last executing test programs: 2m56.850754601s ago: executing program 0 (id=571): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet(0xa, 0x801, 0x84) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000200)=0x1, 0x4) 2m55.600988251s ago: executing program 0 (id=579): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000700)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1a00048, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@rodir}, {@uni_xlateno}, {@fat=@errors_remount}, {@rodir}, {@numtail}, {@shortname_mixed}, {@utf8no}, {@rodir}, {@fat=@time_offset={'time_offset', 0x3d, 0xfffffffffffffe07}}, {@shortname_mixed}, {@uni_xlateno}, {@utf8no}, {@shortname_mixed}]}, 0x83, 0x350, &(0x7f0000001f80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10d882, 0x15) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) 2m55.158837112s ago: executing program 0 (id=585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100050000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060002"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m55.014922805s ago: executing program 0 (id=587): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000084}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) lseek(0xffffffffffffffff, 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0\n', 0x2) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x6, 0x2e, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "ccefffffff00"}}, 0x48}}, 0x20008044) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/uac1.usb0\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0x43, 0x0, 0x0) 2m54.959425087s ago: executing program 0 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', 0x0, &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000700)="000000000000000200"/20, 0x14) 2m54.856685089s ago: executing program 0 (id=591): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m39.485335757s ago: executing program 32 (id=591): socket(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 24.695529024s ago: executing program 1 (id=1845): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x105042, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000080)=0x2) 24.515919969s ago: executing program 1 (id=1850): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) write(0xffffffffffffffff, &(0x7f00000001c0)='+=0\n', 0x4) preadv(r0, &(0x7f00000016c0)=[{&(0x7f00000002c0)=""/164, 0xa4}], 0x1, 0x1000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) 24.015679311s ago: executing program 3 (id=1862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x2, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) 12.782514627s ago: executing program 3 (id=1868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100050000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 12.782169767s ago: executing program 2 (id=1869): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000200)=0x1, 0x4) 12.780688457s ago: executing program 1 (id=1870): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000011c0)={0x1c, &(0x7f0000000c80)={0x20, 0x0, 0x2, "42e0"}, 0x0, 0x0}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='utf8=1,shortname=win95,nfs=nostale_ro,shortname=lower,sys_immutable,utf8=1,rodir,uid=', @ANYRESHEX=0xee00, @ANYBLOB="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"], 0x0, 0x2c6, &(0x7f0000002b40)="$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") r1 = syz_open_procfs(0x0, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f00000002c0)='./file0/file0\x00', 0x0, 0x13481, 0x0) read$FUSE(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) 12.752828627s ago: executing program 5 (id=1871): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@jqfmt_vfsv0}, {@nouid32}, {@noblock_validity}, {@nodelalloc}, {@inlinecrypt}, {@nouid32}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@data_err_ignore}, {@inlinecrypt}, {@init_itable_val={'init_itable', 0x3d, 0x3ff}}]}, 0x1, 0x5aa, &(0x7f0000000e40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) 12.535908853s ago: executing program 3 (id=1874): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bb", 0x4, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000700)=""/249, 0xffffffffffffffdb, 0x10020, 0x0, 0x0) 12.454227075s ago: executing program 2 (id=1875): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x48, r3, 0x1, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 12.447549344s ago: executing program 5 (id=1876): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c1}, 0x20040000) 12.430708875s ago: executing program 4 (id=1877): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7", 0x38, 0x800, 0x0, 0x0) 12.362201517s ago: executing program 2 (id=1878): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)={@val={0xa, 0xf8}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="527bcee565f4", @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00', 0x8, 0x11, 0x1, @private1, @mcast2, {[], {0x4e20, 0x4e23, 0x8}}}}}}}, 0x42) 12.317705778s ago: executing program 4 (id=1879): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0xb9f, "b546baa5cc590d3033de259c298a007bb959eb71c1cf9fa50100deffafde2500", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000001680)={"8e496894a222d887e29179eea38461b8a0c4e85d9e130799bb6e2d80d25fb24b"}) ioctl$KDGKBTYPE(r3, 0x4b52, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000004c80)=""/4093, 0xffd}], 0x1, 0xf73, 0xfc000000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000740)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xca}}, {@noauto_da_alloc}, {@inlinecrypt}]}, 0x0, 0x59b, &(0x7f0000000bc0)="$eJzs3c9vFFUcAPDvm92WH0VbjIkCB5uQCIna0oLRGBMh4s2DP0g8eahtIYQFGloTQYyQ4NmL/gEm3rwYj8QYol68ejPxDzBEYrAXbzWznSml3W272DLY+XySYebN2833Tem3b+btm9kAams4/yeL2BcRMylicFldM4rK4cXX/X336uT83auTKRYW3v0rRSr2la9PxXqgePPOiPj1xxRPNFbHnb185dxEqzV9qSiPzp2fGZ29fOWFs+cnzkyfmb4wPvbS2IvHjo4fO9K17fs/3/hx7omIn0dONm+cfv3At5Nf7/30+29upjje3h8rjmOzDMfw0s9kufzn+vJmB6tIY8U6l5oVNYaeNYrfx76IeCoGoxH3/vMG47O3K20csKUWUsQCUFNJ/kNNlecB+fVvuVR7RgI8LHdOLA4AlGN780v531wcG4yd7bGB3fMplg/rpIjoPjK3cXmMmWfTYL7EFo3DAZ1dux4RT3fq/1M7N4fao/h5/mf35X8WEW8V63z/Ow8Yf3hFWf7Dw/Og+d9frMv8/+AB48t/AAAAAAAA2Dy3TkTE850+/8uW5v9Eh/k/AxFxfBPir//5X3Z7E8IAHdw5EfFqRMyvmv+XlS8ZahSlx9rzAfrS6bOt6SMR8XhEHI6+HXl5bI0Ywwd+6etat2z+X77k8cu5gEU7bjd33P+eqYm5if9yzMCiO9cj9jfz/E9xf/6npf4/dej/878HMxuMsXDytZ+61a2f/8BWWfgq4lDH/v/ekyvS2s/nGG2fD4yWZwWrffz+ze+6xe+c/9e24EiBlfL+f/fa+T+Ulj+vZ7b3GJ/8+XuP+b/++X9/OtV+5Ew5D/mjibm5S2MR/enN1fvHe28zbAsrnsVU5kOZL3n+Hz7Y+fp/rfP/XRGx0V761A9v3OhW5/wfqpPn/1RP/X/vGwff+/KfbvE31v8fa/fph4s9xv9gbRtN0KrbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/R1lE7ImUjSxtZ9nISMRARDwZu7PWxdm5505f/PDCVF7X/v7/rPym38HFciq//39oWXl8RfloROyNiC8au9rlkcmLramqDx4AAAAAAAAAAAAAAAAAAAAeEQNd7v/P/dGounXAlmtW3QCgMvIf6kv+Q331mP99W9UO4OHT/0N9yX+oL/kP9SX/ob7y/N9ZdSOASuj/AQAAAABgW9n7zK3fUkRce2VXe8n1F3Xm+cP2llXdAKAyHvED9WXqD9SXa3wgrVPf/faA9d4JAAAAAAAAAAAAAGyWQ/vc/w915f5/qC/3/0N9uf8f6ss1PuD+fwAAAAAAAAAAAAB49M1evnJuotWavlTFxo6iEdVEt2Gjqo14NJqx1kbFf5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAl/wYAAP//esD1Ug==") 11.461071279s ago: executing program 5 (id=1880): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x2, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) 11.379458601s ago: executing program 3 (id=1881): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) write(0xffffffffffffffff, &(0x7f00000001c0)='+=0\n', 0x4) preadv(r0, &(0x7f00000016c0)=[{&(0x7f00000002c0)=""/164, 0xa4}], 0x1, 0x1000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x4}, {}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) 11.377211101s ago: executing program 2 (id=1882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9, 0x33d}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000440)="80", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 11.332038602s ago: executing program 1 (id=1883): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 11.319186143s ago: executing program 1 (id=1884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11.245958694s ago: executing program 4 (id=1885): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000200)=0x1, 0x4) 11.158797136s ago: executing program 5 (id=1886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) close(0x3) 10.314173107s ago: executing program 4 (id=1887): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xa0c0) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x1a00404, &(0x7f00000003c0), 0x1, 0xbac, &(0x7f00000017c0)="$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") syz_emit_ethernet(0x192, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x300001a, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2b6, &(0x7f0000000100)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x7f, 0x204, 0x0, 0x0, 0x20, 0x11, "79820fde98abdd00b771eecbbba14da08fe8cfcf2d39005755e339df6e3474ee07e13a269fce2bb3dc5ed34394903821e81be586d9ee749d76a7285644943ebe", "ba646f857993f0c5787944d335671e614090022d722436df22213419a5999377aead1d59f9928abd899cc24fbe73d652739fc43c0e45ac5209ccdc91ae82cb81", "e462775f9527ad4d3ff445ff0000008010cdbbf76e69950600", [0x1ce, 0x20000001]}) 10.246445429s ago: executing program 4 (id=1888): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x48, r3, 0x1, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 450.262269ms ago: executing program 3 (id=1889): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7", 0x38, 0x800, 0x0, 0x0) 434.076379ms ago: executing program 3 (id=1890): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c1}, 0x20040000) 409.81405ms ago: executing program 2 (id=1891): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="3c0000001000030400000000fedbdf2500007400", @ANYRES32, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c000280050019000200000019cc0ddcb94e6e4ac8f4a312767aeb2cd15ccd59e3b66954a7133bccfa7bf0b91c99675ab386f8d52562b3128e9b938a98ed3fdba74f8d6458b101bade3446de0784a3d4812f1ab596e62bd2d330a3684fb41acc279e28aa97aff3dd65c1ad3b50b63111c8d33ff777d7142c7aac0be0de4ed41d4aadf9f28d05003acee48280ee818281"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) 339.265872ms ago: executing program 4 (id=1892): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9b", 0x6, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000700)=""/249, 0xffffffffffffffdb, 0x10020, 0x0, 0x0) 336.863742ms ago: executing program 2 (id=1893): accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x0) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10000, &(0x7f0000000540)=ANY=[@ANYBLOB="646d61636b3d30303030303030303030303030303030303030303030302c646d61736b3d30303030303030303030303030303030303030303030362c5569643dcc4fd83d9844fc59bd26070e396465302d08b9712ed3a96661c644292aab6b0ff262f1a4eb4dfeda1a01727abeb7b97f5ffe52b0dc425ab28b92763bec0fc297d1c97a9de1624086aaf3cdc768b6599ebde4", @ANYRESHEX=0xee00, @ANYBLOB=',dmask=00000000000000000000005,fmask=00000000000000000000001,zero_size_dir,iocharset=iso8859-7,dmask=00000000000000000002001,iocharset=macroman,errors=continue,\x00'], 0x1, 0x1533, &(0x7f0000006800)="$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") fchmodat(0xffffffffffffff9c, 0x0, 0x17f) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0], 0x1, 0x2c2, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1) mknodat$loop(r0, 0x0, 0x200, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x850}, 0x40000) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x1810882, &(0x7f0000000040)=ANY=[], 0x0, 0x2c3, &(0x7f0000000240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='dummy_udc.0', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='\n', 0x1) sendmsg$nl_route(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x48001) 286.188513ms ago: executing program 5 (id=1894): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 285.856433ms ago: executing program 1 (id=1895): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000580)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x150) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r1, 0xc0406619, &(0x7f0000000140)={@id={0x2, 0x0, @c}}) 0s ago: executing program 5 (id=1896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$kcm(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x2, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) kernel console output (not intermixed with test programs): 77][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.374328][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.375744][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.377918][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.379504][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.380956][ T4333] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.382569][ T4333] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.385559][ T4333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.395978][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.397951][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.399784][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.401564][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.403878][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.404848][ T4412] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 34.405619][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.409816][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.416833][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.418518][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.420301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.421865][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.430539][ T4338] device veth0_macvtap entered promiscuous mode [ 34.439034][ T4333] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.442658][ T4333] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.445361][ T4333] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.446821][ T4333] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.469857][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.471515][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.485891][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.488754][ T4338] device veth1_macvtap entered promiscuous mode [ 34.495296][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.496667][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.498491][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.500040][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.509499][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.511314][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.515303][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.517245][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.527294][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.529132][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.530757][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.532508][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.536677][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.539702][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.546641][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.549689][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.551419][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.553863][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.555568][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.561071][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.562604][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.564437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.565988][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.567653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.578144][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.581646][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.583865][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.586087][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.587858][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.589626][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.591381][ T4338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.598574][ T4338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.601000][ T4338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.613111][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.614919][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.628055][ T4328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.646455][ T4328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.651490][ T4328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.657703][ T4328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.765394][ T4338] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.767338][ T4338] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.768988][ T4338] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.770472][ T4338] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.001486][ T4388] libceph: connect (1)[c::]:6789 error -101 [ 35.015518][ T4388] libceph: mon0 (1)[c::]:6789 connect error [ 35.273404][ T4388] libceph: connect (1)[c::]:6789 error -101 [ 35.274661][ T4388] libceph: mon0 (1)[c::]:6789 connect error [ 35.368464][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.369934][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.373134][ T4345] Bluetooth: hci0: command 0x041b tx timeout [ 35.376413][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.382880][ T4337] Bluetooth: hci2: command 0x041b tx timeout [ 35.384026][ T4337] Bluetooth: hci1: command 0x041b tx timeout [ 35.385114][ T4337] Bluetooth: hci4: command 0x041b tx timeout [ 35.386111][ T4337] Bluetooth: hci3: command 0x041b tx timeout [ 35.403547][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.405103][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.411916][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.421856][ T4422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.427814][ T4422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.436058][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.451683][ T4422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.458566][ T4422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.461655][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.464028][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.467507][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.469653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.500606][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.503126][ T4419] ceph: No mds server is up or the cluster is laggy [ 35.505560][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.507113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.569981][ T4434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.571932][ T4434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.613339][ T4432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 35.634348][ T4438] device syzkaller0 entered promiscuous mode [ 35.790774][ T4448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13'. [ 35.800585][ T4382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 35.802193][ T4382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 36.099467][ T4452] jffs2: notice: (4452) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 36.144535][ T4455] netlink: 'syz.4.15': attribute type 82 has an invalid length. [ 36.676320][ T4467] file system registered [ 36.680671][ T4467] read descriptors [ 36.693639][ T4333] ffs_data_put(): freeing [ 36.857146][ T4471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 37.127394][ T4489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.129208][ T4489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.405869][ T4492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.409105][ T4492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.411974][ T4492] jffs2: notice: (4492) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 37.454225][ T4337] Bluetooth: hci3: command 0x040f tx timeout [ 37.455306][ T4337] Bluetooth: hci4: command 0x040f tx timeout [ 37.456342][ T4337] Bluetooth: hci1: command 0x040f tx timeout [ 37.457389][ T4337] Bluetooth: hci2: command 0x040f tx timeout [ 37.458466][ T4337] Bluetooth: hci0: command 0x040f tx timeout [ 37.656864][ T4496] netlink: 88 bytes leftover after parsing attributes in process `syz.2.26'. [ 37.730438][ T4498] binder: 4497:4498 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 38.287085][ T4507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.312136][ T27] audit: type=1326 audit(38.290:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4505 comm="syz.0.29" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff98d79228 code=0x0 [ 38.575887][ T4514] netlink: 'syz.1.31': attribute type 4 has an invalid length. [ 38.817448][ T27] audit: type=1326 audit(38.800:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.1.32" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3f79228 code=0x7ffc0000 [ 38.830386][ T27] audit: type=1326 audit(38.810:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.1.32" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3f79228 code=0x7ffc0000 [ 38.844462][ T27] audit: type=1326 audit(38.810:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.1.32" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3f79228 code=0x7ffc0000 [ 38.887112][ T27] audit: type=1326 audit(38.810:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.1.32" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3f79228 code=0x7ffc0000 [ 38.891154][ T27] audit: type=1326 audit(38.810:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.1.32" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=140 compat=0 ip=0xffffb3f79228 code=0x7ffc0000 [ 38.895575][ T27] audit: type=1326 audit(38.810:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.1.32" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3f79228 code=0x7ffc0000 [ 38.900028][ T27] audit: type=1326 audit(38.810:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.1.32" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3f79228 code=0x7ffc0000 [ 38.903983][ T27] audit: type=1326 audit(38.810:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.1.32" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3f79228 code=0x7ffc0000 [ 38.907919][ T27] audit: type=1326 audit(38.810:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4516 comm="syz.1.32" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb3f79228 code=0x7ffc0000 [ 38.982818][ T4523] 9pnet_virtio: no channels available for device 127.0.0.1 [ 39.467846][ T4525] Zero length message leads to an empty skb [ 39.533193][ T4345] Bluetooth: hci0: command 0x0419 tx timeout [ 39.534302][ T4345] Bluetooth: hci2: command 0x0419 tx timeout [ 39.535419][ T4345] Bluetooth: hci1: command 0x0419 tx timeout [ 39.536441][ T4345] Bluetooth: hci4: command 0x0419 tx timeout [ 39.537386][ T4345] Bluetooth: hci3: command 0x0419 tx timeout [ 39.549877][ T4529] device syzkaller0 entered promiscuous mode [ 39.752028][ T4543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.760497][ T4543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.023441][ T4558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.380576][ T4569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.389338][ T4569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.591885][ T4573] 9pnet_virtio: no channels available for device 127.0.0.1 [ 41.032132][ T4576] TC_ACT_REPEAT abuse ? [ 41.757142][ T4623] netlink: 'syz.0.69': attribute type 4 has an invalid length. [ 41.861339][ T4629] 9pnet_virtio: no channels available for device 127.0.0.1 [ 42.108728][ T4628] netlink: 'syz.3.71': attribute type 1 has an invalid length. [ 42.117313][ T4628] device bond1 entered promiscuous mode [ 42.122007][ T4628] bond1 (unregistering): Released all slaves [ 42.440566][ T4646] device syzkaller0 entered promiscuous mode [ 42.443868][ T4648] jffs2: notice: (4648) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 42.446974][ T4646] tipc: Started in network mode [ 42.448162][ T4646] tipc: Node identity ca74014105e5, cluster identity 4711 [ 42.449737][ T4646] tipc: Enabled bearer , priority 0 [ 42.451545][ T4642] tipc: Resetting bearer [ 42.548310][ T4642] tipc: Disabling bearer [ 42.606991][ T4662] netlink: 88 bytes leftover after parsing attributes in process `syz.0.83'. [ 42.690022][ T4675] binder: 4673:4675 tried to acquire reference to desc 0, got 1 instead [ 42.691747][ T4675] binder: 4673:4675 BC_REQUEST_DEATH_NOTIFICATION death notification already set [ 42.798341][ T4678] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 42.857004][ T4682] lo speed is unknown, defaulting to 1000 [ 42.858065][ T4682] lo speed is unknown, defaulting to 1000 [ 42.894060][ T4682] lo speed is unknown, defaulting to 1000 [ 42.896846][ T4682] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 42.906355][ T4682] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 42.920088][ T4686] device syzkaller0 entered promiscuous mode [ 43.028944][ T4692] 9pnet_virtio: no channels available for device 127.0.0.1 [ 43.306417][ T4682] lo speed is unknown, defaulting to 1000 [ 43.311202][ T4682] lo speed is unknown, defaulting to 1000 [ 43.313457][ T4682] lo speed is unknown, defaulting to 1000 [ 43.314638][ T4682] lo speed is unknown, defaulting to 1000 [ 43.323198][ T4682] lo speed is unknown, defaulting to 1000 [ 43.324372][ T4682] lo speed is unknown, defaulting to 1000 [ 43.325685][ T4682] lo speed is unknown, defaulting to 1000 [ 43.606906][ T4711] lo speed is unknown, defaulting to 1000 [ 43.652748][ T3901] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 43.837292][ T3901] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 43.838935][ T3901] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 43.841520][ T3901] usb 1-1: config 0 has no interface number 0 [ 43.844960][ T3901] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 43.848806][ T4722] using random self ethernet address [ 43.849336][ T3901] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 43.850289][ T4722] using random host ethernet address [ 43.851557][ T3901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.873767][ T3901] usb 1-1: config 0 descriptor?? [ 43.883404][ T3901] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 43.889594][ T4718] device syzkaller0 entered promiscuous mode [ 44.191226][ T4745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.120'. [ 44.194086][ T4747] lo speed is unknown, defaulting to 1000 [ 44.418775][ T4766] device syzkaller0 entered promiscuous mode [ 44.549202][ T4772] lo speed is unknown, defaulting to 1000 [ 44.728764][ T4380] usb 1-1: USB disconnect, device number 2 [ 44.928085][ T4338] ffs_data_put(): freeing [ 44.968061][ T4806] lo speed is unknown, defaulting to 1000 [ 45.000364][ T4810] device syzkaller0 entered promiscuous mode [ 45.851852][ T4338] ffs_data_put(): freeing [ 45.931964][ T4846] netlink: 'syz.4.165': attribute type 4 has an invalid length. [ 45.946257][ T4844] device syzkaller0 entered promiscuous mode [ 46.180277][ T4863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 46.252208][ T4333] ffs_data_put(): freeing [ 46.376582][ T4877] netlink: 'syz.1.178': attribute type 4 has an invalid length. [ 46.739253][ T4381] libceph: connect (1)[c::]:6789 error -101 [ 46.739632][ T4888] device syzkaller0 entered promiscuous mode [ 46.740430][ T4381] libceph: mon0 (1)[c::]:6789 connect error [ 46.785296][ T4891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.183'. [ 47.016260][ T3435] libceph: connect (1)[c::]:6789 error -101 [ 47.018580][ T3435] libceph: mon0 (1)[c::]:6789 connect error [ 47.278739][ T4886] ceph: No mds server is up or the cluster is laggy [ 47.473889][ T4912] netlink: 'syz.3.191': attribute type 4 has an invalid length. [ 47.535009][ T4918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'. [ 47.620000][ T4920] device syzkaller0 entered promiscuous mode [ 47.702844][ T4379] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 47.888321][ T4379] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 47.890002][ T4379] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.891566][ T4379] usb 1-1: Product: syz [ 47.892305][ T4379] usb 1-1: Manufacturer: syz [ 47.893658][ T4379] usb 1-1: SerialNumber: syz [ 47.900416][ T4379] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 47.908106][ T4379] usb 1-1: Direct firmware load for ath9k_htc/htc_9271-1.4.0.fw failed with error -2 [ 47.909622][ T4379] usb 1-1: Falling back to sysfs fallback for: ath9k_htc/htc_9271-1.4.0.fw [ 47.941982][ T4931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 48.119499][ T4937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.201'. [ 48.127273][ T4378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.128789][ T4378] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.704000][ T3435] libceph: connect (1)[c::]:6789 error -101 [ 48.705287][ T3435] libceph: mon0 (1)[c::]:6789 connect error [ 48.728784][ T4945] netlink: 'syz.3.204': attribute type 4 has an invalid length. [ 48.963024][ T4388] libceph: connect (1)[c::]:6789 error -101 [ 48.965638][ T4388] libceph: mon0 (1)[c::]:6789 connect error [ 49.222138][ T4941] ceph: No mds server is up or the cluster is laggy [ 49.474341][ T4969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.212'. [ 49.844342][ T4978] netlink: 'syz.4.215': attribute type 4 has an invalid length. [ 49.997724][ T4984] jffs2: notice: (4984) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 50.446638][ T4378] usb 1-1: USB disconnect, device number 3 [ 50.518083][ T5019] syz.3.230 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=2, oom_score_adj=1000 [ 50.522568][ T5019] CPU: 1 PID: 5019 Comm: syz.3.230 Not tainted syzkaller #0 [ 50.523974][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 50.525892][ T5019] Call trace: [ 50.526520][ T5019] dump_backtrace+0x1c4/0x1f0 [ 50.527358][ T5019] show_stack+0x2c/0x3c [ 50.528151][ T5019] __dump_stack+0x30/0x40 [ 50.528874][ T5019] dump_stack_lvl+0xf4/0x15c [ 50.529659][ T5019] dump_stack+0x1c/0x5c [ 50.530305][ T5019] dump_header+0xc0/0x724 [ 50.530998][ T5019] oom_kill_process+0x35c/0x660 [ 50.531802][ T5019] out_of_memory+0xbf0/0xf70 [ 50.532521][ T5019] mem_cgroup_out_of_memory+0x228/0x2d0 [ 50.533519][ T5019] try_charge_memcg+0xa4c/0x1390 [ 50.534443][ T5019] obj_cgroup_charge+0x178/0x2e4 [ 50.535365][ T5019] __kmem_cache_alloc_node+0xf0/0x318 [ 50.536330][ T5019] __kmalloc_node_track_caller+0xb8/0x174 [ 50.537267][ T5019] kmemdup+0x5c/0x98 [ 50.537896][ T5019] __addrconf_sysctl_register+0xc0/0x380 [ 50.538808][ T5019] addrconf_init_net+0x428/0x648 [ 50.539588][ T5019] ops_init+0x2b0/0x53c [ 50.540300][ T5019] setup_net+0x494/0xb6c [ 50.541000][ T5019] copy_net_ns+0x2b8/0x578 [ 50.541747][ T5019] create_new_namespaces+0x30c/0x604 [ 50.542596][ T5019] unshare_nsproxy_namespaces+0x108/0x160 [ 50.543498][ T5019] ksys_unshare+0x3f0/0x70c [ 50.544228][ T5019] __arm64_sys_unshare+0x3c/0x50 [ 50.545019][ T5019] invoke_syscall+0x98/0x290 [ 50.545770][ T5019] el0_svc_common+0x13c/0x258 [ 50.546520][ T5019] do_el0_svc+0x5c/0x134 [ 50.547207][ T5019] el0_svc+0x58/0x128 [ 50.547856][ T5019] el0t_64_sync_handler+0x84/0xf0 [ 50.548629][ T5019] el0t_64_sync+0x18c/0x190 [ 50.568077][ T5019] memory: usage 96kB, limit 96kB, failcnt 33 [ 50.569457][ T5019] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 50.571059][ T5019] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 50.575493][ T5026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.235'. [ 50.576044][ T5019] Memory cgroup stats for /syz3/test: [ 50.577418][ T5019] anon 0 [ 50.577418][ T5019] file 0 [ 50.577418][ T5019] kernel 98304 [ 50.577418][ T5019] kernel_stack 0 [ 50.577418][ T5019] pagetables 0 [ 50.577418][ T5019] sec_pagetables 0 [ 50.577418][ T5019] percpu 0 [ 50.577418][ T5019] sock 0 [ 50.577418][ T5019] vmalloc 0 [ 50.577418][ T5019] shmem 0 [ 50.577418][ T5019] zswap 0 [ 50.577418][ T5019] zswapped 0 [ 50.577418][ T5019] file_mapped 0 [ 50.577418][ T5019] file_dirty 0 [ 50.577418][ T5019] file_writeback 0 [ 50.577418][ T5019] swapcached 0 [ 50.577418][ T5019] anon_thp 0 [ 50.577418][ T5019] file_thp 0 [ 50.577418][ T5019] shmem_thp 0 [ 50.577418][ T5019] inactive_anon 0 [ 50.577418][ T5019] active_anon 0 [ 50.577418][ T5019] inactive_file 0 [ 50.577418][ T5019] active_file 0 [ 50.577418][ T5019] unevictable 0 [ 50.577418][ T5019] slab_reclaimable 20072 [ 50.577418][ T5019] slab_unreclaimable 77040 [ 50.577418][ T5019] slab 97112 [ 50.577418][ T5019] workingset_refault_anon 0 [ 50.581252][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.596408][ T5019] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=test,mems_allowed=0,oom_memcg=/syz3/test,task_memcg=/syz3/test,task=syz.3.230,pid=5017,uid=0 [ 50.600070][ T5019] Memory cgroup out of memory: Killed process 5017 (syz.3.230) total-vm:102180kB, anon-rss:1368kB, file-rss:21704kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 50.600577][ T112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.381218][ T5047] netlink: 20 bytes leftover after parsing attributes in process `syz.4.244'. [ 51.506587][ T5052] netlink: 20 bytes leftover after parsing attributes in process `syz.1.246'. [ 51.605263][ T5053] netlink: 20 bytes leftover after parsing attributes in process `syz.0.247'. [ 51.609541][ T4388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.611110][ T4388] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.938681][ T5079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.258'. [ 52.058590][ T5086] device syzkaller0 entered promiscuous mode [ 52.693942][ T5110] netlink: 20 bytes leftover after parsing attributes in process `syz.2.271'. [ 53.052630][ T5084] Set syz1 is full, maxelem 65536 reached [ 53.299800][ T5140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.284'. [ 53.817085][ T5165] netlink: 20 bytes leftover after parsing attributes in process `syz.0.296'. [ 54.030254][ T5178] MTD: Couldn't look up './dev/mtdblock0': -2 [ 54.112929][ T5188] netlink: 20 bytes leftover after parsing attributes in process `syz.4.307'. [ 55.025722][ T5215] MTD: Couldn't look up './dev/mtdblock0': -2 [ 55.159177][ T5220] netlink: 20 bytes leftover after parsing attributes in process `syz.0.319'. [ 55.900281][ T5244] MTD: Couldn't look up './dev/mtdblock0': -2 [ 56.035127][ T5254] netlink: 60 bytes leftover after parsing attributes in process `syz.2.333'. [ 56.041594][ T5256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.334'. [ 56.369244][ T5270] MTD: Couldn't look up './dev/mtdblock0': -2 [ 56.811961][ T5285] netlink: 80 bytes leftover after parsing attributes in process `syz.4.346'. [ 56.834360][ T5286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.347'. [ 56.929781][ T5295] MTD: Couldn't look up './dev/mtdblock0': -2 [ 57.271430][ T5312] netlink: 80 bytes leftover after parsing attributes in process `syz.3.358'. [ 57.357076][ T5320] MTD: Couldn't look up './dev/mtdblock0': -2 [ 59.058060][ T5348] MTD: Couldn't look up './dev/mtdblock0': -2 [ 59.079860][ T5350] netlink: 80 bytes leftover after parsing attributes in process `syz.4.375'. [ 59.107642][ T5352] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 61.265699][ T5376] MTD: Couldn't look up './dev/mtdblock0': -2 [ 61.287124][ T5378] netlink: 72 bytes leftover after parsing attributes in process `syz.0.386'. [ 64.494886][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.496071][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.960690][ T5405] syz.4.396 uses obsolete (PF_INET,SOCK_PACKET) [ 67.889232][ T5331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'. [ 67.920395][ T5410] MTD: Couldn't look up './dev/mtdblock0': -2 [ 68.235943][ T5422] netlink: 72 bytes leftover after parsing attributes in process `syz.2.400'. [ 68.318727][ T5424] netlink: 20 bytes leftover after parsing attributes in process `syz.3.402'. [ 68.558270][ T5437] MTD: Couldn't look up './dev/mtdblock0': -2 [ 69.238207][ T5460] ICMPv6: NDISC: Failed to initialize the control socket (err -105) [ 69.614118][ T14] cfg80211: failed to load regulatory.db [ 71.510982][ T5468] netlink: 72 bytes leftover after parsing attributes in process `syz.1.417'. [ 79.394456][ T5442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 79.487480][ T5485] MTD: Couldn't look up './dev/mtdblock0': -2 [ 79.925991][ T5521] MTD: Couldn't look up './dev/mtdblock0': -2 [ 82.628162][ T5535] ICMPv6: NDISC: Failed to initialize the control socket (err -105) [ 90.504456][ T5515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.431'. [ 90.513519][ T5531] bridge0: port 3(vlan2) entered blocking state [ 90.514652][ T5531] bridge0: port 3(vlan2) entered disabled state [ 90.581277][ T5538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.609707][ T5538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.733987][ T5550] MTD: Couldn't look up './dev/mtdblock0': -2 [ 90.870116][ T5569] loop5: detected capacity change from 0 to 7 [ 90.877111][ T5536] Dev loop5: unable to read RDB block 7 [ 90.878660][ T5536] loop5: AHDI p1 [ 90.879357][ T5536] loop5: partition table partially beyond EOD, truncated [ 90.893505][ T5569] Dev loop5: unable to read RDB block 7 [ 90.894643][ T5569] loop5: AHDI p1 [ 90.895294][ T5569] loop5: partition table partially beyond EOD, truncated [ 90.938994][ T5572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.450'. [ 90.957685][ T5574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.453'. [ 91.230016][ T5590] MTD: Couldn't look up './dev/mtdblock0': -2 [ 91.526729][ T5603] fuse: Unknown parameter '00000000000000000000' [ 91.611497][ T5608] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 91.653070][ T5610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.465'. [ 91.669967][ T5608] device syzkaller0 entered promiscuous mode [ 91.686786][ T5613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.468'. [ 92.015363][ T5622] MTD: Couldn't look up './dev/mtdblock0': -2 [ 92.294846][ T5646] netlink: 20 bytes leftover after parsing attributes in process `syz.2.482'. [ 92.326110][ T5642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 92.362577][ T5648] netlink: 24 bytes leftover after parsing attributes in process `syz.4.483'. [ 103.286941][ T5687] netlink: 4 bytes leftover after parsing attributes in process `syz.1.498'. [ 103.527652][ T5718] device syzkaller0 entered promiscuous mode [ 104.378096][ T5741] ICMPv6: NDISC: Failed to initialize the control socket (err -105) [ 110.588262][ T4379] usb 1-1: ath9k_htc: Firmware htc_9271.fw requested [ 110.589718][ T4379] usb 1-1: Direct firmware load for htc_9271.fw failed with error -2 [ 110.591117][ T4379] usb 1-1: Falling back to sysfs fallback for: htc_9271.fw [ 114.201574][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.511'. [ 114.346837][ T5758] No source specified [ 114.420132][ T5764] No source specified [ 114.458009][ T5769] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.459726][ T5769] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.461139][ T5769] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.462518][ T5769] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.480713][ T5769] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.482278][ T5769] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.483843][ T5769] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.485145][ T5769] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.616684][ T5774] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.618234][ T5774] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.619608][ T5774] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.620950][ T5774] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.626188][ T5774] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.627767][ T5774] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.629140][ T5774] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.630772][ T5774] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.721884][ T5776] device syzkaller0 entered promiscuous mode [ 125.537781][ T5781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.528'. [ 125.656331][ T5813] No source specified [ 125.658069][ T5809] No source specified [ 125.673176][ T5811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.535'. [ 125.897965][ T5832] jffs2: notice: (5832) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 125.933735][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.935112][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.001471][ T5837] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received [ 126.389000][ T5851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.548'. [ 126.658742][ T5856] No source specified [ 126.757447][ T5863] No source specified [ 126.821008][ T5868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.555'. [ 137.785228][ T5919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.569'. [ 137.826480][ T5923] sctp: [Deprecated]: syz.1.567 (pid 5923) Use of int in max_burst socket option. [ 137.826480][ T5923] Use struct sctp_assoc_value instead [ 138.230690][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'. [ 138.231996][ T5938] loop4: detected capacity change from 0 to 512 [ 138.233731][ T5933] sctp: [Deprecated]: syz.2.573 (pid 5933) Use of int in max_burst socket option. [ 138.233731][ T5933] Use struct sctp_assoc_value instead [ 138.270544][ T5938] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.339239][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 138.395506][ T5951] loop4: detected capacity change from 0 to 128 [ 138.712118][ T5954] loop3: detected capacity change from 0 to 256 [ 139.037491][ T5954] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.039681][ T5954] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 139.050529][ T5954] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 139.071064][ T5958] loop0: detected capacity change from 0 to 256 [ 139.082770][ T5958] ======================================================= [ 139.082770][ T5958] WARNING: The mand mount option has been deprecated and [ 139.082770][ T5958] and is ignored by this kernel. Remove the mand [ 139.082770][ T5958] option from the mount to silence this warning. [ 139.082770][ T5958] ======================================================= [ 139.103539][ T5958] FAT-fs (loop0): Directory bread(block 64) failed [ 139.103846][ T5951] EXT4-fs (loop4): Test dummy encryption mode enabled [ 139.105039][ T5958] FAT-fs (loop0): Directory bread(block 65) failed [ 139.107667][ T5951] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 139.110106][ T5958] FAT-fs (loop0): Directory bread(block 66) failed [ 139.114630][ T5958] FAT-fs (loop0): Directory bread(block 67) failed [ 139.116018][ T5958] FAT-fs (loop0): Directory bread(block 68) failed [ 139.116031][ T5951] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 139.122569][ T5958] FAT-fs (loop0): Directory bread(block 69) failed [ 139.153345][ T5958] FAT-fs (loop0): Directory bread(block 70) failed [ 139.156879][ T5958] FAT-fs (loop0): Directory bread(block 71) failed [ 139.158182][ T5958] FAT-fs (loop0): Directory bread(block 72) failed [ 139.163235][ T5958] FAT-fs (loop0): Directory bread(block 73) failed [ 139.514185][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 139.542157][ T5974] loop3: detected capacity change from 0 to 4096 [ 139.543810][ T5974] EXT4-fs: inline encryption not supported [ 139.546539][ T5974] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 139.548083][ T5974] EXT4-fs (loop3): Test dummy encryption mode enabled [ 139.552489][ T5974] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 139.557039][ T5974] System zones: 0-5 [ 139.563227][ T5974] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 139.571774][ T5974] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 139.617116][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.583'. [ 139.709097][ T5974] EXT4-fs (loop3): unmounting filesystem. [ 151.618758][ T6031] ICMPv6: NDISC: Failed to initialize the control socket (err -105) [ 152.395515][ T6059] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 153.622761][ T4337] Bluetooth: hci2: command 0x0406 tx timeout [ 153.624023][ T4337] Bluetooth: hci1: command 0x0406 tx timeout [ 153.625052][ T4337] Bluetooth: hci0: command 0x0406 tx timeout [ 153.626017][ T4337] Bluetooth: hci3: command 0x0406 tx timeout [ 155.198377][ T4337] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.200454][ T4337] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.202042][ T4335] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.206103][ T4335] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.207543][ T4335] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.209046][ T4335] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 157.295924][ T4335] Bluetooth: hci5: command 0x0409 tx timeout [ 159.372741][ T4335] Bluetooth: hci5: command 0x041b tx timeout [ 161.462733][ T4345] Bluetooth: hci5: command 0x040f tx timeout [ 162.739997][ T6059] wg2 speed is unknown, defaulting to 1000 [ 162.742016][ T6059] wg2 speed is unknown, defaulting to 1000 [ 162.798089][ T6059] wg2 speed is unknown, defaulting to 1000 [ 162.840524][ T6059] infiniband syz2: set active [ 162.842130][ T4381] wg2 speed is unknown, defaulting to 1000 [ 162.845342][ T6059] infiniband syz2: added wg2 [ 162.854243][ T6059] infiniband syz2: Couldn't open port 1 [ 162.890490][ T6069] wg2 speed is unknown, defaulting to 1000 [ 162.896199][ T6059] RDS/IB: syz2: added [ 162.897157][ T6059] smc: adding ib device syz2 with port count 1 [ 162.903685][ T6059] smc: ib device syz2 port 1 has pnetid [ 162.906087][ T4381] wg2 speed is unknown, defaulting to 1000 [ 163.533568][ T4335] Bluetooth: hci5: command 0x0419 tx timeout [ 163.751446][ T6069] chnl_net:caif_netlink_parms(): no params data found [ 163.775955][ T6069] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.777159][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.778817][ T6069] device bridge_slave_0 entered promiscuous mode [ 163.781697][ T6069] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.784297][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.786395][ T6069] device bridge_slave_1 entered promiscuous mode [ 163.797072][ T6069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.799953][ T6069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.808386][ T6069] team0: Port device team_slave_0 added [ 163.811039][ T6069] team0: Port device team_slave_1 added [ 163.820054][ T6069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.821319][ T6069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.825876][ T6069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.828586][ T6069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.829711][ T6069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.837151][ T6069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.884690][ T6069] device hsr_slave_0 entered promiscuous mode [ 163.959437][ T6069] device hsr_slave_1 entered promiscuous mode [ 163.983211][ T6069] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.984566][ T6069] Cannot create hsr debugfs directory [ 163.985681][ T6059] wg2 speed is unknown, defaulting to 1000 [ 164.010453][ T6059] wg2 speed is unknown, defaulting to 1000 [ 164.207791][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.618'. [ 164.386612][ T6059] wg2 speed is unknown, defaulting to 1000 [ 164.393001][ T6069] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 164.434443][ T6069] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 164.434922][ T6059] wg2 speed is unknown, defaulting to 1000 [ 164.474475][ T6069] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 164.533711][ T6059] wg2 speed is unknown, defaulting to 1000 [ 164.534030][ T6069] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 164.599872][ T6069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.607766][ T6069] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.621446][ T6059] wg2 speed is unknown, defaulting to 1000 [ 164.626651][ T6006] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 164.628516][ T6006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.631378][ T6006] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.637807][ T6006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.639290][ T6006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.640928][ T6006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.643519][ T6006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.645132][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.646393][ T6006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.647920][ T6006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.649615][ T6006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.651359][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.652569][ T6006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.660185][ T6059] wg2 speed is unknown, defaulting to 1000 [ 164.662193][ T6006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.667160][ T6006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.670980][ T6006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.679995][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.684957][ T6069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.710186][ T6059] wg2 speed is unknown, defaulting to 1000 [ 164.749564][ T6069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.751791][ T6006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.753900][ T6006] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.763259][ T6059] wg2 speed is unknown, defaulting to 1000 [ 164.808599][ T6059] wg2 speed is unknown, defaulting to 1000 [ 164.846014][ T6059] wg2 speed is unknown, defaulting to 1000 [ 164.854903][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 164.856873][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 164.869082][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 164.871111][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 164.873781][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 164.875635][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 164.879051][ T6069] device veth0_vlan entered promiscuous mode [ 164.896902][ T6069] device veth1_vlan entered promiscuous mode [ 164.957237][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 164.959035][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 164.960640][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.962415][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.968127][ T6069] device veth0_macvtap entered promiscuous mode [ 164.982608][ T6069] device veth1_macvtap entered promiscuous mode [ 164.994933][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.997061][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.998759][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.000586][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.002240][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.008288][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.009996][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.011756][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.014669][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.016552][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.019365][ T6069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.020921][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.022484][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 165.027878][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.029979][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.034315][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.036159][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.044146][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.046042][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.047763][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.049422][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.051024][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.057397][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.059400][ T6069] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.061297][ T6069] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.064602][ T6069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.126232][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.131463][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.135387][ T6069] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.136818][ T6069] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.138211][ T6069] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.139578][ T6069] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.164980][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.167613][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.368342][ T4693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.482495][ T4361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.484244][ T4361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.485571][ T4361] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.547147][ T6129] netlink: 44 bytes leftover after parsing attributes in process `syz.5.612'. [ 166.578343][ T6150] wg2 speed is unknown, defaulting to 1000 [ 166.752665][ C1] sched: RT throttling activated [ 166.796783][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.628'. [ 167.062028][ T6162] wg2 speed is unknown, defaulting to 1000 [ 167.144179][ T6160] wg2 speed is unknown, defaulting to 1000 [ 167.917150][ T6199] wg2 speed is unknown, defaulting to 1000 [ 168.878070][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'. [ 169.480415][ T6222] wg2 speed is unknown, defaulting to 1000 [ 169.502235][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.5.653'. [ 169.522161][ T6223] wg2 speed is unknown, defaulting to 1000 [ 169.661282][ T6234] wg2 speed is unknown, defaulting to 1000 [ 169.878714][ T6250] jffs2: notice: (6250) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 169.952782][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 171.383906][ T6285] wg2 speed is unknown, defaulting to 1000 [ 171.414013][ T6285] wg2 speed is unknown, defaulting to 1000 [ 171.908064][ T6300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.673'. [ 171.979424][ T6306] jffs2: notice: (6306) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 172.014668][ T4379] usb 1-1: no suitable firmware found! [ 172.015698][ T4379] usb 1-1: ath9k_htc: Failed to get firmware htc_9271.fw [ 172.017607][ T4378] usb 1-1: ath9k_htc: USB layer deinitialized [ 173.207433][ T6328] MTD: Couldn't look up './dev/mtdblock0': -2 [ 173.272599][ T6331] jffs2: notice: (6331) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 173.358853][ T6340] wg2 speed is unknown, defaulting to 1000 [ 173.411948][ T6344] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 173.448785][ T6337] tipc: Enabling of bearer rejected, failed to enable media [ 173.605841][ T6344] lo speed is unknown, defaulting to 1000 [ 173.607032][ T6344] lo speed is unknown, defaulting to 1000 [ 173.608156][ T6344] lo speed is unknown, defaulting to 1000 [ 173.610724][ T6344] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 173.646177][ T6344] lo speed is unknown, defaulting to 1000 [ 173.647478][ T6344] lo speed is unknown, defaulting to 1000 [ 173.648627][ T6344] lo speed is unknown, defaulting to 1000 [ 173.649857][ T6344] lo speed is unknown, defaulting to 1000 [ 174.519659][ T6360] wg2 speed is unknown, defaulting to 1000 [ 174.536754][ T6363] wg2 speed is unknown, defaulting to 1000 [ 174.562832][ T6344] lo speed is unknown, defaulting to 1000 [ 174.565231][ T6360] lo speed is unknown, defaulting to 1000 [ 174.575750][ T6363] lo speed is unknown, defaulting to 1000 [ 174.586588][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.692'. [ 174.605342][ T6344] lo speed is unknown, defaulting to 1000 [ 174.606609][ T6344] lo speed is unknown, defaulting to 1000 [ 174.607715][ T6344] lo speed is unknown, defaulting to 1000 [ 174.608903][ T6344] lo speed is unknown, defaulting to 1000 [ 174.610101][ T6344] lo speed is unknown, defaulting to 1000 [ 174.611289][ T6344] lo speed is unknown, defaulting to 1000 [ 174.612490][ T6344] lo speed is unknown, defaulting to 1000 [ 174.613915][ T6344] lo speed is unknown, defaulting to 1000 [ 174.615306][ T6344] lo speed is unknown, defaulting to 1000 [ 174.616568][ T6344] lo speed is unknown, defaulting to 1000 [ 174.617686][ T6344] lo speed is unknown, defaulting to 1000 [ 175.599740][ T6384] jffs2: notice: (6384) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 175.642410][ T6386] MTD: Couldn't look up './dev/mtdblock0': -2 [ 176.055265][ T6407] wg2 speed is unknown, defaulting to 1000 [ 176.141013][ T6407] lo speed is unknown, defaulting to 1000 [ 176.277493][ T6405] wg2 speed is unknown, defaulting to 1000 [ 176.304845][ T6405] lo speed is unknown, defaulting to 1000 [ 176.477108][ T6422] tipc: Enabling of bearer rejected, failed to enable media [ 176.505106][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'. [ 176.621788][ T6428] wg2 speed is unknown, defaulting to 1000 [ 176.659336][ T6433] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 176.692519][ T6428] lo speed is unknown, defaulting to 1000 [ 176.712358][ T6437] jffs2: notice: (6437) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 176.779283][ T6440] jffs2: notice: (6440) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 176.796898][ T6428] siw: device registration error -23 [ 177.776317][ T6454] wg2 speed is unknown, defaulting to 1000 [ 177.861104][ T6454] lo speed is unknown, defaulting to 1000 [ 177.937944][ T6461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.721'. [ 178.162891][ T6467] wg2 speed is unknown, defaulting to 1000 [ 178.250953][ T6467] lo speed is unknown, defaulting to 1000 [ 178.364038][ T6467] wg2 speed is unknown, defaulting to 1000 [ 178.447071][ T6467] lo speed is unknown, defaulting to 1000 [ 178.540607][ T6474] jffs2: notice: (6474) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 178.703757][ T6484] device syzkaller0 entered promiscuous mode [ 178.718363][ T6484] tipc: Started in network mode [ 178.722568][ T6484] tipc: Node identity da828550157a, cluster identity 4711 [ 178.724769][ T6484] tipc: Enabled bearer , priority 0 [ 178.727231][ T6482] tipc: Resetting bearer [ 178.824083][ T6482] tipc: Disabling bearer [ 179.120950][ T6495] wg2 speed is unknown, defaulting to 1000 [ 179.138176][ T6495] lo speed is unknown, defaulting to 1000 [ 179.154832][ T6495] wg2 speed is unknown, defaulting to 1000 [ 179.171924][ T6495] lo speed is unknown, defaulting to 1000 [ 179.515858][ T6500] wg2 speed is unknown, defaulting to 1000 [ 179.616940][ T6507] wg2 speed is unknown, defaulting to 1000 [ 179.619260][ T6500] lo speed is unknown, defaulting to 1000 [ 179.639233][ T6507] lo speed is unknown, defaulting to 1000 [ 180.431990][ T6512] netlink: 4 bytes leftover after parsing attributes in process `syz.5.736'. [ 180.790344][ T6532] jffs2: notice: (6532) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 180.928246][ T6534] tipc: Enabling of bearer rejected, failed to enable media [ 181.321496][ T6546] wg2 speed is unknown, defaulting to 1000 [ 181.384031][ T6546] lo speed is unknown, defaulting to 1000 [ 181.445869][ T6548] wg2 speed is unknown, defaulting to 1000 [ 181.462039][ T6548] lo speed is unknown, defaulting to 1000 [ 181.503617][ T6551] wg2 speed is unknown, defaulting to 1000 [ 181.528216][ T6551] lo speed is unknown, defaulting to 1000 [ 181.891487][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.754'. [ 182.920939][ T6580] MTD: Couldn't look up './dev/mtdblock0': -2 [ 183.043794][ T6581] wg2 speed is unknown, defaulting to 1000 [ 183.381725][ T6596] wg2 speed is unknown, defaulting to 1000 [ 183.507336][ T6599] wg2 speed is unknown, defaulting to 1000 [ 183.670193][ T4329] ffs_data_put(): freeing [ 183.894420][ T6613] jffs2: notice: (6613) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 183.954025][ T6610] Process accounting resumed [ 184.343578][ T4335] Bluetooth: hci4: command 0x0406 tx timeout [ 184.922858][ T6633] ffs_data_put(): freeing [ 185.387549][ T6646] wg2 speed is unknown, defaulting to 1000 [ 185.422012][ T6646] wg2 speed is unknown, defaulting to 1000 [ 185.757138][ T6649] jffs2: notice: (6649) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 185.829891][ T6652] 9pnet_virtio: no channels available for device syz [ 186.034470][ T6669] ffs_data_put(): freeing [ 187.135437][ T6680] jffs2: notice: (6680) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 187.137898][ T6679] wg2 speed is unknown, defaulting to 1000 [ 187.257881][ T6697] ffs_data_put(): freeing [ 187.333869][ T6699] wg2 speed is unknown, defaulting to 1000 [ 187.365148][ T6699] wg2 speed is unknown, defaulting to 1000 [ 187.636391][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.639874][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 188.632424][ T6717] jffs2: notice: (6717) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 189.040977][ T4329] ffs_data_put(): freeing [ 189.147667][ T6746] jffs2: notice: (6746) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 189.199742][ T6751] binder: 6750:6751 tried to acquire reference to desc 0, got 1 instead [ 189.203798][ T6751] binder: 6750:6751 got transaction with invalid data ptr [ 189.205909][ T6751] binder: 6750:6751 transaction call to 6750:0 failed 9/29201/-14, size 0-24 line 3350 [ 189.208688][ T6135] binder: undelivered TRANSACTION_ERROR: 29201 [ 189.599393][ T6758] wg2 speed is unknown, defaulting to 1000 [ 190.451613][ T6763] wg2 speed is unknown, defaulting to 1000 [ 190.802134][ T6069] ffs_data_put(): freeing [ 190.860392][ T6779] MTD: Couldn't look up './dev/mtdblock0': -2 [ 190.993391][ T6791] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 192.078265][ T6799] wg2 speed is unknown, defaulting to 1000 [ 192.113146][ T6808] wg2 speed is unknown, defaulting to 1000 [ 192.226796][ T4339] ffs_data_put(): freeing [ 192.379069][ T6826] jffs2: notice: (6826) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 193.437808][ T4339] ffs_data_put(): freeing [ 194.116045][ T6844] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 194.155953][ T6848] wg2 speed is unknown, defaulting to 1000 [ 194.175101][ T6850] wg2 speed is unknown, defaulting to 1000 [ 194.260847][ T6864] jffs2: notice: (6864) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 194.545684][ T4338] ffs_data_put(): freeing [ 195.337607][ T6909] fuse: Bad value for 'fd' [ 195.470343][ T6914] TC_ACT_REPEAT abuse ? [ 195.771615][ T6940] wg2 speed is unknown, defaulting to 1000 [ 195.773484][ T6940] wg2 speed is unknown, defaulting to 1000 [ 195.774630][ T6940] wg2 speed is unknown, defaulting to 1000 [ 195.793684][ T6940] infiniband syz0: set active [ 195.794441][ T6940] infiniband syz0: added wg2 [ 195.799893][ T4382] wg2 speed is unknown, defaulting to 1000 [ 195.807920][ T6940] RDS/IB: syz0: added [ 195.808676][ T6940] smc: adding ib device syz0 with port count 1 [ 195.809704][ T6940] smc: ib device syz0 port 1 has pnetid [ 195.813352][ T6940] wg2 speed is unknown, defaulting to 1000 [ 195.830602][ T6940] wg2 speed is unknown, defaulting to 1000 [ 195.848376][ T6940] wg2 speed is unknown, defaulting to 1000 [ 195.864695][ T6940] wg2 speed is unknown, defaulting to 1000 [ 195.881907][ T6940] wg2 speed is unknown, defaulting to 1000 [ 195.891165][ T4382] wg2 speed is unknown, defaulting to 1000 [ 195.901333][ T6940] wg2 speed is unknown, defaulting to 1000 [ 195.918326][ T6940] wg2 speed is unknown, defaulting to 1000 [ 195.954558][ T6940] wg2 speed is unknown, defaulting to 1000 [ 195.971640][ T6940] wg2 speed is unknown, defaulting to 1000 [ 195.991501][ T6940] wg2 speed is unknown, defaulting to 1000 [ 196.008889][ T6940] wg2 speed is unknown, defaulting to 1000 [ 196.034039][ T6940] wg2 speed is unknown, defaulting to 1000 [ 196.050895][ T6940] wg2 speed is unknown, defaulting to 1000 [ 196.067799][ T6940] wg2 speed is unknown, defaulting to 1000 [ 196.084206][ T6940] wg2 speed is unknown, defaulting to 1000 [ 196.100936][ T6940] wg2 speed is unknown, defaulting to 1000 [ 196.188997][ T6965] jffs2: notice: (6965) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 196.203953][ T6967] Bluetooth: MGMT ver 1.22 [ 196.321214][ T6978] netlink: 'syz.3.887': attribute type 11 has an invalid length. [ 197.548731][ T7012] jffs2: notice: (7012) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 197.724983][ T7030] device veth0 entered promiscuous mode [ 197.732112][ T7030] device veth0 left promiscuous mode [ 198.253914][ T4335] Bluetooth: hci0: command 0x0c1a tx timeout [ 198.253957][ T4345] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 199.231637][ T7061] jffs2: notice: (7061) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 199.236829][ T7051] wg2 speed is unknown, defaulting to 1000 [ 199.254111][ T7051] wg2 speed is unknown, defaulting to 1000 [ 199.254119][ T7048] wg2 speed is unknown, defaulting to 1000 [ 199.272177][ T7048] wg2 speed is unknown, defaulting to 1000 [ 199.622070][ T7090] 8021q: VLANs not supported on ipvlan0 [ 200.493939][ T7092] printk: console [ttyS0] disabled [ 200.574112][ T7096] netlink: 'syz.4.921': attribute type 1 has an invalid length. [ 200.607849][ T7096] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.636952][ T7096] bond1: (slave dummy0): making interface the new active one [ 200.640705][ T7096] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 200.648689][ T4359] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 200.739709][ T7105] jffs2: notice: (7105) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 201.301862][ T7120] wg2 speed is unknown, defaulting to 1000 [ 201.319093][ T7120] wg2 speed is unknown, defaulting to 1000 [ 201.346467][ T7122] wg2 speed is unknown, defaulting to 1000 [ 201.366258][ T7122] wg2 speed is unknown, defaulting to 1000 [ 202.358019][ T7142] jffs2: notice: (7142) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 202.391214][ T7143] wg2 speed is unknown, defaulting to 1000 [ 202.467246][ T7143] wg2 speed is unknown, defaulting to 1000 [ 202.641468][ T7160] TC_ACT_REPEAT abuse ? [ 202.661108][ T7164] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 203.932546][ T7182] wg2 speed is unknown, defaulting to 1000 [ 204.020568][ T7182] wg2 speed is unknown, defaulting to 1000 [ 204.222179][ T7182] wg2 speed is unknown, defaulting to 1000 [ 204.257299][ T7182] wg2 speed is unknown, defaulting to 1000 [ 204.297154][ T7187] MTD: Couldn't look up './dev/mtdblock0': -2 [ 204.383992][ T7197] fuse: Bad value for 'fd' [ 204.439840][ T7202] vcan0: tx drop: invalid sa for name 0x0004000000000000 [ 205.603915][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.605580][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.609504][ T7225] jffs2: notice: (7225) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 205.761386][ T7234] fuse: Bad value for 'fd' [ 205.830974][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.976'. [ 206.274030][ T7248] wg2 speed is unknown, defaulting to 1000 [ 206.290352][ T7248] wg2 speed is unknown, defaulting to 1000 [ 206.290366][ T7246] wg2 speed is unknown, defaulting to 1000 [ 206.308481][ T7246] wg2 speed is unknown, defaulting to 1000 [ 206.477749][ T7261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.983'. [ 207.431748][ T7272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.986'. [ 207.456644][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'. [ 207.466127][ T7269] netlink: 'syz.1.986': attribute type 4 has an invalid length. [ 207.467462][ T7269] netlink: 152 bytes leftover after parsing attributes in process `syz.1.986'. [ 207.490870][ T7269] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 207.612618][ T7285] netlink: 'syz.1.989': attribute type 11 has an invalid length. [ 207.731446][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.995'. [ 208.078510][ T7305] wg2 speed is unknown, defaulting to 1000 [ 208.095162][ T7305] wg2 speed is unknown, defaulting to 1000 [ 208.120458][ T7307] wg2 speed is unknown, defaulting to 1000 [ 208.136408][ T7307] wg2 speed is unknown, defaulting to 1000 [ 208.320418][ T7316] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input4 [ 208.670689][ T7333] wg2 speed is unknown, defaulting to 1000 [ 209.449229][ T7340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1007'. [ 209.682485][ T7333] wg2 speed is unknown, defaulting to 1000 [ 209.697017][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1008'. [ 209.715727][ T7349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.717290][ T7349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.838996][ T7359] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 209.937796][ T7362] wg2 speed is unknown, defaulting to 1000 [ 210.027686][ T7362] wg2 speed is unknown, defaulting to 1000 [ 210.272558][ T7361] wg2 speed is unknown, defaulting to 1000 [ 210.306881][ T7361] wg2 speed is unknown, defaulting to 1000 [ 210.367662][ T7372] capability: warning: `syz.5.1017' uses deprecated v2 capabilities in a way that may be insecure [ 210.499843][ T7379] device syzkaller0 entered promiscuous mode [ 210.506362][ T7379] tipc: Started in network mode [ 210.507345][ T7379] tipc: Node identity 3a90630c0264, cluster identity 4711 [ 210.508773][ T7379] tipc: Enabled bearer , priority 0 [ 210.510646][ T7378] tipc: Resetting bearer [ 211.273704][ T7378] tipc: Disabling bearer [ 211.362159][ T7387] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1024'. [ 211.896933][ T7421] wg2 speed is unknown, defaulting to 1000 [ 211.913961][ T7421] wg2 speed is unknown, defaulting to 1000 [ 211.960425][ T7424] wg2 speed is unknown, defaulting to 1000 [ 212.044197][ T7424] wg2 speed is unknown, defaulting to 1000 [ 212.182498][ T7418] device syzkaller0 entered promiscuous mode [ 212.193133][ T7418] tipc: Enabled bearer , priority 0 [ 212.209752][ T7417] tipc: Resetting bearer [ 212.249627][ T7423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.294257][ T7417] tipc: Disabling bearer [ 213.175418][ T7439] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1042'. [ 213.320984][ T7446] TC_ACT_REPEAT abuse ? [ 213.335578][ T7448] ffs_data_put(): freeing [ 213.884702][ T7478] netlink: 'syz.2.1054': attribute type 11 has an invalid length. [ 213.925971][ T7464] wg2 speed is unknown, defaulting to 1000 [ 213.943378][ T7464] wg2 speed is unknown, defaulting to 1000 [ 213.943392][ T7467] wg2 speed is unknown, defaulting to 1000 [ 213.961217][ T7467] wg2 speed is unknown, defaulting to 1000 [ 213.987245][ T7456] device syzkaller0 entered promiscuous mode [ 214.045414][ T7490] fuse: Bad value for 'fd' [ 214.075417][ T7456] tipc: Started in network mode [ 214.076359][ T7456] tipc: Node identity 4a487ac2e796, cluster identity 4711 [ 214.077769][ T7456] tipc: Enabled bearer , priority 0 [ 215.060994][ T7500] rdma_rxe: already configured on wg2 [ 215.180602][ T7455] tipc: Resetting bearer [ 215.244022][ T7455] tipc: Disabling bearer [ 215.330872][ T7508] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1065'. [ 215.435606][ T7516] fuse: Bad value for 'fd' [ 215.452142][ T7519] netlink: 'syz.4.1069': attribute type 11 has an invalid length. [ 215.490299][ T7517] TC_ACT_REPEAT abuse ? [ 216.971553][ T7528] wg2 speed is unknown, defaulting to 1000 [ 216.989223][ T7528] wg2 speed is unknown, defaulting to 1000 [ 216.989241][ T7532] wg2 speed is unknown, defaulting to 1000 [ 217.008127][ T7532] wg2 speed is unknown, defaulting to 1000 [ 217.060691][ T7544] device syzkaller0 entered promiscuous mode [ 217.079205][ T7546] device syzkaller0 entered promiscuous mode [ 217.097896][ T7544] tipc: Enabled bearer , priority 0 [ 217.102385][ T7541] tipc: Resetting bearer [ 217.155747][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1083'. [ 217.161534][ T7554] fuse: Bad value for 'fd' [ 217.193599][ T7541] tipc: Disabling bearer [ 217.209952][ T7555] rdma_rxe: rxe_register_device failed with error -23 [ 217.211458][ T7555] rdma_rxe: failed to add wg2 [ 217.320067][ T7562] netlink: 'syz.4.1086': attribute type 11 has an invalid length. [ 217.375178][ T7566] TC_ACT_REPEAT abuse ? [ 217.400754][ T7572] binder: 7571:7572 tried to acquire reference to desc 0, got 1 instead [ 217.404541][ T7572] binder: 7571:7572 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 217.406760][ T7572] binder: 7572 RLIMIT_NICE not set [ 217.407530][ T7572] binder: 7572 RLIMIT_NICE not set [ 217.409791][ T7572] binder: 7572 RLIMIT_NICE not set [ 217.410665][ T7572] binder_alloc: 7571: binder_alloc_buf, no vma [ 217.411979][ T7572] binder: cannot allocate buffer: vma cleared, target dead or dying [ 217.412009][ T7572] binder: 7571:7572 transaction reply to 7571:7572 failed 15/29189/-3, size 0-0 line 3247 [ 217.416486][ T7572] binder: send failed reply for transaction 14 to 7571:7572 [ 217.418204][ T6135] binder: undelivered TRANSACTION_COMPLETE [ 217.419252][ T6135] binder: undelivered TRANSACTION_ERROR: 29189 [ 217.427040][ T6135] binder: undelivered TRANSACTION_ERROR: 29190 [ 217.787270][ T7576] wg2 speed is unknown, defaulting to 1000 [ 217.803698][ T7576] wg2 speed is unknown, defaulting to 1000 [ 217.811682][ T7577] wg2 speed is unknown, defaulting to 1000 [ 217.829085][ T7577] wg2 speed is unknown, defaulting to 1000 [ 217.919706][ T7590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1098'. [ 217.980708][ T7597] tipc: Enabling of bearer rejected, failed to enable media [ 218.500352][ T7635] device syzkaller0 entered promiscuous mode [ 218.525245][ T7635] tipc: Enabled bearer , priority 0 [ 218.536749][ T7634] tipc: Resetting bearer [ 218.597081][ T7639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1116'. [ 218.645380][ T7634] tipc: Disabling bearer [ 218.802397][ T7646] TC_ACT_REPEAT abuse ? [ 219.333926][ T7649] wg2 speed is unknown, defaulting to 1000 [ 219.351677][ T7649] wg2 speed is unknown, defaulting to 1000 [ 219.351689][ T7650] wg2 speed is unknown, defaulting to 1000 [ 219.371009][ T7650] wg2 speed is unknown, defaulting to 1000 [ 219.817866][ T7674] tipc: Enabled bearer , priority 0 [ 219.884433][ T7672] tipc: Disabling bearer [ 220.245892][ T7703] wg2 speed is unknown, defaulting to 1000 [ 220.334288][ T7703] wg2 speed is unknown, defaulting to 1000 [ 220.488355][ T7703] wg2 speed is unknown, defaulting to 1000 [ 220.507743][ T7703] wg2 speed is unknown, defaulting to 1000 [ 221.122846][ T7731] tipc: Enabling of bearer rejected, failed to enable media [ 221.126468][ T7738] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.127869][ T7738] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.129222][ T7738] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.130629][ T7738] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.156748][ T7738] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.158483][ T7738] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.159921][ T7738] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.161417][ T7738] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.638397][ T7736] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.640072][ T7736] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.641508][ T7736] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.642963][ T7736] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 221.656319][ T7736] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.658050][ T7736] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.659472][ T7736] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.661036][ T7736] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.779250][ T7749] wg2 speed is unknown, defaulting to 1000 [ 221.796794][ T7749] wg2 speed is unknown, defaulting to 1000 [ 221.796817][ T7750] wg2 speed is unknown, defaulting to 1000 [ 221.815135][ T7750] wg2 speed is unknown, defaulting to 1000 [ 222.008075][ T7777] tipc: Enabled bearer , priority 0 [ 222.011051][ T7776] tipc: Disabling bearer [ 222.057662][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1170'. [ 222.692732][ T7818] wg2 speed is unknown, defaulting to 1000 [ 222.760625][ T7818] wg2 speed is unknown, defaulting to 1000 [ 222.909685][ T7818] wg2 speed is unknown, defaulting to 1000 [ 222.946866][ T7818] wg2 speed is unknown, defaulting to 1000 [ 223.106844][ T7827] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.108492][ T7827] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.109879][ T7827] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.111324][ T7827] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.131467][ T7827] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.133195][ T7827] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.134708][ T7827] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.136110][ T7827] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.174969][ T7831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1186'. [ 223.238076][ T7832] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.239740][ T7832] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.241151][ T7832] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.242528][ T7832] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.251796][ T7832] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.253571][ T7832] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.255111][ T7832] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.256666][ T7832] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.346129][ T7823] tipc: Cannot configure node identity twice [ 223.404956][ T7842] tipc: Enabled bearer , priority 0 [ 223.494433][ T7841] tipc: Disabling bearer [ 223.966487][ T7869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1197'. [ 224.203816][ T7888] wg2 speed is unknown, defaulting to 1000 [ 224.266296][ T7888] wg2 speed is unknown, defaulting to 1000 [ 224.531296][ T7883] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.633936][ T7883] device bridge_slave_1 left promiscuous mode [ 224.635379][ T7883] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.769699][ T7884] wg2 speed is unknown, defaulting to 1000 [ 224.779401][ T7896] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.781339][ T7896] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.783063][ T7896] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.784496][ T7896] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.789926][ T7896] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.791562][ T7896] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.792964][ T7896] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.794423][ T7896] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.873664][ T7914] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received [ 224.885982][ T7899] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.887498][ T7899] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.888939][ T7899] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.890363][ T7899] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.893749][ T7899] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.895317][ T7899] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.896740][ T7899] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.898206][ T7899] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.980631][ T7884] wg2 speed is unknown, defaulting to 1000 [ 225.018661][ T7909] tipc: Enabled bearer , priority 0 [ 225.060382][ T7897] tipc: Disabling bearer [ 225.094906][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1210'. [ 225.773776][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1221'. [ 225.999187][ T7954] wg2 speed is unknown, defaulting to 1000 [ 226.031342][ T7954] wg2 speed is unknown, defaulting to 1000 [ 226.075499][ T7956] wg2 speed is unknown, defaulting to 1000 [ 226.185451][ T7956] wg2 speed is unknown, defaulting to 1000 [ 226.337862][ T7962] tipc: Enabled bearer , priority 0 [ 226.424092][ T7959] tipc: Disabling bearer [ 226.429696][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'. [ 226.431182][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1226'. [ 226.449316][ T7970] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.450911][ T7970] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.452212][ T7970] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.453677][ T7970] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 226.477596][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'. [ 226.479200][ T7976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1226'. [ 226.573976][ T7984] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received [ 226.596961][ T7988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1233'. [ 226.606868][ T7981] device syzkaller0 entered promiscuous mode [ 227.544618][ T8029] netlink: 'syz.4.1241': attribute type 11 has an invalid length. [ 227.951000][ T8000] cgroup: fork rejected by pids controller in /syz2 [ 237.687721][ T8060] tipc: Enabling of bearer rejected, failed to enable media [ 237.702371][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1244'. [ 237.725672][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'. [ 237.727249][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1246'. [ 237.741592][ T8067] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.743091][ T8067] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.744433][ T8067] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.745807][ T8067] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.766023][ T8067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1246'. [ 237.767618][ T8067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1246'. [ 237.822255][ T8069] wg2 speed is unknown, defaulting to 1000 [ 237.905348][ T8069] wg2 speed is unknown, defaulting to 1000 [ 238.105891][ T8069] wg2 speed is unknown, defaulting to 1000 [ 238.123792][ T8069] wg2 speed is unknown, defaulting to 1000 [ 238.177619][ T8075] fuse: Bad value for 'group_id' [ 238.620656][ T8087] netlink: 'syz.1.1255': attribute type 11 has an invalid length. [ 238.745719][ T8099] socket: no more sockets [ 238.776667][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1258'. [ 238.800720][ T8101] device syzkaller0 entered promiscuous mode [ 238.826338][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1259'. [ 238.827906][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1259'. [ 238.830700][ T8106] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.832222][ T8106] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.833938][ T8106] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.835536][ T8106] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.890191][ T8112] fuse: Bad value for 'group_id' [ 239.172384][ T8128] loop2: detected capacity change from 0 to 1024 [ 239.174183][ T8128] EXT4-fs: Ignoring removed mblk_io_submit option [ 239.507467][ T8128] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 248.813053][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.814250][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 250.003300][ T8106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1259'. [ 250.004830][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1259'. [ 250.006751][ T8117] tipc: Enabling of bearer rejected, failed to enable media [ 250.010391][ T8130] wg2 speed is unknown, defaulting to 1000 [ 250.027370][ T8131] wg2 speed is unknown, defaulting to 1000 [ 250.027717][ T8130] wg2 speed is unknown, defaulting to 1000 [ 250.046471][ T8131] wg2 speed is unknown, defaulting to 1000 [ 250.082959][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 250.123669][ T8138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1269'. [ 250.156586][ T8147] netlink: 'syz.1.1268': attribute type 11 has an invalid length. [ 250.158954][ T8140] TC_ACT_REPEAT abuse ? [ 250.227026][ T8153] fuse: Bad value for 'group_id' [ 250.297425][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.299439][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.343294][ T8161] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.344512][ T8161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.346289][ T8161] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.347489][ T8161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.349085][ T8161] device bridge0 entered promiscuous mode [ 250.424350][ T8167] loop5: detected capacity change from 0 to 256 [ 250.558619][ T8173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.564711][ T8173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.598289][ T8167] dummy_hcd dummy_hcd.0: remove, state 1 [ 250.599837][ T8167] usb usb1: USB disconnect, device number 1 [ 250.628634][ T8179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.631202][ T8179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.634963][ T8167] dummy_hcd dummy_hcd.0: stopped [ 250.635897][ T8167] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 250.696354][ T8184] loop5: detected capacity change from 0 to 512 [ 250.699314][ T8184] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 250.701854][ T8184] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 250.709518][ T8184] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.1287: bad orphan inode 3855 [ 250.712396][ T8184] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 250.758646][ T7298] libceph: connect (1)[c::]:6789 error -101 [ 250.759897][ T7298] libceph: mon0 (1)[c::]:6789 connect error [ 250.791640][ T6069] EXT4-fs (loop5): unmounting filesystem. [ 250.914861][ T8196] netlink: 'syz.3.1288': attribute type 1 has an invalid length. [ 250.914868][ T8188] ceph: No mds server is up or the cluster is laggy [ 251.059858][ T8202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.067079][ T8202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.151751][ T8215] loop2: detected capacity change from 0 to 128 [ 251.166597][ T8215] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 251.171858][ T27] kauditd_printk_skb: 100 callbacks suppressed [ 251.171866][ T27] audit: type=1326 audit(251.150:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.1298" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99379228 code=0x7ffc0000 [ 251.179237][ T27] audit: type=1326 audit(251.160:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.1298" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99379228 code=0x7ffc0000 [ 251.186088][ T27] audit: type=1326 audit(251.170:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.1298" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99379228 code=0x7ffc0000 [ 251.202447][ T27] audit: type=1326 audit(251.170:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.1298" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff99379228 code=0x7ffc0000 [ 251.206857][ T27] audit: type=1326 audit(251.170:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.1298" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99379228 code=0x7ffc0000 [ 251.211063][ T27] audit: type=1326 audit(251.170:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.1298" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99379228 code=0x7ffc0000 [ 251.215981][ T27] audit: type=1326 audit(251.170:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.1298" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99379228 code=0x7ffc0000 [ 251.220206][ T27] audit: type=1326 audit(251.170:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.1298" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=269 compat=0 ip=0xffff99379228 code=0x7ffc0000 [ 251.225215][ T27] audit: type=1326 audit(251.170:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.1298" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99379228 code=0x7ffc0000 [ 251.229223][ T27] audit: type=1326 audit(251.170:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz.2.1298" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99379228 code=0x7ffc0000 [ 251.242537][ T8220] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 251.244577][ T8220] FAT-fs (loop2): Filesystem has been set read-only [ 251.247100][ T8222] 9pnet_fd: Insufficient options for proto=fd [ 251.497390][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1315'. [ 251.640208][ T8268] TC_ACT_REPEAT abuse ? [ 251.709765][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1328'. [ 251.856682][ T8282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1331'. [ 251.858694][ T8288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1333'. [ 251.860415][ T8289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1333'. [ 251.949175][ T8299] loop4: detected capacity change from 0 to 512 [ 251.957840][ T8299] ext4: Unknown parameter 'nouser_xattr' [ 252.007198][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1341'. [ 252.027414][ T4339] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 252.198425][ T8331] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1349'. [ 252.208567][ T8336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.211543][ T8336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.358515][ T8350] loop4: detected capacity change from 0 to 764 [ 252.419222][ T8350] Symlink component flag not implemented [ 252.421623][ T8350] Symlink component flag not implemented (128) [ 252.694282][ T8358] loop4: detected capacity change from 0 to 512 [ 252.729576][ T8358] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1361: inode has both inline data and extents flags [ 252.741390][ T8358] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1361: couldn't read orphan inode 15 (err -117) [ 252.750858][ T8358] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 252.768736][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 252.813350][ T8363] loop4: detected capacity change from 0 to 16 [ 252.840764][ T8363] erofs: (device loop4): mounted with root inode @ nid 36. [ 252.926542][ T8366] TC_ACT_REPEAT abuse ? [ 253.132825][ T4337] Bluetooth: hci5: command 0x206e tx timeout [ 253.190789][ T8370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.192648][ T8370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.695971][ T8410] loop5: detected capacity change from 0 to 256 [ 253.750390][ T8419] loop4: detected capacity change from 0 to 1024 [ 253.761571][ T8145] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 254.088105][ T8419] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 254.102629][ T4345] Bluetooth: hci5: unexpected event 0x2f length: 1017 > 260 [ 254.134262][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 254.175694][ T8428] loop4: detected capacity change from 0 to 128 [ 254.206731][ T8428] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 254.227964][ T8428] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.269872][ T8437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.277880][ T8437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.152970][ T4345] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 255.157881][ T4345] Bluetooth: hci2: Injecting HCI hardware error event [ 255.160455][ T4345] Bluetooth: hci2: hardware error 0x00 [ 255.212780][ T4337] Bluetooth: hci5: command 0x0407 tx timeout [ 255.392154][ T8501] erofs: (device loop2): mounted with root inode @ nid 36. [ 255.605632][ T8512] __nla_validate_parse: 3 callbacks suppressed [ 255.605643][ T8512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1405'. [ 255.639527][ T8509] TC_ACT_REPEAT abuse ? [ 255.713214][ T8518] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000005ÿÿ [ 256.223072][ T8539] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1413'. [ 256.297692][ T8548] set_capacity_and_notify: 1 callbacks suppressed [ 256.297702][ T8548] loop2: detected capacity change from 0 to 512 [ 256.303880][ T8548] EXT4-fs: inline encryption not supported [ 256.309795][ T8548] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 256.337121][ T8548] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.1417: bad orphan inode 15 [ 256.339605][ T8548] ext4_test_bit(bit=14, block=5) = 0 [ 256.340669][ T8548] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 256.376375][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 256.416733][ T8559] loop4: detected capacity change from 0 to 1024 [ 256.443746][ T8559] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 256.463059][ T8559] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 256.485059][ T8559] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1421: bg 0: block 112: padding at end of block bitmap is not set [ 256.494707][ T8559] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 