T6570] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 168.375349][T15565] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3047'. [ 168.376335][T15561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3048'. [ 168.398109][ T3388] veth1_vlan: left allmulticast mode [ 168.399080][ T3388] veth1_vlan: left promiscuous mode [ 168.400072][ T3388] veth0_vlan: left promiscuous mode [ 168.426227][T15574] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3047'. [ 168.898994][ T3388] team0 (unregistering): Port device team_slave_1 removed [ 168.912616][ T3388] team0 (unregistering): Port device team_slave_0 removed [ 169.080006][T15585] syzkaller0: entered promiscuous mode [ 169.082345][T15585] syzkaller0: entered allmulticast mode [ 169.120506][T15599] loop1: detected capacity change from 0 to 1024 [ 169.126627][T15599] hfsplus: failed to extend attributes file [ 169.135305][ T6573] Bluetooth: hci0: command 0x041b tx timeout [ 169.349460][T15616] syzkaller0: entered promiscuous mode [ 169.349499][T15616] syzkaller0: entered allmulticast mode [ 169.350365][T15619] loop0: detected capacity change from 0 to 1024 [ 169.410795][ T6048] hfsplus: b-tree write err: -5, ino 4 [ 169.510300][T15327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 169.549164][T15327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 169.558748][T15327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 169.566880][T15652] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3060'. [ 169.582530][T15327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 169.611612][T15657] loop6: detected capacity change from 0 to 1024 [ 169.623344][T15657] hfsplus: failed to extend attributes file [ 169.684781][T15327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.800134][T15677] netlink: 'syz.4.3067': attribute type 1 has an invalid length. [ 169.803349][T15327] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.809260][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.809302][ T4711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.813532][T15677] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3067'. [ 169.828093][T15677] hsr_slave_0 (unregistering): left promiscuous mode [ 169.845731][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.846271][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.988308][T15691] loop4: detected capacity change from 0 to 512 [ 169.988755][T15691] ext4: Unknown parameter 'seclabel' [ 169.991233][T15691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.991440][T15691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.059153][T15702] tipc: Enabling of bearer rejected, failed to enable media [ 170.070275][T15327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.087447][T15327] veth0_vlan: entered promiscuous mode [ 170.093157][T15327] veth1_vlan: entered promiscuous mode [ 170.104913][T15327] veth0_macvtap: entered promiscuous mode [ 170.107416][T15327] veth1_macvtap: entered promiscuous mode [ 170.111889][T15327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.115069][T15327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.118696][ T144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.118743][ T144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.118765][ T144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.118781][ T144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.173196][ T1452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.173231][ T1452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.239014][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.239050][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.260304][T15720] loop0: detected capacity change from 0 to 1024 [ 170.276823][T15720] hfsplus: failed to extend attributes file [ 170.324493][T15725] EXT4-fs (loop2): Test dummy encryption mode enabled [ 170.332375][T15725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.376010][T15327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.428106][T15736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3077'. [ 170.444197][T15738] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3078'. [ 170.470729][T15740] netlink: 'syz.1.3079': attribute type 1 has an invalid length. [ 170.508378][T15740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3079'. [ 170.513292][T15740] bond1 (unregistering): Released all slaves [ 170.625199][T15750] hub 8-0:1.0: USB hub found [ 170.625602][T15750] hub 8-0:1.0: 8 ports detected [ 170.653389][ T6175] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 170.818235][ T6175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.820637][ T6175] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.822658][ T6175] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.822710][ T6175] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.822725][ T6175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.826162][ T6175] usb 1-1: config 0 descriptor?? [ 170.884710][T15757] xt_hashlimit: size too large, truncated to 1048576 [ 170.931687][T15757] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 171.020794][T15779] tipc: Enabling of bearer rejected, failed to enable media [ 171.087579][T15784] hfsplus: failed to extend attributes file [ 171.209185][T15800] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3090'. [ 171.215405][ T6573] Bluetooth: hci0: command 0x041b tx timeout [ 171.249094][ T6175] plantronics 0003:047F:FFFF.0004: unbalanced delimiter at end of report description [ 171.251075][ T6175] plantronics 0003:047F:FFFF.0004: parse failed [ 171.251103][ T6175] plantronics 0003:047F:FFFF.0004: probe with driver plantronics failed with error -22 [ 171.278082][T15811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3093'. [ 171.337744][T15815] xt_hashlimit: size too large, truncated to 1048576 [ 171.343366][T15814] syzkaller0: entered promiscuous mode [ 171.343413][T15814] syzkaller0: entered allmulticast mode [ 171.366530][T15819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.368317][T15819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.390603][T15815] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 171.449894][ T10] usb 1-1: USB disconnect, device number 6 [ 171.462654][T15826] hfsplus: failed to extend attributes file [ 171.521205][T15834] tipc: Enabling of bearer rejected, failed to enable media [ 171.629462][T15847] EXT4-fs: Ignoring removed mblk_io_submit option [ 171.633347][T15847] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 171.635312][T15847] EXT4-fs (loop4): group descriptors corrupted! [ 171.701084][T15852] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 171.703661][T15852] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.826806][T15858] set_capacity_and_notify: 5 callbacks suppressed [ 171.826858][T15858] loop4: detected capacity change from 0 to 1024 [ 171.993815][T15858] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 171.993865][T15858] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 171.993890][T15858] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3103: Failed to acquire dquot type 0 [ 172.000696][T15858] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 172.000791][T15858] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.3103: corrupted inode contents [ 172.003157][T15858] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #13: comm syz.4.3103: mark_inode_dirty error [ 172.005332][T15858] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.3103: corrupted inode contents [ 172.005505][T15858] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.3103: mark_inode_dirty error [ 172.011224][T15858] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.3103: corrupted inode contents [ 172.013314][T15858] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 172.014845][T15858] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #13: comm syz.4.3103: corrupted inode contents [ 172.022656][T15858] EXT4-fs error (device loop4): ext4_truncate:4635: inode #13: comm syz.4.3103: mark_inode_dirty error [ 172.027192][T15858] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 172.029235][T15858] EXT4-fs (loop4): 1 truncate cleaned up [ 172.029898][T15858] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.127619][T15874] syzkaller0: entered promiscuous