last executing test programs: 1m35.676684648s ago: executing program 2 (id=194): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000003d000701000000000000000004"], 0x24}}, 0x0) 1m35.676557158s ago: executing program 2 (id=195): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x20044041) r1 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) 1m35.64725565s ago: executing program 2 (id=197): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002aab700000"], 0x24}], 0x1, 0x0, 0x0, 0x10}, 0x810) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b"], 0x54}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000280), &(0x7f00000002c0)=0xc) 1m35.582213725s ago: executing program 2 (id=200): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x236, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4209, r0, &(0x7f0000000140), 0x0) 1m35.439983767s ago: executing program 2 (id=204): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, 0x0, &(0x7f0000000480)) 1m35.049726538s ago: executing program 2 (id=215): socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x8010, 0x602a1}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m34.948460506s ago: executing program 32 (id=215): socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x8010, 0x602a1}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m34.944775527s ago: executing program 1 (id=217): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BLKGETSIZE64(r2, 0x80081272, 0x0) 1m34.868621923s ago: executing program 1 (id=219): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40) 1m34.822598667s ago: executing program 1 (id=221): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @local, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@private=0xa010100, 0x9}]}]}}, {{0x4, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 1m34.731921394s ago: executing program 1 (id=224): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x3e, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 1m33.880373042s ago: executing program 1 (id=234): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0xfffc, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r0, 0x11a, 0x1, 0x0, &(0x7f00000001c0)) 1m33.360662944s ago: executing program 1 (id=242): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000340)={{0x2, 0x4e21, @private=0xa010102}, {0x306, @remote}, 0x2, {0x2, 0x4e21, @local}, 'nr0\x00'}) 1m33.334840466s ago: executing program 33 (id=242): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000340)={{0x2, 0x4e21, @private=0xa010102}, {0x306, @remote}, 0x2, {0x2, 0x4e21, @local}, 'nr0\x00'}) 1m31.011744333s ago: executing program 4 (id=269): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x810410, &(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x2, 