131587 with max blocks 1 with error 28 [ 256.499781][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1420'. [ 256.505427][ T8559] EXT4-fs (loop4): This should not happen!! Data will be lost [ 256.505427][ T8559] [ 256.510102][ T8559] EXT4-fs (loop4): Total free blocks count 0 [ 256.530498][ T8559] EXT4-fs (loop4): Free/Dirty block details [ 256.531694][ T8559] EXT4-fs (loop4): free_blocks=0 [ 256.532494][ T8559] EXT4-fs (loop4): dirty_blocks=16 [ 256.533551][ T8559] EXT4-fs (loop4): Block reservation details [ 256.534611][ T8559] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 256.686835][ T8575] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.1421: lblock 0 mapped to illegal pblock 0 (length 1) [ 256.974142][ T8575] EXT4-fs error (device loop4): ext4_map_blocks:747: inode #15: comm syz.4.1421: lblock 0 mapped to illegal pblock 0 (length 1) [ 257.067837][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 257.111487][ T8591] loop5: detected capacity change from 0 to 512 [ 257.113589][ T8591] EXT4-fs: Ignoring removed bh option [ 257.115720][ T8591] EXT4-fs: Ignoring removed nobh option [ 257.122258][ T8591] EXT4-fs error (device loop5): ext4_orphan_get:1431: comm syz.5.1432: bad orphan inode 13 [ 257.127817][ T8591] ext4_test_bit(bit=12, block=4) = 1 [ 257.129636][ T8591] is_bad_inode(inode)=0 [ 257.130773][ T8591] NEXT_ORPHAN(inode)=0 [ 257.133027][ T8591] max_ino=32 [ 257.133670][ T8591] i_nlink=1 [ 257.134274][ T8591] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 257.151913][ T8591] EXT4-fs warning (device loop5): dx_probe:845: inode #2: comm syz.5.1432: Hash code is SIPHASH, but hash not in dirent [ 257.157078][ T8591] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1432: Corrupt directory, running e2fsck is recommended [ 257.159401][ T8591] EXT4-fs warning (device loop5): dx_probe:845: inode #2: comm syz.5.1432: Hash code is SIPHASH, but hash not in dirent [ 257.161388][ T8591] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.1432: Corrupt directory, running e2fsck is recommended [ 257.249534][ T6069] EXT4-fs (loop5): unmounting filesystem. [ 257.255640][ T8589] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 257.702968][ T4345] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 257.827531][ T8620] process 'syz.3.1444' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 257.995116][ T8632] Failed to initialize the IGMP autojoin socket (err -12) [ 258.051670][ T8641] loop4: detected capacity change from 0 to 512 [ 258.132407][ T8641] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 258.188609][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 269.555121][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.636170][ T8723] loop4: detected capacity change from 0 to 8 [ 269.672297][ T8723] SQUASHFS error: lzo decompression failed, data probably corrupt [ 269.676658][ T8723] SQUASHFS error: Failed to read block 0x91: -5 [ 269.678925][ T8723] SQUASHFS error: Unable to read metadata cache entry [8f] [ 269.681334][ T8723] SQUASHFS error: Unable to read inode 0x11f [ 269.694943][ T8716] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 269.699361][ T8719] mac80211_hwsim hwsim9 »»»»»»: renamed from wlan0 [ 269.764835][ T8733] loop2: detected capacity change from 0 to 1024 [ 269.787521][ T8733] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 269.789286][ T8733] EXT4-fs (loop2): orphan cleanup on readonly fs [ 269.790425][ T8733] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.1483: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 269.814176][ T8733] EXT4-fs error (device loop2): ext4_quota_enable:7052: comm syz.2.1483: Bad quota inode: 3, type: 0 [ 269.816410][ T8733] EXT4-fs warning (device loop2): ext4_enable_quotas:7093: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 269.818678][ T8733] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 269.819926][ T8733] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 269.827993][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.877076][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 269.916440][ T8746] loop2: detected capacity change from 0 to 1024 [ 269.918039][ T8746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 269.919249][ T8746] EXT4-fs: Ignoring removed bh option [ 269.935926][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.940583][ T8730] TC_ACT_REPEAT abuse ? [ 269.955864][ T8746] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 269.976780][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 270.026864][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.060565][ T8753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.063622][ T8753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.130428][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1487'. [ 270.678742][ T8798] ICMPv6: NDISC: Failed to initialize the control socket (err -105) [ 270.689822][ T8803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.696142][ T8803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.727122][ T8799] device bridge0 entered promiscuous mode [ 270.754780][ T4383] hid-generic 0005:0B54:05DF.0001: item fetching failed at offset 0/1 [ 270.756415][ T4383] hid-generic: probe of 0005:0B54:05DF.0001 failed with error -22 [ 270.787014][ T8810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.793121][ T8810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.904777][ T8822] loop4: detected capacity change from 0 to 256 [ 270.928379][ T8822] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 270.931115][ T8822] FAT-fs (loop4): Filesystem has been set read-only [ 270.936310][ T8822] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 270.943977][ T8822] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 270.949368][ T8822] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 270.954443][ T8822] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 270.958696][ T8822] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 270.963754][ T8822] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 270.968993][ T8822] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 270.974735][ T8822] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 270.979817][ T8821] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 271.650627][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1511'. [ 272.720923][ T8929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1529'. [ 272.989421][ T8957] TC_ACT_REPEAT abuse ? [ 273.236646][ T9] device hsr_slave_0 left promiscuous mode [ 273.307903][ T9] device hsr_slave_1 left promiscuous mode [ 273.382875][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.384442][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.386326][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.387743][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.389210][ T9] device bridge_slave_1 left promiscuous mode [ 273.392470][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.436237][ T9] device bridge_slave_0 left promiscuous mode [ 273.437577][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.583118][ T9] device veth1_macvtap left promiscuous mode [ 273.584426][ T9] device veth0_macvtap left promiscuous mode [ 273.585429][ T9] device veth1_vlan left promiscuous mode [ 273.586461][ T9] device veth0_vlan left promiscuous mode [ 275.627307][ T9] team0 (unregistering): Port device team_slave_1 removed [ 275.803395][ T9] team0 (unregistering): Port device team_slave_0 removed [ 275.963541][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.164087][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.683674][ T9] bond0 (unregistering): Released all slaves [ 277.988647][ T8979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1542'. [ 278.220433][ T9009] TC_ACT_REPEAT abuse ? [ 278.453172][ T9044] device syzkaller0 entered promiscuous mode [ 278.467113][ T9016] tipc: Enabled bearer , priority 0 [ 278.584755][ T9014] tipc: Resetting bearer [ 278.635724][ T9014] tipc: Disabling bearer [ 278.651610][ T9056] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1566'. [ 278.653274][ T9056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1566'. [ 278.680697][ T9060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1565'. [ 278.966078][ T9084] TC_ACT_REPEAT abuse ? [ 279.181861][ T9102] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1577'. [ 279.188657][ T9102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1577'. [ 279.245971][ T9111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1579'. [ 279.264954][ T9115] tipc: Enabling of bearer rejected, failed to enable media [ 279.415413][ T9136] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1589'. [ 279.457178][ T9139] loop1: detected capacity change from 0 to 256 [ 279.479958][ T9144] TC_ACT_REPEAT abuse ? [ 279.514372][ T9010] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 279.520145][ T9139] loop1: detected capacity change from 0 to 256 [ 279.523681][ T9151] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1593'. [ 279.525239][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1593'. [ 279.532488][ T9010] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 279.553969][ T9010] Buffer I/O error on dev loop1, logical block 0, async page read [ 279.701798][ T9167] loop4: detected capacity change from 0 to 256 [ 279.712380][ T9167] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 279.729826][ T9168] device syzkaller0 entered promiscuous mode [ 279.737441][ T9168] tipc: Enabled bearer , priority 0 [ 279.746069][ T9165] tipc: Resetting bearer [ 279.777743][ T9172] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779264) [ 279.779910][ T9172] FAT-fs (loop4): Filesystem has been set read-only [ 279.781576][ T9172] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 279.783715][ T9172] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 279.794340][ T9165] tipc: Disabling bearer [ 279.888709][ T9180] loop5: detected capacity change from 0 to 256 [ 279.952646][ T9187] loop1: detected capacity change from 0 to 256 [ 280.053782][ T9197] TC_ACT_REPEAT abuse ? [ 280.297764][ T9206] device syzkaller0 entered promiscuous mode [ 280.301667][ T9206] tipc: Enabled bearer , priority 0 [ 280.304975][ T9205] tipc: Resetting bearer [ 280.378240][ T9205] tipc: Disabling bearer [ 280.406556][ T9217] loop5: detected capacity change from 0 to 8 [ 280.482298][ T9221] loop1: detected capacity change from 0 to 1024 [ 280.490377][ T9221] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.559186][ T9227] TC_ACT_REPEAT abuse ? [ 280.563501][ T9221] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 280.619101][ T9167] FAT-fs (loop4): error, corrupted file size (i_pos 196, 16779008) [ 280.636809][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 280.740194][ T9240] loop1: detected capacity change from 0 to 512 [ 280.747390][ T9240] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 280.757580][ T9240] EXT4-fs error (device loop1): ext4_readdir:223: inode #12: comm syz.1.1624: path /311/file0/file0: directory fails checksum at offset 0 [ 280.896908][ T9249] loop4: detected capacity change from 0 to 256 [ 280.926313][ T9249] loop4: detected capacity change from 0 to 256 [ 280.927741][ T9251] device syzkaller0 entered promiscuous mode [ 280.932288][ T9251] tipc: Enabled bearer , priority 0 [ 280.936771][ T9250] tipc: Resetting bearer [ 280.974049][ T9250] tipc: Disabling bearer [ 281.097215][ T9263] TC_ACT_REPEAT abuse ? [ 281.299242][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 281.620684][ T9299] TC_ACT_REPEAT abuse ? [ 281.676763][ T9289] tipc: Enabling of bearer rejected, failed to enable media [ 282.134068][ T9010] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 282.154488][ T9319] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 282.169830][ T9319] EXT4-fs (loop4): 1 truncate cleaned up [ 282.170935][ T9319] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 282.180170][ T9319] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.1655: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 282.186109][ T9319] EXT4-fs (loop4): Remounting filesystem read-only [ 282.188071][ T9319] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #2: block 13: comm syz.4.1655: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 282.191860][ T9319] EXT4-fs (loop4): Remounting filesystem read-only [ 282.205543][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 282.224515][ T9325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.226415][ T9325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.275434][ T9330] netlink: 'syz.5.1659': attribute type 11 has an invalid length. [ 282.390260][ T9332] tipc: Enabling of bearer rejected, failed to enable media [ 282.436696][ T9342] TC_ACT_REPEAT abuse ? [ 282.728343][ T9364] tipc: Enabling of bearer rejected, failed to enable media [ 282.741163][ T9370] netlink: 'syz.2.1673': attribute type 11 has an invalid length. [ 282.897709][ T9386] TC_ACT_REPEAT abuse ? [ 282.998025][ T9397] __nla_validate_parse: 36 callbacks suppressed [ 282.998038][ T9397] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1685'. [ 283.087378][ T9398] tipc: Enabling of bearer rejected, failed to enable media [ 283.130203][ T9407] netlink: 'syz.4.1687': attribute type 11 has an invalid length. [ 283.131436][ T9407] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1687'. [ 283.198241][ T9409] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 283.203706][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1690'. [ 283.258260][ T6069] EXT4-fs (loop5): unmounting filesystem. [ 283.291190][ T9426] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 283.295663][ T9426] EXT4-fs (loop5): warning: maximal mount count reached, running e2fsck is recommended [ 283.309804][ T9426] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1695: inode #15: comm syz.5.1695: iget: illegal inode # [ 283.312302][ T9426] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.1695: couldn't read orphan inode 15 (err -117) [ 283.316114][ T9426] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 283.328699][ T9429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1692'. [ 283.330444][ T9426] EXT4-fs: Ignoring sb option on remount [ 283.331538][ T9426] EXT4-fs (loop5): changing journal_checksum during remount not supported; ignoring [ 283.333999][ T9426] EXT4-fs (loop5): re-mounted. Quota mode: none. [ 283.361371][ T6069] EXT4-fs (loop5): unmounting filesystem. [ 283.428683][ T9435] TC_ACT_REPEAT abuse ? [ 283.435853][ T9442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1700'. [ 283.471916][ T9441] netlink: 'syz.3.1699': attribute type 11 has an invalid length. [ 283.474274][ T9441] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1699'. [ 283.587225][ T9436] tipc: Enabling of bearer rejected, failed to enable media [ 283.615904][ T9457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1703'. [ 283.920827][ T9464] erofs: (device loop5): mounted with root inode @ nid 36. [ 284.013720][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1709'. [ 284.088860][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1711'. [ 284.138252][ T9479] netlink: 'syz.2.1712': attribute type 11 has an invalid length. [ 284.139677][ T9479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1712'. [ 284.609387][ T9497] tipc: Enabling of bearer rejected, failed to enable media [ 284.635579][ T9513] netlink: 'syz.5.1723': attribute