mode [ 172.127649][T15874] syzkaller0: entered allmulticast mode [ 172.179253][T15877] xt_hashlimit: size too large, truncated to 1048576 [ 172.243278][T15882] loop6: detected capacity change from 0 to 1024 [ 172.260914][T15882] hfsplus: failed to extend attributes file [ 172.281128][T15889] tipc: Enabling of bearer rejected, failed to enable media [ 172.488144][T15912] loop6: detected capacity change from 0 to 1764 [ 172.488942][T14879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.496793][T15912] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 172.613911][T15919] 9p: Bad value for 'wfdno' [ 172.788401][T15914] loop1: detected capacity change from 0 to 2048 [ 172.840962][T15914] netlink: 'syz.1.3119': attribute type 4 has an invalid length. [ 172.854815][T15925] syzkaller0: entered promiscuous mode [ 172.857449][T15925] syzkaller0: entered allmulticast mode [ 172.907407][T15931] xt_hashlimit: size too large, truncated to 1048576 [ 173.005258][T15939] netlink: 'syz.0.3125': attribute type 32 has an invalid length. [ 173.034994][T15944] tipc: Enabling of bearer rejected, failed to enable media [ 173.123550][T15958] loop6: detected capacity change from 0 to 2048 [ 173.125724][T15958] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 173.126656][T15958] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.224813][ T6633] hid-generic 0005:0C45:5508.0005: item fetching failed at offset 3/5 [ 173.226796][ T6633] hid-generic 0005:0C45:5508.0005: probe with driver hid-generic failed with error -22 [ 173.281342][T15972] syzkaller0: entered promiscuous mode [ 173.281384][T15972] syzkaller0: entered allmulticast mode [ 173.295607][ T6573] Bluetooth: hci0: command 0x041b tx timeout [ 173.305394][T15974] xt_hashlimit: size too large, truncated to 1048576 [ 173.413042][T15989] loop4: detected capacity change from 0 to 2048 [ 173.422399][T15990] loop2: detected capacity change from 0 to 512 [ 173.439637][T15989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.450191][T15990] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 173.451790][T15990] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 173.453397][T15990] System zones: 0-1, 15-15, 18-18, 34-34 [ 173.454971][T15990] EXT4-fs (loop2): orphan cleanup on readonly fs [ 173.455012][T15990] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0 [ 173.455055][T15990] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 173.455069][T15990] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 173.463515][T15990] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3140: bg 0: block 40: padding at end of block bitmap is not set [ 173.470014][T15990] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 173.472523][T15990] EXT4-fs (loop2): 1 truncate cleaned up [ 173.474382][T15990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 173.478315][T14879] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.502994][T15327] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.613512][T16008] syzkaller0: entered promiscuous mode [ 173.613556][T16008] syzkaller0: entered allmulticast mode [ 173.631821][T16018] __nla_validate_parse: 8 callbacks suppressed [ 173.633369][T16018] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3148'. [ 173.683654][T16020] syzkaller0: entered promiscuous mode [ 173.683694][T16020] syzkaller0: entered allmulticast mode [ 173.946884][T16052] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3160'. [ 173.974879][T16054] syzkaller0: entered promiscuous mode [ 173.974917][T16054] syzkaller0: entered allmulticast mode [ 173.984952][T16058] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3164'. [ 174.196178][T16081] xt_hashlimit: size too large, truncated to 1048576 [ 174.278808][T16092] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3174'. [ 174.353338][T16101] syzkaller0: entered promiscuous mode [ 174.353373][T16101] syzkaller0: entered allmulticast mode [ 174.471385][T16121] xt_hashlimit: size too large, truncated to 1048576 [ 174.488704][T16125] netlink: 'syz.2.3187': attribute type 75 has an invalid length. [ 175.368698][T16167] âaÿ: renamed from bond_slave_0 (while UP) [ 175.432581][T16173] netlink: 'syz.0.3197': attribute type 17 has an invalid length. [ 175.521944][T16180] netlink: 'syz.6.3200': attribute type 2 has an invalid length. [ 175.523391][T16180] netlink: 164 bytes leftover after parsing attributes in process `syz.6.3200'. [ 175.986656][T16181] syzkaller0: entered promiscuous mode [ 175.986687][T16181] syzkaller0: entered allmulticast mode [ 176.033714][T16194] syzkaller0: entered promiscuous mode [ 176.033748][T16194] syzkaller0: entered allmulticast mode [ 176.046213][T16199] xt_hashlimit: size too large, truncated to 1048576 [ 177.039388][T16250] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3220'. [ 177.039426][T16250] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 177.045049][T16244] syzkaller0: entered promiscuous mode [ 177.045097][T16244] syzkaller0: entered allmulticast mode [ 177.054561][T16254] xt_hashlimit: size too large, truncated to 1048576 [ 177.125719][T16253] syzkaller0: entered promiscuous mode [ 177.125755][T16253] syzkaller0: entered allmulticast mode [ 177.382548][T16285] netlink: 'syz.6.3234': attribute type 1 has an invalid length. [ 177.390379][T16289] xt_hashlimit: size too large, truncated to 1048576 [ 177.435402][T16294] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3234'. [ 178.261474][T16303] loop0: detected capacity change from 0 to 256 [ 178.274492][T16303] vfat: Bad value for 'dmask' [ 178.989365][T16285] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 179.190016][T16338] syzkaller0: entered promiscuous mode [ 179.190052][T16338] syzkaller0: entered allmulticast mode [ 179.227900][T16343] netlink: 'syz.2.3253': attribute type 1 has an invalid length. [ 179.288508][T16343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3253'. [ 179.302603][T16348] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3255'. [ 179.302631][T16348] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3255'. [ 179.307308][T16343] bond1 (unregistering): Released all slaves [ 180.580884][T16384] syzkaller0: entered promiscuous mode [ 180.582124][T16384] syzkaller0: entered allmulticast mode [ 180.644856][T16404] netlink: 'syz.2.3268': attribute type 1 has an invalid length. [ 181.107983][T16404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3268'. [ 181.121349][T16404] bond1 (unregistering): Released all slaves [ 181.142715][T16408] loop6: detected capacity change from 0 to 32768 [ 181.176978][T13760] loop6: p1 p3 < p5 p6 > [ 181.187108][T16408] loop6: p1 p3 < p5 p6 > [ 181.287525][T16417] syzkaller0: entered promiscuous mode [ 181.287573][T16417] syzkaller0: entered allmulticast mode [ 181.387308][T16430] syzkaller0: entered promiscuous mode [ 181.387345][T16430] syzkaller0: entered allmulticast mode [ 181.496635][T16447] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3285'. [ 181.496945][T16447] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3285'. [ 181.498309][T16447] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3285'. [ 181.537356][ T8128] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 181.609968][T16449] tipc: Started in network mode [ 181.610011][T16449] tipc: Node identity d277a3dc433d, cluster identity 4711 [ 181.610063][T16449] tipc: Enabled bearer , priority 0 [ 181.614031][T16448] tipc: Disabling bearer [ 181.653987][T16458] syzkaller0: entered promiscuous mode [ 181.655028][T16458] syzkaller0: entered allmulticast mode [ 181.682526][T12965] udevd[12965]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 181.683116][T13760] udevd[13760]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 181.685409][ T8128] usb 1-1: Using ep0 maxpacket: 32 [ 181.687142][ T8128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.687176][ T8128] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.687191][ T8128] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 181.687199][ T8128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.688385][ T8128] usb 1-1: config 0 descriptor?? [ 181.689505][ T8128] hub 1-1:0.0: USB hub found [ 181.709073][T13769] udevd[13769]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 181.715727][T13771] udevd[13771]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 