0x1d6, &(0x7f0000000200)="$eJzsmb/P0kAYx7937Quvb4yJi4OLg68Ro5S2qGEhBhN3E/DXJpFK0AIGagIkDsTFxdHBxNV/wMHBycHNzVUHNTFxkNG55o5re7ZAwKmJz2c4vvfc3XPPHfAloSAI4r/l+7ffX59frbUuADiKQxRV/KeRzOHa/C8vH59/Ub/26s3n1x8Gx55cSedjAMJw+/2PAHjfMBBEnRSH6rUFHusb4Din9C0wnFH6LjhuKu2B4Y7SDzQ9jPbwPeve0O/c7/meLRpHNK5oqvr+JoDFnKEDYF+eLQyZNj6ezh62fd8bpcVeGO2TGdpVbLo/WV+Do676oj7xft1+9nQuKrZU3NbuzwGHo3QVDE2layjCsqzkSrTznzST/MY258+DOF7ORRkk8iVYOiK+0HHkxOLdx+yqH3kp/h+ENC4AmaFPB7vkEQ7wd6SgTGDlqsSfmAmc1fzJhBn7RyXoP6qMp7Nyr9/uel1v4LrVy/ZF277kVqQRLdsN/rcv/elAy7+XtUhJgRUwaQfByJkAwciJ++6y1Ry3+Xb4S67h0v84SqeXOcRHRR67uLqe6LeBSy16JWNt8QRBEARBEARBEARBEARBEDtxCkz+C6oeVIVrcK/L2X8CAAD//+lAY1E=") openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 1m30.980935896s ago: executing program 4 (id=270): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x1a, r0, 0x0, 0x0) 1m30.908672422s ago: executing program 4 (id=271): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000000), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_vhci(&(0x7f00000008c0)=ANY=[@ANYBLOB="043003bcc900dd1dbbe8159c684626415188a367f628b1d44e3a8581865ac4be8752"], 0x6) socket$igmp6(0xa, 0x3, 0x2) 1m30.908499882s ago: executing program 4 (id=272): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$nfs(&(0x7f00000001c0)='..\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x85000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, r0, 0x0, 0x46) close(r0) 1m30.903068772s ago: executing program 4 (id=273): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000001640)=0x8, 0x4) 1m26.900224344s ago: executing program 4 (id=277): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001100)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902120001000000000904"], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) 1m26.738647607s ago: executing program 34 (id=277): write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x1b, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001100)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902120001000000000904"], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, 0x0) 1m23.987140269s ago: executing program 6 (id=243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000090000000000000000000000850000002a000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) unshare(0x62040200) 1m23.860664679s ago: executing program 6 (id=325): syz_mount_image$nilfs2(&(0x7f0000000040), &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xadd, &(0x7f0000000380)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) pipe2$watch_queue(0x0, 0x80) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) 1m23.761447917s ago: executing program 6 (id=327): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 1m21.692608803s ago: executing program 6 (id=359): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) r4 = openat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000500), 0x12) 1m21.550966905s ago: executing program 35 (id=359): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) r4 = openat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000500), 0x12) 1.177968825s ago: executing program 8 (id=1955): r0 = socket(0x11, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000003e000100fcff07000400000001000000040000008c0001808800108009000880a831985351cb3d4a57729361f10318be72cb433d11a9b4781da90ad1a200b17485433caa6c97072c59b89aaa3987b4bfce08fe13e090413b9606330beb137e"], 