type 11 has an invalid length. [ 284.795602][ T9535] TC_ACT_REPEAT abuse ? [ 284.839746][ T9537] set_capacity_and_notify: 9 callbacks suppressed [ 284.839755][ T9537] loop5: detected capacity change from 0 to 256 [ 284.895737][ T9541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.900768][ T9541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.957649][ T9545] netlink: 'syz.4.1735': attribute type 11 has an invalid length. [ 285.057400][ T9547] tipc: Enabling of bearer rejected, failed to enable media [ 285.082765][ T9556] loop4: detected capacity change from 0 to 2048 [ 285.085175][ T9556] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 285.088701][ T9556] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 285.158252][ T9560] loop4: detected capacity change from 0 to 512 [ 285.171525][ T9560] EXT4-fs (loop4): Test dummy encryption mode enabled [ 285.176331][ T9560] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.1739: inode has both inline data and extents flags [ 285.178777][ T9560] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.1739: couldn't read orphan inode 15 (err -117) [ 285.180864][ T9560] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 285.242573][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 285.266534][ T9565] loop2: detected capacity change from 0 to 1024 [ 285.290307][ T9565] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 285.323934][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 285.348782][ T9573] loop2: detected capacity change from 0 to 256 [ 285.367494][ T9010] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 285.379301][ T9573] loop2: detected capacity change from 0 to 256 [ 285.379413][ T9010] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 285.470426][ T9578] TC_ACT_REPEAT abuse ? [ 285.538345][ T9587] netlink: 'syz.4.1748': attribute type 11 has an invalid length. [ 285.554581][ T9589] loop1: detected capacity change from 0 to 256 [ 285.667734][ T9600] loop4: detected capacity change from 0 to 4096 [ 285.691174][ T9581] tipc: Enabling of bearer rejected, failed to enable media [ 285.719076][ T9600] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 285.763449][ T9610] binder: 9609:9610 tried to acquire reference to desc 0, got 1 instead [ 285.765330][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 285.775070][ T9610] binder_alloc: 9609: binder_alloc_buf, no vma [ 285.776156][ T9610] binder: cannot allocate buffer: vma cleared, target dead or dying [ 285.776181][ T9610] binder: 9609:9610 transaction call to 9609:0 failed 20/29189/-3, size 0-0 line 3247 [ 285.779585][ T3435] binder: undelivered TRANSACTION_ERROR: 29189 [ 285.807881][ T9616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.811488][ T9616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.070856][ T9633] netlink: 'syz.5.1764': attribute type 11 has an invalid length. [ 286.125163][ T9635] TC_ACT_REPEAT abuse ? [ 286.340720][ T9640] loop2: detected capacity change from 0 to 164 [ 286.459487][ T9637] tipc: Enabling of bearer rejected, failed to enable media [ 286.564714][ T9657] loop5: detected capacity change from 0 to 256 [ 286.604367][ T9010] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 286.663612][ T9010] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 286.669383][ T9663] netlink: 'syz.2.1775': attribute type 11 has an invalid length. [ 286.687936][ T9661] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 286.756976][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 287.224358][ T9697] tipc: Enabling of bearer rejected, failed to enable media [ 287.283025][ T9701] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 287.286097][ T9701] syz.2.1786 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 287.336104][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 287.345392][ T9713] netlink: 'syz.1.1789': attribute type 11 has an invalid length. [ 287.383698][ T9150] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 287.566867][ T9732] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 287.573739][ T9732] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.1795: corrupted inode contents [ 287.578358][ T9732] EXT4-fs error (device loop1): ext4_dirty_inode:6156: inode #2: comm syz.1.1795: mark_inode_dirty error [ 287.581121][ T9732] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.1795: corrupted inode contents [ 287.592427][ T9732] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #2: comm syz.1.1795: corrupted inode contents [ 287.595994][ T9732] EXT4-fs error (device loop1): ext4_setattr:5538: inode #2: comm syz.1.1795: mark_inode_dirty error [ 287.611179][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 287.816978][ T9742] tipc: Enabling of bearer rejected, failed to enable media [ 287.858948][ T9756] netlink: 'syz.4.1802': attribute type 11 has an invalid length. [ 287.861807][ T9751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.866068][ T9751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.873207][ T9010] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 287.997111][ T9774] EXT4-fs warning (device loop5): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 288.119853][ T9788] __nla_validate_parse: 20 callbacks suppressed [ 288.119864][ T9788] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1809'. [ 288.219450][ T9795] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 288.525725][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 288.599119][ T9805] netlink: 'syz.4.1815': attribute type 11 has an invalid length. [ 288.691577][ T9810] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 288.716436][ T9801] tipc: Enabling of bearer rejected, failed to enable media [ 288.775996][ T9827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1822'. [ 288.812593][ T9832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.816144][ T9832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.830662][ T9835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1820'. [ 288.982196][ T9839] netlink: 'syz.5.1827': attribute type 11 has an invalid length. [ 289.004191][ T9841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.005748][ T9841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.117259][ T9849] tipc: Enabling of bearer rejected, failed to enable media [ 289.361151][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1836'. [ 289.846606][ T9871] Cannot find add_set index 0 as target [ 289.857988][ T9875] netlink: 'syz.4.1840': attribute type 11 has an invalid length. [ 289.889041][ T9882] set_capacity_and_notify: 12 callbacks suppressed [ 289.889050][ T9882] loop5: detected capacity change from 0 to 256 [ 289.903884][ T9884] device syzkaller0 entered promiscuous mode [ 289.906950][ T9884] tipc: Enabled bearer , priority 0 [ 289.909163][ T9883] tipc: Resetting bearer [ 289.932160][ T9010] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 289.938889][ T9882] loop5: detected capacity change from 0 to 256 [ 289.941542][ T9010] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 289.963720][ T9883] tipc: Disabling bearer [ 289.977758][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1844'. [ 289.991809][ T9893] loop1: detected capacity change from 0 to 2048 [ 290.019802][ T9896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1847'. [ 290.036433][ T9893] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 290.075899][ T9902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.077609][ T9902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.089895][ T9905] loop2: detected capacity change from 0 to 1024 [ 290.120827][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 290.266754][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1850'. [ 290.313249][ T9919] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1853'. [ 290.388250][ T9937] loop5: detected capacity change from 0 to 256 [ 290.468709][ T9943] loop5: detected capacity change from 0 to 1024 [ 290.506560][ T9943] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 290.508296][ T9943] System zones: 0-1, 3-8 [ 290.509532][ T9943] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 290.523522][ T9953] tipc: Enabling of bearer rejected, failed to enable media [ 290.559884][ T6069] EXT4-fs (loop5): unmounting filesystem. [ 290.581254][ T9957] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1859'. [ 290.596264][ T9959] device syzkaller0 entered promiscuous mode [ 291.101446][ T9980] loop2: detected capacity change from 0 to 512 [ 291.112176][ T9980] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1864: invalid indirect mapped block 28777 (level 2) [ 291.122047][ T9980] EXT4-fs (loop2): 1 truncate cleaned up [ 291.124874][ T9980] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 291.140818][ T4339] EXT4-fs (loop2): unmounting filesystem. [ 291.175751][ T9984] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1865'. [ 301.885288][T10003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.886850][T10003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.901768][T10003] loop1: detected capacity change from 0 to 128 [ 301.906875][T10003] FAT-fs (loop1): Unrecognized mount option "utf8=0000000000000503" or missing value [ 301.946164][T10005] loop5: detected capacity change from 0 to 1024 [ 301.947829][T10005] EXT4-fs: inline encryption not supported [ 301.948957][T10005] EXT4-fs: inline encryption not supported [ 301.985317][T10006] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 302.011680][T10010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1872'. [ 302.154491][T10015] device bridge1 entered promiscuous mode [ 302.169959][T10005] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 302.181216][T10017] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 302.206588][T10017] EXT4-fs (loop5): Remounting filesystem read-only [ 302.209549][ T6069] EXT4-fs (loop5): unmounting filesystem. [ 302.938888][T10043] loop4: detected capacity change from 0 to 1024 [ 302.942616][T10043] EXT4-fs: inline encryption not supported [ 303.243757][T10043] EXT4-fs (loop4): orphan cleanup on readonly fs [ 303.248988][T10043] EXT4-fs (loop4): 1 truncate cleaned up [ 303.251000][T10043] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 303.308830][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1883'. [ 303.360686][T10052] device syzkaller0 entered promiscuous mode [ 303.398395][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 303.512455][T10072] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1886'. [ 304.309456][T10080] loop4: detected capacity change from 0 to 4096 [ 304.320304][T10080] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 304.383755][T10080] loop4: detected capacity change from 4096 to 1 [ 304.396462][ T4338] EXT4-fs (loop4): unmounting filesystem. [ 310.253436][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.254598][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 314.180464][T10063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1881'. [ 314.281166][T10093] device bridge1 entered promiscuous mode [ 314.606777][T10097] loop2: detected capacity change from 0 to 256 [ 314.608274][T10097] exfat: Unknown parameter 'dmack' [ 314.616599][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1894'. [ 314.625687][T10103] loop1: detected capacity change from 0 to 128 [ 314.632135][T10097] loop2: detected capacity change from 0 to 256 [ 314.633844][T10097] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 314.647916][T10097] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 314.670573][T10097] Unable to handle kernel paging request at virtual address dfff800000000000 [ 314.672192][T10097] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 314.676206][T10097] Mem abort info: [ 314.676869][T10097] ESR = 0x0000000096000006 [ 314.677598][T10097] EC = 0x25: DABT (current EL), IL = 32 bits [ 314.678879][T10103] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 314.680352][T10097] SET = 0, FnV = 0 [ 314.687254][T10097] EA = 0, S1PTW = 0 [ 314.689585][T10097] FSC = 0x06: level 2 translation fault [ 314.690941][T10097] Data abort info: [ 314.691597][T10097] ISV = 0, ISS = 0x00000006 [ 314.692601][T10097] CM = 0, WnR = 0 [ 314.694220][T10097] [dfff800000000000] address between user and kernel address ranges [ 314.712353][T10097] Internal error: Oops: 0000000096000006 [#1] PREEMPT SMP [ 314.713674][T10097] Modules linked in: [ 314.714300][T10097] CPU: 1 PID: 10097 Comm: syz.2.1893 Not tainted syzkaller #0 [ 314.715579][T10097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 314.717231][T10097] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 314.718470][T10097] pc : dummy_set_selfpowered+0xb0/0x158 [ 314.719358][T10097] lr : dummy_set_selfpowered+0x80/0x158 [ 314.720299][T10097] sp : ffff800020e97570 [ 314.720988][T10097] x29: ffff800020e97570 x28: 1fffe0001a1a0c95 x27: 1fffe0001a4a318b [ 314.722275][T10097] x26: dfff800000000000 x25: ffff0000ce08be10 x24: ffff0000ce08be48 [ 314.723605][T10097] x23: ffff0000d0d06510 x22: dfff800000000000 x21: 0000000000000003 [ 314.724861][T10097] x20: 0000000000000000 x19: 0000000000000001 x18: 0000000000000000 [ 314.726218][T10097] x17: ffff8000089b5300 x16: ffff800011b90080 x15: ffff8000089b5c5c [ 314.727598][T10097] x14: 0000000000000001 x13: 1fffe0001800461b x12: 0000000000080000 [ 314.728934][T10097] x11: ff0080000dceb44c x10: 0000000000000002 x9 : 0000000000000658 [ 314.730261][T10097] x8 : 0000000000000000 x7 : ffff800008bdb66c x6 : 0000000000000000 [ 314.731619][T10097] x5 : 0000000000000000 x4 : 0000000000000001 x3 : ffff8000082d66b4 [ 314.732884][T10097] x2 : 0000000000000001 x1 : 0000000000000003 x0 : 0000000000000005 [ 314.734167][T10097] Call trace: [ 314.734739][T10097] dummy_set_selfpowered+0xb0/0x158 [ 314.735619][T10097] usb_gadget_set_selfpowered+0x70/0x388 [ 314.736536][T10097] composite_dev_prepare+0x28c/0x2bc [ 314.737408][T10097] configfs_composite_bind+0xa0/0xce4 [ 314.738267][T10097] gadget_bind_driver+0x26c/0x684 [ 314.739106][T10097] really_probe+0x3a0/0xac4 [ 314.739820][T10097] __driver_probe_device+0x1c8/0x368 [ 314.740671][T10097] driver_probe_device+0x78/0x324 [ 314.741528][T10097] __driver_attach+0x3bc/0x614 [ 314.742341][T10097] bus_for_each_dev+0x148/0x1d0 [ 314.743175][T10097] driver_attach+0x50/0x60 [ 314.743906][T10097] bus_add_driver+0x2c0/0x518 [ 314.744663][T10097] driver_register+0x200/0x37c [ 314.745420][T10097] usb_gadget_register_driver_owner+0xf0/0x25c [ 314.746427][T10097] gadget_dev_desc_UDC_store+0x168/0x268 [ 314.747345][T10097] configfs_write_iter+0x260/0x338 [ 314.748163][T10097] vfs_write+0x3c8/0x7c8 [ 314.748830][T10097] ksys_write+0x12c/0x228 [ 314.749506][T10097] __arm64_sys_write+0x7c/0x90 [ 314.750256][T10097] invoke_syscall+0x98/0x290 [ 314.750977][T10097] el0_svc_common+0x13c/0x258 [ 314.751771][T10097] do_el0_svc+0x5c/0x134 [ 314.752464][T10097] el0_svc+0x58/0x128 [ 314.753079][T10097] el0t_64_sync_handler+0x84/0xf0 [ 314.753838][T10097] el0t_64_sync+0x18c/0x190 [ 314.754546][T10097] Code: aa1403e0 96b02530 f9400294 d343fe88 (38766908) [ 314.755643][T10097] ---[ end trace 0000000000000000 ]--- [ 315.033781][T10097] Kernel panic - not syncing: Oops: Fatal exception [ 315.034864][T10097] SMP: stopping secondary CPUs [ 315.035665][T10097] Kernel Offset: disabled [ 315.036372][T10097] CPU features: 0x0a0000,000f0097,a65bfea7 [ 315.037345][T10097] Memory Limit: none [ 315.285714][T10097] Rebooting in 86400 seconds..