181.730823][T16462] netlink: 'syz.6.3291': attribute type 5 has an invalid length. [ 181.740751][T13771] udevd[13771]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 181.742794][T13760] udevd[13760]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 181.744004][T12965] udevd[12965]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 181.751442][T13722] udevd[13722]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 181.778284][T16468] netlink: 340 bytes leftover after parsing attributes in process `syz.2.3294'. [ 181.779909][T16468] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3294'. [ 181.781651][T16468] netlink: 'syz.2.3294': attribute type 2 has an invalid length. [ 181.903133][ T8128] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 182.318371][ T8128] hid-generic 0003:046D:C31C.0006: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 182.475057][T16488] syzkaller0: entered promiscuous mode [ 182.475085][T16488] syzkaller0: entered allmulticast mode [ 182.540611][T16508] netlink: 'syz.4.3303': attribute type 7 has an invalid length. [ 182.540650][T16508] netlink: 'syz.4.3303': attribute type 8 has an invalid length. [ 182.540874][T16508] netlink: 'syz.4.3303': attribute type 8 has an invalid length. [ 182.540892][T16508] netlink: 'syz.4.3303': attribute type 4 has an invalid length. [ 182.540900][T16508] netlink: 'syz.4.3303': attribute type 7 has an invalid length. [ 182.540906][T16508] netlink: 207236 bytes leftover after parsing attributes in process `syz.4.3303'. [ 182.702972][ T6678] usb 1-1: USB disconnect, device number 7 [ 183.239738][T16529] syzkaller0: entered promiscuous mode [ 183.239784][T16529] syzkaller0: entered allmulticast mode [ 183.439178][T16550] loop1: detected capacity change from 0 to 2048 [ 183.452702][T16550] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 183.458770][T16550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.136826][T16553] tipc: Enabling of bearer rejected, failed to enable media [ 184.137372][T16556] syzkaller0: entered promiscuous mode [ 184.137390][T16556] syzkaller0: entered allmulticast mode [ 184.719970][T16583] syzkaller0: entered promiscuous mode [ 184.720010][T16583] syzkaller0: entered allmulticast mode [ 185.189216][T16624] loop4: detected capacity change from 0 to 2048 [ 185.210362][T16624] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 185.218043][T16624] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.737559][T16594] syzkaller0: entered promiscuous mode [ 185.737589][T16594] syzkaller0: entered allmulticast mode [ 185.759591][T16627] syzkaller0: entered promiscuous mode [ 185.759628][T16627] syzkaller0: entered allmulticast mode [ 186.448135][T16663] syzkaller0: entered promiscuous mode [ 186.448166][T16663] syzkaller0: entered allmulticast mode [ 186.496145][T16670] xt_hashlimit: size too large, truncated to 1048576 [ 186.957371][ T6577] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 186.961545][ T6577] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 186.963053][ T6577] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 186.964738][ T6577] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 186.969327][ T6577] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 187.158662][T16680] syzkaller0: entered promiscuous mode [ 187.158696][T16680] syzkaller0: entered allmulticast mode [ 187.364202][T16711] syzkaller0: entered promiscuous mode [ 187.366187][T16711] syzkaller0: entered allmulticast mode [ 187.368380][T16693] chnl_net:caif_netlink_parms(): no params data found [ 187.370509][T16715] tipc: Enabling of bearer rejected, failed to enable media [ 187.375747][ T2467] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.376823][ T2467] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.381116][T16717] xt_hashlimit: size too large, truncated to 1048576 [ 187.465713][T16715] syzkaller0: entered promiscuous mode [ 187.466911][T16715] syzkaller0: entered allmulticast mode [ 188.020464][T16729] syzkaller0: entered promiscuous mode [ 188.021476][T16729] syzkaller0: entered allmulticast mode [ 188.038638][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.092526][T16744] netlink: 'syz.2.3359': attribute type 1 has an invalid length. [ 188.156870][T16751] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3362'. [ 188.196995][T16753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3359'. [ 188.705696][T16752] syzkaller0: entered promiscuous mode [ 188.705730][T16752] syzkaller0: entered allmulticast mode [ 188.708923][T16753] bond1 (unregistering): Released all slaves [ 188.724360][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.793828][T16768] xt_hashlimit: size too large, truncated to 1048576 [ 188.837826][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.859043][T16693] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.859090][T16693] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.859540][T16693] bridge_slave_0: entered allmulticast mode [ 188.860235][T16693] bridge_slave_0: entered promiscuous mode [ 188.868365][T16693] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.868423][T16693] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.868513][T16693] bridge_slave_1: entered allmulticast mode [ 188.868962][T16693] bridge_slave_1: entered promiscuous mode [ 188.884567][T16770] syzkaller0: entered promiscuous mode [ 188.884614][T16770] syzkaller0: entered allmulticast mode [ 188.906254][T16693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.910599][T16693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.929900][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.056605][ T6577] Bluetooth: hci3: command tx timeout [ 189.569890][T16693] team0: Port device team_slave_0 added [ 189.604248][T16693] team0: Port device team_slave_1 added [ 189.648596][T16693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.648627][T16693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.648953][T16693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.649944][T16693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.649953][T16693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.649971][T16693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.661370][T16693] hsr_slave_0: entered promiscuous mode [ 189.661710][T16693] hsr_slave_1: entered promiscuous mode [ 189.661928][T16693] debugfs: 'hsr0' already exists in 'hsr' [ 189.661939][T16693] Cannot create hsr debugfs directory [ 189.704254][T16785] syzkaller0: entered promiscuous mode [ 189.707646][T16785] syzkaller0: entered allmulticast mode [ 189.741417][T16793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3373'. [ 189.788988][T16791] syzkaller0: entered promiscuous mode [ 189.789021][T16791] syzkaller0: entered allmulticast mode [ 189.850413][T16802] netlink: 'syz.6.3376': attribute type 1 has an invalid length. [ 189.861944][ T13] bridge_slave_1: left allmulticast mode [ 189.861980][ T13] bridge_slave_1: left promiscuous mode [ 189.862405][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.873308][ T13] ¾x9ÿ: left allmulticast mode [ 189.873342][ T13] ¾x9ÿ: left promiscuous mode [ 189.873434][ T13] bridge0: port 1(1¾x9ÿ) entered disabled state [ 189.956877][T16811] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3376'. [ 190.093386][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.108624][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.138034][ T13] bond0 (unregistering): Released all slaves [ 190.160748][T16806] tipc: Enabled bearer , priority 0 [ 190.175346][T16811] bond1 (unregistering): Released all slaves [ 190.182632][T16812] syzkaller0: entered promiscuous mode [ 190.183737][T16812] syzkaller0: entered allmulticast mode [ 190.186321][T16813] syzkaller0: entered promiscuous mode [ 190.187391][T16813] syzkaller0: entered allmulticast mode [ 190.200516][T16817] syzkaller0: entered promiscuous mode [ 190.201581][T16817] syzkaller0: entered allmulticast mode [ 190.239865][ T13] tipc: Left network mode [ 190.252817][T16799] tipc: Resetting bearer [ 190.262374][T16799] tipc: Disabling bearer [ 191.024659][T16840] syzkaller0: entered promiscuous mode [ 191.027084][T16840] syzkaller0: entered allmulticast mode [ 191.135250][ T6577] Bluetooth: hci3: command tx timeout [ 