0xb0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000640)=0x80000001, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141444e0000003808a8972bd0b72e41082b1a3d2"], 0xdd12}], 0x1}, 0x10) 1.10686334s ago: executing program 8 (id=1960): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x14a4014}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r2}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009040)="c9b6cf40d6a9928c6a8c0fdaba1e7bbd4ee597917b02ec4e8ff3bec8d7d8c08f8813039f40175e54e3d66ec19388ed788cf69c0c5b560f0401f1adb4b1f5198fe0bd7627cb9dc384db5b44495ba6094046fb2c8c7d0af7d67dbc3f5ef4aef8ec6bb01c52b6a10d4f9473987d0809b6a84f2ff8aae19a082abcb68b41c291add3ca2204a38c59e28c7c910aaa5a075676e541b6bb91de3854d2f97d3f80dc56c0705e74624a947f2c21ff936c6ba827742a24fd6d9e10b470ceb73a23fc57f5fa27cf073f2d0235e6fa4d1c29f9d0b6509c890ce0e7c3a2a4dd8b6336f02b9d7cc4c8e37f5f5a57f63aeec3228bd15b6d041eab97bccb14ee1ca6fbf7f7ed2e4dd0a32d41cc41c1031424b94621edcea1bddd40f3ad905202dfba3b912efd3468d2ad42b8a01bcb13b288afdc00b7e5857425d7919651160ec15447a26758f20653e69559f0892efc8f0715d8d79f52a44c79aba8ac58dc726ed721eeab3480eaacc2655d4b8831c9aff049c32709ab7adfb24ae767d45468dc0e42bc34b3568ce95e850eaabbf3a1be4d0f9b3e8781a2a9dc06374fe496a755b48abce67fd56de43816d64e883d9db51489ab8a81d1af3a180b6772d2bdac6313d3c183239d4c0bbbe76173f011f144ba71ac8043107f6533b3ef2f44924039b8587485749647315eb7bfe1e412e94f8cdaa937480fdd23769a69e14ea82d741484c99dd1ddd1edfb4faa51431f15531b61e59d68f9d189b27d0bf925970ac66fc35dbe1e430893cc60b28ca6d8e34931bf02154aee6f1fc58d0c0d8e48eaf8079ded67fdd9f19ebfa85d1ab6ec7f54e1963be353b34a6cb7fa35ddb60a9fc6bd1c6f11bf981b5a1bba81513fe447ff7eb2db0d27f1cfd04353e05f37d6c1bd6eb8219ce799338de3518bfec529373e4acfd644212be283856be064bac0f4926c02c0915816615f1f04d1d5136872029afee663f0bf1b6811c594e1465fba59f5727e5a826e3c60576bc2087f21521ffc90dcca39cbec7c0466c8fb7b1bcea7cffb333d2d16daa269d63f4911d10ed24462b37cdceb7c88e819489e1939e5e3cdcc5a858d09803c98d9e5fd617bc92c0880f072c54608f6ea69edba05b4edcd8d3f5e3c926220a191f2aa0d2f0c9158e298bc2e756ee091a0ac48752e4bb56fac67b02eb2c7b3380244ed66648482d8bc2a29bfc26ade0f4a5665282ea408254fd88e2812a184ee9af9c7769fba1ec380043d5cdf6056f89b4d7f12a441c3013b0fe0d8418fc47c13fbf4fc2b4a89496d4ab9d9826d0e586574e8dd15d4eb8b86ed372e37287fc818df5b6993b650fba844d960e3fd62db0bc7b12ab286d6492388a91ae4da6bdece6e101c13100eaba3b9998706fd4defaa3ed2965ce7fe6062b8c58f20c6b44b01121184ee1dda1cb66b3ababecfc0b7a9a12624e0b826c35d0149335149cfb49fbe68d1dbb7eef96d7956dc573d449847ff4bb7ba0ededd00c904130f1252c3dd4bdcdeccf6f8a83e3abfa14d12c753558022efa0704549b0571e31c4bc9f3e485f8d2d88189b4149569ef83e8feb2ad26c263b0f91f8975c86c8fa9c9457da5ef4a8a94844f824873576f722e32b376ba5f3ed0ea9818d86ddc35ba0e7f322594d9a0fea878af5c03d242bc7b0af89091f088245154391e75ab1b6b2730ccd01c28e9ec99428cc22c2d08ae2829537c34ebd1273327d0d18175698f9fe587e968d19f00ff98555fcfe95d00cb3abae32afcd48f3d4cd7c63c45581203a8a3040363d98bf9426493039fce7bb03493ab6e176cb45e2af461e77fc93d1202fe0bc7b77398c52bbc1c1436439f26cb2e17933a0ae309611e46bebd4d84a939d9b040a08cad90c2eda6ddc933edffc8e562aa64658f99a9ec8a47278edb828b5312a95ca34c0af428aac64d3fa1c4045885891fda7666dfb680da4dc2c02becb8303b76987b6d9be01174df88e41a48a42444caeae5e36118564e57209594285bc2915b222f99f016326430c38c9807994cfa1c3c85aa0f6375c716cd7f27be9b2cef6866d07c8ed00bc101a74219182562467ebbd43d2ba78a4b0eae22c67702f318bc55ccd92f5fd11557335f94ff6f38cfe9fbe31d3fac064dcd7d660d02fbeaa26acf8927c1e3bc71d9ed8ef2e93f0a42813526daa1fad36676734103bcc621a114b098295de578bf8d7df9034fb3ba86ea529bf639cde496b5e48145e4a814f894fb3bf3f41b49d0572dad5988348dad7a064b2d76d9092336cb404934790683b2b3576d3b75534df2c36bc78e05ed250b9aaede772a08bf5972444ecf4e447c062d95e556768e264813369465713834f6e239695b6bfca1b6108a09368688e212b7ba556df50c02486bf1b2196da3d4c0553923fe9b1bb4474d0f569bec1f35dce4be0f5e2408efa69aa66dda6bb1ef43295fe005f4a86840bb608796ce14bcc1134013bf741ad1aa70cc6579edbd42478d3054e1f7bdbd5b1131ded725041270e8a46bcc8bbfe89089f87105939deb2a9f10dd60d059679d4514bfbfc94b333c7dde79576426f07f24ab6a57290b0d723bf3bffa2f66fe191d0dee8b292c8c15eb42245b899ddde3c6afbbf0d7c301dd142878dbca579f387931460c8c37e186f60f8d9209dc98f1a27b84ecefd71de077017261ad6cc3072fe57ec589cd9498946fda8a834e3f02e8a91f7ce6e18e76f936f6f39d354b63dccc706e25b1d8b1a4830c46f249b5e5a40042fea920ed57a2415431f83c238113ee7d152c16f0780c502d5c995168e3f91113af11752f10434b8dc5ef0e46a276c683261aa73877ce96ebd0176977e124c5b93bbb02ef97a6f6a13c15c261f23014f4b13c8f18746727206b245bee70d7b94968141f104f0682a3df4242c6a60fa1b70c227306520b1b9fbd6c916b0edf5e2ce5220fc9ef10ab0a10e1bf259e91eb127d5a31b7633f15130fdb44ce2178a20d5dc3f91688090881c061d75b4b59c3b2b7eb7a3dd1564bfa6c883c217cb76c2a7516dec926add0a1886570531c32b6284b1e80fbde88905f67ea5cea41003325327000a7f7249a99986f19f423843e8dc791df8679a2ed2b024d7d8c79112644a4fbd32bef0cd1f9d55025708135ed34cbf52ce3a0af0f8cd985362ef6fceb6c72f241128b16dad7575558badb3847e051f38d7b5ca638a1f454054659d90b2c046e4f9e2ab127f257ccc92f887b3e0c4fb49d159741fc649638180addf3f23e5265015f6dad9b25cb86d8a33b802e55258749ec050d15d0d7d821f9615c7d8c12ce11c63fb1eb118455c4e2167f66e4eaf9dec0dd2f345a7e2bb369a66b0755003a9c89449393f71acd98afdf6347792251d669ff3c64c50d705a67e543cad95655d6a4cce233acdac5ffc96681772be3c04a1b36f5273815af65ef87c7ad0d51462bf337c2389a8eded875f75eeebe5e5efc26933948e623364d0dbad3402f659a93acaaa21bc8f559dca605aa6732d0eced5a21ee8a6403b1f91722fcbada24a3031d6aa221612a36584d5edc6ba0f64096e9b6eae1555a95945b937457c4c74371f474939d3c3f299f691316497951c646f142adbd6ee49182aec388ce2ca560a1f4b7d8a63e5cd25ba91ebc61175a6955895bcddae7bf1cefccac5c93dd669ab65a2f508adbcfd62ec46027efa396b9f69984d6adcb38fdddb616ec38929fedd97677c3d06060309db5a9cb5fc8919f4310f06bb40f1b76bc197798acbf8d3162257071e034174047006796fac6fbc95c28afd881e1197c20fea8b4be5c5de39a292bd1ff3819d4d4f48162ea1a57930d8f324ce54875d3ad09eea95c4c825765842f9bbb1957fa8188578e86081adfc87502e69c8841218b596d71c4ec49afa60408028012d974051559d924f5f8a59ee195fb01994b8710994d8201ae10f6e88e0e418489c47499b7efd2021f56a6c9fba761beaf79acb6087a496afe7524f2260e14a792cf1a1203d4b0cd8a11d2544293b7657fc393014295fa28e409ab8be0a02695223d17d7caf4f44cf5d0f416130067f28f3fc51c88ad7b53e401e658214abcc8f597f22d662144f878573d0370c874287698784b6ba9abf9b22da2eeb0ce8b817f85e429