191.139764][T16865] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3388'. [ 191.221289][T16869] netlink: 'syz.4.3390': attribute type 1 has an invalid length. [ 191.272808][T16873] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3390'. [ 191.326630][T16877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3390'. [ 191.720724][T16877] bond1 (unregistering): Released all slaves [ 191.749572][T16878] syzkaller0: entered promiscuous mode [ 191.750743][T16878] syzkaller0: entered allmulticast mode [ 192.605780][T16886] tipc: Enabled bearer , priority 0 [ 192.607990][T16892] syzkaller0: entered promiscuous mode [ 192.608875][T16892] syzkaller0: entered allmulticast mode [ 192.621148][T16885] tipc: Resetting bearer [ 192.628908][T16885] tipc: Disabling bearer [ 192.652426][ T13] hsr_slave_0: left promiscuous mode [ 192.653396][ T13] hsr_slave_1: left promiscuous mode [ 192.653634][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.653646][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.657091][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.657107][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.675711][ T13] veth1_macvtap: left promiscuous mode [ 192.675770][ T13] veth0_macvtap: left promiscuous mode [ 192.675819][ T13] veth1_vlan: left allmulticast mode [ 192.675830][ T13] veth1_vlan: left promiscuous mode [ 192.675873][ T13] veth0_vlan: left promiscuous mode [ 193.101389][ T13] team0 (unregistering): Port device team_slave_1 removed [ 193.119602][ T13] team0 (unregistering): Port device team_slave_0 removed [ 193.215620][ T6577] Bluetooth: hci3: command tx timeout [ 193.290889][T16919] syzkaller0: entered promiscuous mode [ 193.290921][T16919] syzkaller0: entered allmulticast mode [ 193.300766][T16941] syzkaller0: entered promiscuous mode [ 193.300797][T16941] syzkaller0: entered allmulticast mode [ 193.309948][T16950] syzkaller0: entered promiscuous mode [ 193.309986][T16950] syzkaller0: entered allmulticast mode [ 193.903115][T16957] loop4: detected capacity change from 0 to 256 [ 193.906213][T16957] vfat: Bad value for 'dmask' [ 194.714441][T16972] netlink: 'syz.2.3406': attribute type 1 has an invalid length. [ 194.767503][T16973] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3406'. [ 194.824471][T16974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3406'. [ 195.227606][T16961] tipc: Enabling of bearer rejected, failed to enable media [ 195.258271][T16974] bond1 (unregistering): Released all slaves [ 195.296456][ T6577] Bluetooth: hci3: command tx timeout [ 195.305074][T16693] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 195.310916][T16693] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 195.329974][T16693] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 195.336226][T16693] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 195.370728][T16982] syzkaller0: entered promiscuous mode [ 195.370766][T16982] syzkaller0: entered allmulticast mode [ 195.427839][T16992] syzkaller0: entered promiscuous mode [ 195.427888][T16992] syzkaller0: entered allmulticast mode [ 195.432818][T16997] syzkaller0: entered promiscuous mode [ 195.433717][T16997] syzkaller0: entered allmulticast mode [ 195.529750][T16693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.532621][T16693] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.569636][ T1452] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.569682][ T1452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.578370][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.578410][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.611357][T17010] tipc: Started in network mode [ 195.611396][T17010] tipc: Node identity fa87098c00ce, cluster identity 4711 [ 195.611443][T17010] tipc: Enabled bearer , priority 0 [ 195.618803][T17010] syzkaller0: entered promiscuous mode [ 195.618851][T17010] syzkaller0: entered allmulticast mode [ 195.633996][T17014] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3420'. [ 195.744115][T17012] syzkaller0: entered promiscuous mode [ 195.744152][T17012] syzkaller0: entered allmulticast mode [ 195.780790][T17021] netlink: zone id is out of range [ 195.780824][T17021] netlink: zone id is out of range [ 195.780966][T17021] netlink: zone id is out of range [ 195.780982][T17021] netlink: zone id is out of range [ 195.780999][T17021] netlink: zone id is out of range [ 195.781013][T17021] netlink: zone id is out of range [ 195.781026][T17021] netlink: zone id is out of range [ 195.781039][T17021] netlink: zone id is out of range [ 195.781054][T17021] netlink: zone id is out of range [ 195.781068][T17021] netlink: zone id is out of range [ 195.813105][T17023] netlink: 'syz.4.3422': attribute type 1 has an invalid length. [ 195.866159][T17024] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3422'. [ 195.916910][T17025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3422'. [ 196.321111][T17010] tipc: Resetting bearer [ 196.372543][T17025] bond1 (unregistering): Released all slaves [ 196.384358][T17007] tipc: Resetting bearer [ 196.393881][T17007] tipc: Disabling bearer [ 196.492551][T17034] syzkaller0: entered promiscuous mode [ 196.493456][T17034] syzkaller0: entered allmulticast mode [ 196.853743][T17040] syzkaller0: entered promiscuous mode [ 196.853776][T17040] syzkaller0: entered allmulticast mode [ 196.888315][T16693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.890380][T17048] syzkaller0: entered promiscuous mode [ 196.890410][T17048] syzkaller0: entered allmulticast mode [ 196.929095][T16693] veth0_vlan: entered promiscuous mode [ 196.932474][T16693] veth1_vlan: entered promiscuous mode [ 196.944080][T16693] veth0_macvtap: entered promiscuous mode [ 196.949669][T16693] veth1_macvtap: entered promiscuous mode [ 196.955152][T16693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.959756][T16693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.968071][ T377] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.968135][ T377] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.968155][ T377] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.968174][ T377] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.034500][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.034544][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.336907][T17060] syzkaller0: entered promiscuous mode [ 197.337930][T17060] syzkaller0: entered allmulticast mode [ 197.342459][ T1452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.342491][ T1452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.363717][T17064] netlink: 'syz.2.3434': attribute type 1 has an invalid length. [ 197.456929][T17066] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3434'. [ 197.481148][T17067] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3434'. [ 197.523234][T17068] 9p: Bad value for 'wfdno' [ 198.002912][T17067] bond1 (unregistering): Released all slaves [ 198.012886][T17075] tipc: Enabled bearer , priority 0 [ 198.020579][T17072] syzkaller0: entered promiscuous mode [ 198.020616][T17072] syzkaller0: entered allmulticast mode [ 198.024420][T17072] tipc: Resetting bearer [ 198.026807][T17071] tipc: Resetting bearer [ 198.033410][T17071] tipc: Disabling bearer [ 198.064446][T17079] syzkaller0: entered promiscuous mode [ 198.066000][T17079] syzkaller0: entered allmulticast mode [ 198.128531][T17081] syzkaller0: entered promiscuous mode [ 198.128569][T17081] syzkaller0: entered allmulticast mode [ 198.202080][T17089] syzkaller0: entered promiscuous mode [ 198.202116][T17089] syzkaller0: entered allmulticast mode [ 198.241946][T17094] capability: warning: `syz.1.3444' uses deprecated v2 capabilities in a way that may be insecure [ 198.415922][T17106] syzkaller0: entered promiscuous mode [ 198.417637][T17106] syzkaller0: entered allmulticast mode [ 198.419540][T17107] netlink: 'syz.6.3449': attribute type 7 has an invalid length. [ 198.419699][T17107] netlink: 'syz.6.3449': attribute type 8 has an invalid length. [ 198.419709][T17107] netlink: 209828 bytes leftover after parsing attributes in process `syz.6.3449'. [ 198.980554][T17110] netlink: 'syz.0.3450': attribute type 1 has an invalid length. [ 199.033817][T17115] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3450'. [ 