e799a5edd246d72d77228652b80c4949a85cd5131d851d9f9bda9afa0646de5e477e0fa999562cb46758502c7d63dd3e8b6f88c7ea44f41c4212d633f0160e738c6d36128e9e58c154b08460c899a26276dc1257dc5de18495573693674e40faf1dad49db8ac83baecf92f3aa5c23f639cdcf6e6864c14a8d6a3de95906813fd17f83c406ffd1d2d7bc75737b7b00172448b2ff167b9fa43649db32ab4094652cbb2e18c3bdb527f24049878bb44b82135009f9af22d24ffbee4b5289fa61bd0502f019b2f24a08542db818bffb7c1637b4f4cb9043952f88aa69d9431b8df2e3f9ef6e4a5ba58e79acf082bbd871aa0f0feef71ade8f921bb597ea28548f4116a281ab3542b732c4a8e9973409c75a0c6443d83547d0d314cc7bd62128e3b0db9c03c78b9d78ba714627866230414947523a6a239873f932c2b28c09cbdf182e856bf41598998150cbdd6d54f76c227fb1519f5afb0008e31d6a0b87818d0a2ca0dd6e953a5ba1a347dd927acd36f3fa3a68920eb9c36bce6cef857447aa733e4ffb7014e194993eb1399270b64151ddbb15478c2b762a14d1782608fb24199d9d311281c47726f565b3a3b7be584afb03d87cdc5eb8156772694ab422f59cd7b1e359583a7cc0695b9f64e6416c6b52de230afbc160d2e9384501b40645189434d416c0fbb034e9ffc654d0dee7ee7a878f9e559daac7ee5af769aeac7a92e85b1bc7983803d3bb572befe76184a46b76450feccffa753cc6123cba0686440a5ba81236458831031a4ba4c91d7aab3bb2514208a902face1c12b7dfe25318ab5ca2c1ef9769aa06ba0539f6904f95d3c8440617efc7858d3984f566b3390b9b1a0f2ec3c86dd77a0b82958c4b15278ffaf10e47e613545f4cf67ef7e8b31a6bda35022871840ae1536fb65bb11b932936db7a15642359bb6b157893d19e7918b11d3d3072b78c761c1784afa2214c865fc2aed860dcc17b69cfe9189bcd0767a84cb306a59966e5f96514a7d7182e6aa7204bbd1a84092ba645f86b68813debd5a2290acc93388e5eacc17db51d69604733ea9160a0e77ec5317194654313a9a8a0535c0bc49d0837e2821df92e8ee2f154cbea6b87ffc207aab4ea491e8aa75b90f70136d84ea2f5dfd138371dbdf8fe273956cb7411db6df48ebf56105da42b219b9dad387ca7be9ecd90508c62279a53bc9f7e2a845f9da42d8e85d2653854737948ce228b2d76d1b9fe2e0e456fdff24575939b82a3f6e1a4be6ffcf1c493c17dabbfa0859a87d259ae3931fb6da544589b9b6bb7cc93e078813ac94918942bf113aee5742498d86a70fff31d2a69507739317a9aa9e0289f053dad4eec63cd58e833027f0859fb4ab74e8fc742d03b5b6dca1168d3d47fd95b514a567e6518342d52b3c3bb6438b5aeacb95ff9001d2f5480f6a80a0685b5bda2ceba06925ab5ae0986954c3169e92fedaf3f1681247cb114202c0f728296a51396063fc64aad05662bf05a626b90f656b47069ca668bb96208c287e8f793d77d4fb1f1cc14e73406005e11a2c1c46ca7448be534c97738487527d79e284d7a0ae275bd4361ecf4a352e6dc8b8c8c8e132a3edb7d645f4943445f523fb28bbf857218a117f1288afec49f9def9aabc2381b38a315d5c927aeb96fa1ad3eb13b0151dd570f6734f004467171d2cdd609d1d09d115c9b42e1da3472ada98d3e1da90a8f373a98133fa708f5a62c75b5eb1b643c48de72143ffc8761ccffd7f3336b69faa277d364cdf2d4f2bc428bda8b76e4748d5ae02d9850ac6f2ed0ddcb874c25d210163d4da10c0d6cc5218a3558deee5519c94032158bca02fe1c1b8184fdf417e863352b224b7b06267486296ebd4100ad5f1108c78a7056979f5ad6f97794a0460bf371584d9b962034aa7449f4e6b0f925b7a648d4ed7f2442135629b0baee3385882682fde57e5eb9204647a898c566120e4b577ba215ed863f76d5ad9ed19a6b7465952292e7543110eac3dc436a16c85047f3ff10a00c917d5902d296c063c4b173775f2b612e407bce02c8647877abcc07b21b89a60e16ff5c5cdc3708f285d6e411036661e97f628c6c2bef7a6e297f0ea7db2aaceb87d13425e80c28cf095b1dd4e08122e89f58862c6466d79fe7d06e0038a9a1869cba0d1554bffc08b94bf3dc7ec4d108073a4dcb7a6a503