199.125772][T17118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3450'. [ 199.177908][T17121] 9p: Bad value for 'wfdno' [ 199.774817][T17127] syzkaller0: entered promiscuous mode [ 199.776309][T17127] syzkaller0: entered allmulticast mode [ 199.789220][T17149] syzkaller0: entered promiscuous mode [ 199.790471][T17149] syzkaller0: entered allmulticast mode [ 201.159087][T17215] netlink: 'syz.6.3463': attribute type 7 has an invalid length. [ 201.159115][T17215] netlink: 'syz.6.3463': attribute type 8 has an invalid length. [ 201.159142][T17215] netlink: 209828 bytes leftover after parsing attributes in process `syz.6.3463'. [ 201.203094][T17219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3466'. [ 201.970466][T17222] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 202.030211][T17230] netlink: 'syz.6.3469': attribute type 1 has an invalid length. [ 202.081970][T17238] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3469'. [ 202.082016][T17238] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3469'. [ 202.109985][T17232] syzkaller0: entered promiscuous mode [ 202.110026][T17232] syzkaller0: entered allmulticast mode [ 202.122516][T17230] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3469'. [ 202.178865][T17230] bond1 (unregistering): Released all slaves [ 202.204479][T17241] 9p: Bad value for 'wfdno' [ 202.799932][T17256] syzkaller0: entered promiscuous mode [ 202.799967][T17256] syzkaller0: entered allmulticast mode [ 202.810631][T17258] syzkaller0: entered promiscuous mode [ 202.811623][T17258] syzkaller0: entered allmulticast mode [ 202.928178][T17275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3476'. [ 204.352362][T17308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3482'. [ 204.366844][T17308] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 204.410332][T17313] netlink: 'syz.2.3484': attribute type 1 has an invalid length. [ 204.437345][T17317] xt_hashlimit: size too large, truncated to 1048576 [ 204.469920][T17313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3484'. [ 204.469976][T17313] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3484'. [ 204.472838][T17313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3484'. [ 204.475101][T17313] bond1 (unregistering): Released all slaves [ 204.513668][T17324] syzkaller0: entered promiscuous mode [ 204.513704][T17324] syzkaller0: entered allmulticast mode [ 204.524042][T17325] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 204.882377][T17334] syzkaller0: entered promiscuous mode [ 204.883569][T17334] syzkaller0: entered allmulticast mode [ 204.890940][T17335] syzkaller0: entered promiscuous mode [ 204.890972][T17335] syzkaller0: entered allmulticast mode [ 204.952426][T17337] syzkaller0: entered promiscuous mode [ 204.952467][T17337] syzkaller0: entered allmulticast mode [ 204.982985][T17346] syzkaller0: entered promiscuous mode [ 204.984685][T17346] syzkaller0: entered allmulticast mode [ 205.043945][T17350] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 205.550512][T17373] netlink: 'syz.2.3505': attribute type 1 has an invalid length. [ 205.579093][T17370] syzkaller0: entered promiscuous mode [ 205.579127][T17370] syzkaller0: entered allmulticast mode [ 205.646359][T17373] bond1 (unregistering): Released all slaves [ 205.681869][T17383] syzkaller0: entered promiscuous mode [ 205.681915][T17383] syzkaller0: entered allmulticast mode [ 205.757309][T17387] syzkaller0: entered promiscuous mode [ 205.757350][T17387] syzkaller0: entered allmulticast mode [ 206.718893][T17397] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 206.748293][T17420] syzkaller0: entered promiscuous mode [ 206.749700][T17420] syzkaller0: entered allmulticast mode [ 206.836044][T17433] netlink: 'syz.2.3523': attribute type 1 has an invalid length. [ 206.888772][T17442] __nla_validate_parse: 15 callbacks suppressed [ 206.890166][T17442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3523'. [ 206.891511][T17442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3523'. [ 207.126977][T17445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3523'. [ 207.714004][T17433] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 207.734443][T17450] syzkaller0: entered promiscuous mode [ 207.735569][T17450] syzkaller0: entered allmulticast mode [ 207.780636][T17472] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3529'. [ 207.845673][T17472] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3529'. [ 208.419384][T17482] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 208.425659][T17487] tipc: Enabled bearer , priority 0 [ 208.425863][T17488] syzkaller0: entered promiscuous mode [ 208.428369][T17488] syzkaller0: entered allmulticast mode [ 208.431942][T17495] tipc: Resetting bearer [ 208.441295][T17483] tipc: Resetting bearer [ 208.517246][T17483] tipc: Disabling bearer [ 208.529968][T17499] syzkaller0: entered promiscuous mode [ 208.531033][T17499] syzkaller0: entered allmulticast mode [ 208.533411][T17505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3537'. [ 208.859769][T17510] netlink: 'syz.1.3539': attribute type 1 has an invalid length. [ 208.880718][T17510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3539'. [ 208.880766][T17510] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3539'. [ 208.887038][T17510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3539'. [ 208.889664][T17510] bond1 (unregistering): Released all slaves [ 208.924245][T17518] syzkaller0: entered promiscuous mode [ 208.924281][T17518] syzkaller0: entered allmulticast mode [ 208.974374][T17524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3545'. [ 209.068779][T17536] syzkaller0: entered promiscuous mode [ 209.070002][T17536] syzkaller0: entered allmulticast mode [ 209.072415][T17534] syzkaller0: entered promiscuous mode [ 209.072486][T17534] syzkaller0: entered allmulticast mode [ 209.129375][T17538] tipc: Enabled bearer , priority 0 [ 209.131186][T17538] syzkaller0: entered promiscuous mode [ 209.132475][T17538] syzkaller0: entered allmulticast mode [ 209.138477][T17538] tipc: Resetting bearer [ 209.140655][T17537] tipc: Resetting bearer [ 209.148024][T17537] tipc: Disabling bearer [ 209.186389][T17544] net_ratelimit: 133 callbacks suppressed [ 209.188071][T17544] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 209.302380][T17555] syzkaller0: entered promiscuous mode [ 209.302418][T17555] syzkaller0: entered allmulticast mode [ 209.414415][T17563] syzkaller0: entered promiscuous mode [ 209.416692][T17563] syzkaller0: entered allmulticast mode [ 209.508404][T17571] syzkaller0: entered promiscuous mode [ 209.509499][T17571] syzkaller0: entered allmulticast mode [ 209.555881][T17576] tipc: Enabled bearer , priority 0 [ 209.560460][T17576] syzkaller0: entered promiscuous mode [ 209.560503][T17576] syzkaller0: entered allmulticast mode [ 209.563918][T17576] tipc: Resetting bearer [ 209.565130][T17575] tipc: Resetting bearer [ 209.592315][T17575] tipc: Disabling bearer [ 209.635373][T17586] syzkaller0: entered promiscuous mode [ 209.635413][T17586] syzkaller0: entered allmulticast mode [ 210.012569][T17602] syzkaller0: entered promiscuous mode [ 210.013685][T17602] syzkaller0: entered allmulticast mode [ 210.061919][T17606] syzkaller0: entered promiscuous mode [ 210.063092][T17606] syzkaller0: entered allmulticast mode [ 210.164442][T17617] tipc: Enabled bearer , priority 0 [ 210.168160][T17617] syzkaller0: entered promiscuous mode [ 210.170451][T17617] syzkaller0: entered allmulticast mode [ 210.178848][T17617] tipc: Resetting bearer [ 210.181373][T17616] tipc: Resetting bearer [ 210.187374][T17616] tipc: Disabling bearer [ 210.192992][T17621] syzkaller0: entered promiscuous mode [ 210.194415][T17621] syzkaller0: entered allmulticast mode [ 210.244349][T17625] netlink: 'syz.2.3590': attribute type 39 has an invalid length. [ 210.313652][T17633] syzkaller0: entered promiscuous mode [ 210.313687][T17633] syzkaller0: entered allmulticast mode [ 210.335118][T17639] syzkaller0: entered promiscuous mode [ 210.336803][T17639] syzkaller0: entered allmulticast mode [ 210.481887][T17642] hub 8-0:1.0: USB hub found [ 210.482435][T17642] hub 8-0:1.0: 8 ports detected [ 210.665768][T17649] syzkaller0: entered promiscuous mode [ 210.665802][T17649] syzkaller0: entered allmulticast