b608e777f1ca6b64deec19072052cdab8e7222966170bd35cfa66d3d013c537e723bfa2f634b34edba64ee27ab814bf66c5943e5b7b4d2cbad0550982b2d68ea0633a48f24ef5a59da6e9671717afed4253db66afce693ab08e2b4343d9efd1705802393ba22af5f0e04fc559ddafd78bb1c013b2826cfd77591736cd8a1e079c00f72dc89ee419cf4cc5e867138e35372bb0854df45d2142ce56ea01465d7cf42d3beabbed8602ff568df5d8e53d22bbd897c0aa050165319ba28d6f861a128556e420275562b8a19c0a2112df4490925f52090c6c7ac79b8533936d4020af3ea5d383cc8e4f23cf275194887d42bde7061bc17246a91b735472c4dee6f2d159a4fb2cce10f0727a964658f6d60aa18bd474ce1e88114ce3c2a3acabd74175b82afc6126ed79d8d333ed993e3a0d67afba888c94cb266f906681d9595f2ca21946f32d8f07eb7cfc979cdd56a885e6a5deb1dc54ffbbbac728db4145056cc9b78386f1f17ad16856cc10b04038f0d835a5842584b6a9516a770abd839ade5d379db9889d22d9049dd13010ad612a64128f724f7a643505b8ca50bddc4ec4875beed2f8593b7382645625809bbc3591027d53bde8a16be5bb209cd49e71aaa435c923ef3c4d1aefec7111773b0d58b47efabc7a43b93cb7eab287cefe554a5b59e2a746081d0d875919df356504008374ef184be2f7ef7e644bf5535dedf5b969b30dcedcfbecb83173b0cea015efe45630880c303472daf1dc22b384e65078cb0ae21baa4834fcd4b4f7c995b700117e1448d041a7106277302fabf3a512ad4e802988c43e6cad0b4b74962e195b355b653acfab53d9f38337e46758c0f8c147333d30f8fbb508a889b84d4672e025b0d9adec09fd4e2d62bda0e0c40570d8fcf5487a59380584f7b85a8576985a4423cbdb1503ea4f93d4f3dbb2c384efcac84dd8649e6f09d2ac37e1d8268c3c07db365581c7c3752410909968598b8ea5ea05b68e6013965cc60be6f6b24e493655f5ddd572a84a924803a7df025914f4b57527841928d30c03b09aeee28c8b81860968f53a663f4f56b004e07cc380f5b0b0dad43869faeed5f240ce389a0fb0920073b8d3de611e54d4011f55ba28743a3b51af6293ed1376fcfe3592c877e2d81d14ee882410cf8207476409b5673eb65297155e91cbe089c8c043964063f9b469419bce6e59e0017e0f527d20eab5d9579208df9cc65389ca8fdb3d62618395bb0274b8094799cb4c36632488e79950ac3bd3d982d521614f56df1bd16c1f928481dd4580a796eb7892b3e4a33b748b16f96b1def674c2b70d0315b486a94a979292d635a2ad1fa877927de9355f38a612747fb982bccf12040d9a14a63c34b6f2b3b450a6401d4d0c96a9090ab80d30f7e7af84bade864791455402cbd278427c5a1e84e2e2286c4bf773da614e6705802c130ade8a3a67b309f9db1558372046ec276a34fb50f72c7df40e33f447ab5f0af05eece4e8f654b3c2dad6ea76ef6b694699f4ad8c6fdcbfd8bdc23d0c580631d0c95ac6ae9613dad680939db2ecf9e7a0d4d0f2f2b7f1c1d308cfaccacc2381e97bb278a53b14daf686c0541e56264c33d5176b830ac7d13c28edb2d8e77d7acbced061c4ec315cb1a259966ad997c7c7beae44d4d1b6955842d7fbba0bb0c461bb22db3e15f0fc1cd3fd997dac5e6a4bff6e2eb8310d828f15309b2c8feaa21281963d35ab2d5c099beb806cd384d304449c58d89910105df11225fb893e984734a8e5cba2e553f03ebd5ce4cae24826547df81db3f2bd7d930f785755c8b6311f221da59679ce50479adef1cc5dac984a5d2f9343fe4892b2b5640892892cfd50d0015c1f568792d8919943a578b62585081175237444d9542a2241c967bcfbc3dab4e8961ecad89165eaada2d759e844be5021aed42b971e9ffea8c08a3d6e4073ce4226b4e54b83f3d8ccd207a0cfcf9da7b5e55d1a26a90e03f7c3611c6562b65edb42fe110dc3970b44aa36660d1cdbc882495271f80816350b945aedb0d46ca6d160d5f0096e8263325e257dbb574932e32f1b28ce2b7f5b3ee6ccec64085496bb513ec168b53d79e6ecb72622a70b22e1f9116fa48815709b2080b27b31a6b26dde0701cd74c31b4e33a702f051ae07ad54ce23ae33e6060e5451a4171cc930af2ab70862044c