mode [ 210.666597][T17651] tipc: Enabled bearer , priority 0 [ 210.666876][T17651] syzkaller0: entered promiscuous mode [ 210.666887][T17651] syzkaller0: entered allmulticast mode [ 210.672410][T17651] tipc: Resetting bearer [ 210.674150][T17650] tipc: Resetting bearer [ 210.693487][T17650] tipc: Disabling bearer [ 210.827832][T17667] syzkaller0: entered promiscuous mode [ 210.828927][T17667] syzkaller0: entered allmulticast mode [ 212.053923][T17700] __nla_validate_parse: 11 callbacks suppressed [ 212.055343][T17700] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3623'. [ 212.091948][T17706] syzkaller0: entered promiscuous mode [ 212.106094][T17706] syzkaller0: entered allmulticast mode [ 212.143737][T17720] syzkaller0: entered promiscuous mode [ 212.143772][T17720] syzkaller0: entered allmulticast mode [ 212.228945][T17742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3633'. [ 212.327062][T17742] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3633'. [ 212.596755][T17754] IPv6: NLM_F_CREATE should be specified when creating new route [ 212.598735][T17754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.598745][T17754] IPv6: NLM_F_CREATE should be set when creating new route [ 213.357989][T17772] netlink: zone id is out of range [ 213.358027][T17772] netlink: zone id is out of range [ 213.358037][T17772] netlink: zone id is out of range [ 213.358046][T17772] netlink: zone id is out of range [ 213.358055][T17772] netlink: zone id is out of range [ 213.358062][T17772] netlink: zone id is out of range [ 213.358070][T17772] netlink: zone id is out of range [ 213.358077][T17772] netlink: zone id is out of range [ 213.358083][T17772] netlink: zone id is out of range [ 213.954184][T17791] netlink: 'syz.2.3652': attribute type 1 has an invalid length. [ 213.967911][T17791] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3652'. [ 213.973433][T17791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3652'. [ 213.982632][T17791] bond1 (unregistering): Released all slaves [ 213.991062][T17789] mac80211_hwsim hwsim17 .3ãc¤±ve: renamed from wlan1 (while UP) [ 214.002586][T17794] tipc: Started in network mode [ 214.002622][T17794] tipc: Node identity 7e2856c9dfe7, cluster identity 4711 [ 214.002674][T17794] tipc: Enabled bearer , priority 0 [ 214.002947][T17794] syzkaller0: entered promiscuous mode [ 214.002964][T17794] syzkaller0: entered allmulticast mode [ 214.005297][T17794] tipc: Resetting bearer [ 214.009710][T17793] tipc: Resetting bearer [ 214.013934][T17793] tipc: Disabling bearer [ 214.068180][T17801] syzkaller0: entered promiscuous mode [ 214.068209][T17801] syzkaller0: entered allmulticast mode [ 214.400442][T17810] netlink: 'syz.2.3661': attribute type 1 has an invalid length. [ 214.422561][T17812] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3663'. [ 214.484468][T17822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3667'. [ 214.497696][T17825] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3662'. [ 214.499763][T17814] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3662'. [ 214.517953][T17812] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3663'. [ 214.556954][T17831] syzkaller0: entered promiscuous mode [ 214.556989][T17831] syzkaller0: entered allmulticast mode [ 214.584950][T17835] syzkaller0: entered promiscuous mode [ 214.584984][T17835] syzkaller0: entered allmulticast mode [ 214.586174][T17838] netlink: 'syz.2.3669': attribute type 7 has an invalid length. [ 214.586186][T17838] netlink: 'syz.2.3669': attribute type 8 has an invalid length. [ 214.852588][T17862] syzkaller0: entered promiscuous mode [ 214.853579][T17862] syzkaller0: entered allmulticast mode [ 214.923110][T17867] syzkaller0: entered promiscuous mode [ 214.924277][T17867] syzkaller0: entered allmulticast mode [ 215.020992][T17870] syzkaller0: entered promiscuous mode [ 215.021024][T17870] syzkaller0: entered allmulticast mode [ 215.106660][T17878] syzkaller0: entered promiscuous mode [ 215.107713][T17878] syzkaller0: entered allmulticast mode [ 215.126405][T17880] netlink: 'syz.6.3693': attribute type 32 has an invalid length. [ 216.033844][T17903] syzkaller0: entered promiscuous mode [ 216.033875][T17903] syzkaller0: entered allmulticast mode [ 216.069738][T17921] syzkaller0: entered promiscuous mode [ 216.069772][T17921] syzkaller0: entered allmulticast mode [ 216.072421][T17923] syzkaller0: entered promiscuous mode [ 216.073484][T17923] syzkaller0: entered allmulticast mode [ 216.782383][T17949] 9p: Bad value for 'wfdno' [ 217.131203][T17962] __nla_validate_parse: 10 callbacks suppressed [ 217.131459][T17962] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3713'. [ 217.134148][T17955] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3713'. [ 217.166748][T17951] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3712'. [ 218.057888][T17978] syzkaller0: entered promiscuous mode [ 218.058883][T17978] syzkaller0: entered allmulticast mode [ 218.405936][T18017] 9p: Bad value for 'wfdno' [ 218.812861][T18001] syzkaller0: entered promiscuous mode [ 218.812896][T18001] syzkaller0: entered allmulticast mode [ 218.820052][T18011] syzkaller0: entered promiscuous mode [ 218.820085][T18011] syzkaller0: entered allmulticast mode [ 218.882097][T18019] netlink: 'syz.2.3728': attribute type 2 has an invalid length. [ 218.882133][T18019] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3728'. [ 219.757948][T18022] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3729'. [ 221.082418][T18087] 9p: Bad value for 'wfdno' [ 221.593089][T18073] syzkaller0: entered promiscuous mode [ 221.593119][T18073] syzkaller0: entered allmulticast mode [ 221.595361][T18083] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3743'. [ 221.596222][T18079] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3743'. [ 221.620672][T18093] syzkaller0: entered promiscuous mode [ 221.620711][T18093] syzkaller0: entered allmulticast mode [ 221.677335][T18107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3748'. [ 221.786473][T18107] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3748'. [ 222.572798][T18125] syzkaller0: entered promiscuous mode [ 222.573957][T18125] syzkaller0: entered allmulticast mode [ 223.511119][T18151] tipc: Enabling of bearer rejected, failed to enable media [ 223.583470][T18175] syzkaller0: entered promiscuous mode [ 223.584659][T18175] syzkaller0: entered allmulticast mode [ 223.695111][T18191] syzkaller0: entered promiscuous mode [ 223.695149][T18191] syzkaller0: entered allmulticast mode [ 223.706631][T18185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3765'. [ 223.807400][T18201] 9p: Bad value for 'wfdno' [ 224.067933][T18185] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3765'. [ 224.089724][T18206] tipc: Enabled bearer , priority 0 [ 224.091458][T18205] syzkaller0: entered promiscuous mode [ 224.091503][T18205] syzkaller0: entered allmulticast mode [ 224.095060][T18206] syzkaller0: entered promiscuous mode [ 224.095108][T18206] syzkaller0: entered allmulticast mode [ 224.122388][T18206] tipc: Resetting bearer [ 224.154009][T18203] tipc: Resetting bearer [ 224.176625][T18203] tipc: Disabling bearer [ 224.290761][T18211] netlink: 'syz.4.3775': attribute type 1 has an invalid length. [ 224.401190][T18215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3775'. [ 224.581214][T18231] netlink: 'syz.6.3781': attribute type 7 has an invalid length. [ 224.581248][T18231] netlink: 'syz.6.3781': attribute type 8 has an invalid length. [ 224.581570][T18231] netlink: 209828 bytes leftover after parsing attributes in process `syz.6.3781'. [ 224.620513][T18234] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3782'. [ 224.651254][T18238] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3784'. [ 224.671264][T18238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3784'. [ 224.826990][T18238] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3784'. [ 225.026937][T18215] bond1 (unregistering): Released all slaves [ 225.686486][T18277] 9p: Bad value for 'wfdno' [ 225.755962][T18255] syzkaller0: entered promiscuous mode [ 225.755995][T18255] syzkaller0: entered allmulticast mode [ 225.810278][T18281] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3793'. [ 225.838256][T18283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3795'. [ 226.007106][T18296] netlink: 'syz.0.3799': attribute type 7 has an invalid length. [ 226.008481][T18296] netlink: 'syz.0.3799': attribute type 8 has an invalid length. [ 226.030783][T18298] loop4: detected capacity change from 0 to 256 [ 226.033292][T18298] vfat: Bad value for 'dmask' [ 227.467945][T18331] syzkaller0: entered promiscuous mode [ 227.467976][T18331] syzkaller0: entered allmulticast mode [ 229.765089][T18427] __nla_validate_parse: 12 callbacks suppressed [ 229.765133][T18427] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3837'. [ 229.871184][T18427] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3837'. [ 230.190319][T18409] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3827'. [ 230.195063][T18414] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 230.272127][T18444] netlink: 'syz.2.3842': attribute type 7 has an invalid length. [ 230.272162][T18444] netlink: 'syz.2.3842': attribute type 8 has an invalid length. [ 230.272172][T18444] netlink: 209828 bytes leftover after parsing attributes in process `syz.2.3842'. [ 230.311997][ T6577] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 230.460495][T18466] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3850'. [ 230.598326][T18466] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3850'. [ 230.892326][T18463] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3849'. [ 230.905816][T18459] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3849'. [ 230.986707][T18482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.988320][T18482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.001844][T18485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.004110][T18485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.326745][T15213] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 231.485743][T15213] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.485780][T15213] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 231.485793][T15213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 231.485806][T15213] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 231.485814][T15213] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 231.498807][T15213] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 231.498831][T15213] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 231.498958][T15213] usb 1-1: Product: syz [ 231.498971][T15213] usb 1-1: Manufacturer: syz [ 231.498983][T15213] usb 1-1: SerialNumber: syz [ 231.504908][T15213] usb 1-1: config 0 descriptor?? [ 231.538615][T18507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.540464][T18507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.712913][T15213] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 231.712945][T15213] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 231.916505][T15213] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 231.916541][T15213] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 231.916864][T15213] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 232.119550][T15213] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 232.151254][T18525] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3865'. [ 232.187871][T18511] tipc: Enabled bearer , priority 0 [ 232.188051][T18512] syzkaller0: entered promiscuous mode [ 232.188060][T18512] syzkaller0: entered allmulticast mode [ 232.193233][T18520] tipc: Resetting bearer [ 232.197197][T18508] tipc: Resetting bearer [ 232.204905][T18508] tipc: Disabling bearer [ 232.277318][T18523] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3865'. [ 232.350072][T18542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.350266][T18542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.434327][T18548] hub 8-0:1.0: USB hub found [ 232.435279][T18548] hub 8-0:1.0: 8 ports detected [ 233.090661][T18569] tipc: Enabled bearer , priority 0 [ 233.135778][T15213] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 233.136056][T15213] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 233.142691][T15213] usb 1-1: USB disconnect, device number 8 [ 233.715348][T18567] syzkaller0: entered promiscuous mode [ 233.715381][T18567] syzkaller0: entered allmulticast mode [ 233.727045][T18579] tipc: Resetting bearer [ 233.734547][T18566] tipc: Resetting bearer [ 233.771391][T18566] tipc: Disabling bearer [ 233.811339][T18593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.814067][T18593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.996461][T18607] hub 8-0:1.0: USB hub found [ 233.997797][T18607] hub 8-0:1.0: 8 ports detected [ 234.691956][T18631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.693767][T18631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.727725][T18635] binder: 18634:18635 tried to acquire reference to desc 0, got 1 instead [ 234.731779][T18635] binder_alloc: 18634: binder_alloc_buf, no vma [ 234.731796][T18635] binder: cannot allocate buffer: vma cleared, target dead or dying [ 234.731825][T18635] binder: 18634:18635 transaction call to 18634:0 failed 68/29189/-3, code 0 size 0-0 line 3389 [ 234.732221][ T6633] binder: undelivered TRANSACTION_ERROR: 29189 [ 234.775728][T18643] __nla_validate_parse: 5 callbacks suppressed [ 234.776935][T18643] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3909'. [ 234.778852][T18636] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3909'. [ 234.787372][T18645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.787570][T18645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.894372][T18664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.897738][T18664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.901829][T18631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.904221][T18631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.963432][T18668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.963683][T18668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.007795][T18669] hub 8-0:1.0: USB hub found [ 235.008448][T18669] hub 8-0:1.0: 8 ports detected [ 235.312258][T18671] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3924'. [ 235.433076][T18683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.435040][T18683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.444706][T18685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.444887][T18685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.638030][T18691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.642834][T18691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.953393][T18695] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3936'. [ 235.975804][ T6633] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 236.135370][ T6633] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 236.135408][ T6633] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 236.135558][ T6633] usb 1-1: Product: syz [ 236.135577][ T6633] usb 1-1: Manufacturer: syz [ 236.135596][ T6633] usb 1-1: SerialNumber: syz [ 236.136822][ T6633] usb 1-1: config 0 descriptor?? [ 236.142058][ T6633] ch341 1-1:0.0: ch341-uart converter detected [ 236.236081][T18722] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3949'. [ 236.428760][T18744] 8021q: VLANs not supported on caif0 [ 236.439850][T18746] tipc: Enabled bearer , priority 0 [ 236.441708][T18746] syzkaller0: entered promiscuous mode [ 236.442891][T18746] syzkaller0: entered allmulticast mode [ 236.454207][T18746] tipc: Resetting bearer [ 236.463554][T18745] tipc: Resetting bearer [ 236.464301][T18750] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3963'. [ 236.487930][T18745] tipc: Disabling bearer [ 236.532793][T18756] syzkaller0: entered promiscuous mode [ 236.532832][T18756] syzkaller0: entered allmulticast mode [ 236.949300][ T6633] usb 1-1: failed to send control message: -71 [ 236.950470][ T6633] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 236.956204][ T6633] usb 1-1: USB disconnect, device number 9 [ 236.958233][ T6633] ch341 1-1:0.0: device disconnected [ 237.083773][T18784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.083950][T18784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.476289][T18788] block nbd0: not configured, cannot reconfigure [ 237.480047][T18790] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3980'. [ 237.483038][T18790] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 237.501696][T18792] tipc: Cannot configure node identity twice [ 237.553599][T18794] syzkaller0: entered promiscuous mode [ 237.553656][T18794] syzkaller0: entered allmulticast mode [ 237.814018][T18813] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3988'. [ 237.815865][T18812] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3988'. [ 237.930804][T18823] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3993'. [ 237.934749][T18823] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 237.958134][T18829] binder: 18828:18829 tried to acquire reference to desc 0, got 1 instead [ 237.960177][T18829] binder: 18828:18829 ioctl c0306201 0 returned -14 [ 237.962152][ T6633] binder: release 18828:18829 transaction 73 out, still active [ 237.963429][ T6633] binder: undelivered TRANSACTION_COMPLETE [ 238.140788][T15213] binder: send failed reply for transaction 73, target dead [ 238.196539][T18827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.196727][T18827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.328035][T18843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.330455][T18843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.387712][T18850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.390017][T18850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.349105][T18913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.351447][T18913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.500293][T18921] netlink: 'syz.2.4032': attribute type 10 has an invalid length. [ 239.545367][T15213] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 239.644650][T18925] hub 8-0:1.0: USB hub found [ 239.645005][T18925] hub 8-0:1.0: 8 ports detected [ 239.902417][T18927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.902606][T18927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.914060][T18929] syzkaller0: entered promiscuous mode [ 239.914091][T18929] syzkaller0: entered allmulticast mode [ 239.956806][T15213] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 239.956841][T15213] usb 1-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 239.957066][T15213] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.958955][T15213] usb 1-1: config 0 descriptor?? [ 240.172629][T18942] __nla_validate_parse: 8 callbacks suppressed [ 240.173877][T18942] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4039'. [ 240.174142][T18937] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4039'. [ 240.246344][T18950] loop6: detected capacity change from 0 to 256 [ 240.248466][T18950] vfat: Bad value for 'dmask' [ 240.375570][T15213] itetech 0003:258A:6A88.0007: item fetching failed at offset 0/1 [ 240.375769][T15213] itetech 0003:258A:6A88.0007: probe with driver itetech failed with error -22 [ 240.394036][T18956] syzkaller0: entered promiscuous mode [ 240.394072][T18956] syzkaller0: entered allmulticast mode [ 240.663064][T15213] usb 1-1: USB disconnect, device number 10 [ 241.074294][T18974] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4053'. [ 241.076716][T18973] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4053'. [ 241.229902][T18986] tipc: Enabling of bearer rejected, failed to enable media [ 241.281798][T18993] hub 8-0:1.0: USB hub found [ 241.281928][T18993] hub 8-0:1.0: 8 ports detected [ 242.235085][T18995] syzkaller0: entered promiscuous mode [ 242.235122][T18995] syzkaller0: entered allmulticast mode [ 242.238267][T19007] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4064'. [ 242.238865][T19006] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4064'. [ 242.301822][T19015] loop6: detected capacity change from 0 to 256 [ 242.303315][T19015] vfat: Bad value for 'dmask' [ 242.676417][T19034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.678173][T19034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.009915][T19041] hub 8-0:1.0: USB hub found [ 243.013281][T19041] hub 8-0:1.0: 8 ports detected [ 243.233086][T19045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.234795][T19045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.278817][T19049] syzkaller0: entered promiscuous mode [ 243.279933][T19049] syzkaller0: entered allmulticast mode [ 243.388864][T19054] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4076'. [ 243.392301][T19050] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4076'. [ 243.421966][T19060] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.422148][T19060] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.695197][ C1] ------------[ cut here ]------------ [ 243.695229][ C1] ODEBUG: free active (active state 0) object: 00000000efce9099 object type: timer_list hint: rose_t0timer_expiry+0x0/0x348 [ 243.695407][ C1] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x390/0x470, CPU#1: udevd/6209 [ 243.699856][ C1] Modules linked in: [ 243.700489][ C1] CPU: 1 UID: 0 PID: 6209 Comm: udevd Tainted: G L syzkaller #0 PREEMPT [ 243.702028][ C1] Tainted: [L]=SOFTLOCKUP [ 243.702694][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 243.704292][ C1] pstate: 63400005 (nZCv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 243.705477][ C1] pc : debug_check_no_obj_freed+0x390/0x470 [ 243.706384][ C1] lr : debug_check_no_obj_freed+0x390/0x470 [ 243.707283][ C1] sp : ffff800097bd7aa0 [ 243.707898][ C1] x29: ffff800097bd7ae0 x28: ffff0000cffd3a00 x27: 0000000000000000 [ 243.709141][ C1] x26: ffff80008b079660 x25: ffff0000cffd3890 x24: ffff80008a0fa744 [ 243.710328][ C1] x23: ffff0000ec58ae38 x22: ffff0000cffd3000 x21: dfff800000000000 [ 243.711519][ C1] x20: 0000000000000000 x19: ffff0000cffd3800 x18: 0000000000000000 [ 243.712831][ C1] x17: 626f203939303965 x16: ffff800082e5e68c x15: 0000000000000001 [ 243.714062][ C1] x14: 1ffff00012f7aec8 x13: 0000000000000000 x12: 0000000000000000 [ 243.715309][ C1] x11: 00000000000029bc x10: 0000000000ff0100 x9 : 7056bca8ba64bf00 [ 243.716554][ C1] x8 : 7056bca8ba64bf00 x7 : ffff8000805761f8 x6 : 0000000000000000 [ 243.717903][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff8000807f1260 [ 243.719171][ C1] x2 : 0000000000000001 x1 : 0000000000000101 x0 : 0000000000000000 [ 243.720397][ C1] Call trace: [ 243.720912][ C1] debug_check_no_obj_freed+0x390/0x470 (P) [ 243.721786][ C1] kfree+0x160/0x5fc [ 243.722386][ C1] rose_timer_expiry+0x43c/0x5ac [ 243.723111][ C1] call_timer_fn+0x19c/0x814 [ 243.723841][ C1] __run_timer_base+0x51c/0x76c [ 243.724633][ C1] run_timer_softirq+0xcc/0x194 [ 243.725367][ C1] handle_softirqs+0x31c/0xc88 [ 243.726119][ C1] __do_softirq+0x14/0x20 [ 243.726759][ C1] ____do_softirq+0x14/0x20 [ 243.727449][ C1] call_on_irq_stack+0x30/0x48 [ 243.728268][ C1] do_softirq_own_stack+0x20/0x2c [ 243.729076][ C1] __irq_exit_rcu+0x1b0/0x478 [ 243.729817][ C1] irq_exit_rcu+0x14/0x84 [ 243.730489][ C1] el1_interrupt+0x40/0x60 [ 243.731143][ C1] el1h_64_irq_handler+0x18/0x24 [ 243.731957][ C1] el1h_64_irq+0x6c/0x70 [ 243.732606][ C1] add_uevent_var+0x108/0x3a4 (P) [ 243.733384][ C1] dev_uevent+0xd8/0x7b0 [ 243.734125][ C1] uevent_show+0x19c/0x318 [ 243.734774][ C1] dev_attr_show+0x60/0xcc [ 243.735438][ C1] sysfs_kf_seq_show+0x2b4/0x420 [ 243.736168][ C1] kernfs_seq_show+0x150/0x1fc [ 243.736894][ C1] seq_read_iter+0x3b8/0xc34 [ 243.737592][ C1] kernfs_fop_read_iter+0x140/0x600 [ 243.738313][ C1] vfs_read+0x670/0x93c [ 243.738915][ C1] ksys_read+0x120/0x210 [ 243.739523][ C1] __arm64_sys_read+0x7c/0x90 [ 243.740231][ C1] invoke_syscall+0x98/0x254 [ 243.740923][ C1] el0_svc_common+0xe8/0x23c [ 243.741603][ C1] do_el0_svc+0x48/0x58 [ 243.742202][ C1] el0_svc+0x5c/0x26c [ 243.742813][ C1] el0t_64_sync_handler+0x84/0x12c [ 243.743600][ C1] el0t_64_sync+0x198/0x19c [ 243.744321][ C1] irq event stamp: 6604183 [ 243.744996][ C1] hardirqs last enabled at (6604182): [] irqentry_exit+0x1b4/0x308 [ 243.746367][ C1] hardirqs last disabled at (6604183): [] el1_brk64+0x20/0x54 [ 243.747686][ C1] softirqs last enabled at (6604074): [] local_bh_enable+0x10/0x34 [ 243.749172][ C1] softirqs last disabled at (6604169): [] __do_softirq+0x14/0x20 [ 243.750588][ C1] ---[ end trace 0000000000000000 ]--- [ 248.816727][ T2467] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.817936][ T2467] ieee802154 phy1 wpan1: encryption failed: -22