5a0ff9e8aeebd3cc41c62d38e7b79596d3851430dd661b071c319751985d48eeea2afb463d7d9390ed4e68a60f90ad80aeca4b8d283ae0538e590668c857a526a264be238641eeb5f321248d829539efccf03dcefa54c6def8b7d4a8cdf6bc76d71eefaca1a7a33bd4b56e94b8e38f784b742bdd080faca4769e1aa91ff50d9374f3632cb7b66a0042beb802c6cedff0a3634aec072f57d38a6ea61439029ba5d921f57bfbc281d75f5ec322b8f8c90b4d3f65d00ef97dcffe7e07fa01af8e7f8da15532f0c18b73d7a183327aea46680651645782f4f318c00f2355c301fe2e805a22f8586119768b8424735f5495607d170f0818be232cec1d9e40daf79bcd63a26cbead93753b7171bcad462da2af68e9ea9c0b207200f1fcf3793283931603a719e745120273efb541a7af896f6eea7359939d7226896c8023cc963e4e0a7579bc83a37cb8d871324bb3e66b671d8df83d645495740c5b99aaf2edda3018e1895dda6744b1e6623cb62d4b80ac208f69a81caa0277a497e41bf637817518cbe0fcd2028d07be199a126f82641f2fd54e6b20287b912ee8d8dd72db5824ca9e464a94d45beda7f52932d1bb57a28a4e99ac32ea4c3650197613a87e4cec91d82f37069fde871575d3cb2220aaad9277511271a86377da5f2a9f94303e7151acb087ca549fd0cb9b1961954ddb28333a24b510b92cddc057ec5a147ccdd708a2db3c8cb3600756100b38b71f0676f6fc5a7f5912b5e81bf6d2b07e15fb5b1c96459110ceb22ba4f2fb0e531dcaa913a13437cc6276c8b4e1bdbc5365144c7abd2e2a6c93ef102e26b14e576ada244408d9db50aab045f9879bf95425eaa7b11d77e0dc503851c5c278c282aa736103adf5ca2b30724bde27f98e4e7a947f964b7abfe58a3da354e3008a2b86d50223d3077e151ce2e086172002eab7279ac1948361e172073184401d5650181547f1bacc1534f9ab2ad66fd9d200d867de79a92e465dda8d781b15881acc9bfdc53815f3fc3f064c830db3908cdb173e3e1295ea7dca280273ca99073d5663003f14c4f7ac9ef9bc735b2a413daaa7d97101553f90a0d33b043d1f2b0f131d35c9244808bb4b76213ff5c418053a569d760498518d701aae39cfbd7a052b586c53617dfaad1415c1cafbb41640d1650be9297dd42c803d8bfd443916310bb80a74c991cc26331ab70c0c4bc4f2295f069787f6759878e42ffbc76b34493f71d88a109b0813ebfcd24953b2b5f1f5164d9974bab7ed1f4d42f62b8379912dd7e9f35a19951e4d57b0c70fe516cd2059c4ef879d9f9b1191d5bb51b852d3e9462e4528b9c1f7c676e6039d1deb00442a482e297b08a67c79bb818d0316072d8174885de3413ae0505232100f217e424e0106811902d60ecc0e0aaca7c5f00f4f365e1360f10aa645b9215c93668a08be97cacd6b0f9c80ead76478846d12e8f24a53bfab01628afd199b2db332d38d5009d7a1437f0f5b2a0d36b5c98f3a35e5043ffd55bac325d3927888fa5d0e3569d9be002205b501b3e68d661515bb9eac9d4f234e22e4e5bd0b4c4530933aadd99f132794ce48e9a3220d2c17748c012fc5fd93d265cebb3edc3be29a1ba26f2adcf510663c28d29e28774c4ec1190fbfbf614aa8e2745f8605f7d7e94fdd06322454a08833f1a22c77deedb1337e380a8e18f85168e045d1e7cf32fda1a709d3eddf62909a9e580ed8abd605e07dbab79b5bcc2f4533e6fec589b976816471b1f11ac3c89336c52e03b72520995d05275024e9988727f2e1ac9421ccaaa0b736e9f7f296c2d27cbd774d7179f9c6921df68985998034862c15adc452666deb40c0c40cedf16f4d187524a0a5cdff6f7b2531eda54fbe15a7ad1aea46466a51642326c5d7d374fb38475d119027a3714598fe7307de94bece2741b7a742b053682dae9452eed3b820b1386b604fa647e392b35b205019cf1ad317d1441cbee2aea5ca95e56fd5e959689bf96c9f470acb8e4e630b13403e9459242b629fa28e1ba8eacf1ed572b1db735a20ee1a5b8500b6edf66cbe671c5938741ab2b36ccd4e92160f6df9e1d465cdaf3a7746e128e26e0e7a7aa4869b2a482c6e9bf7e58408411016740c547129e4f11d2317af3c5bb55b2468e6d08e75e5039c3bfdc9b6da06e7c27933a8c9d8ad0e4c74a093e6d57c02b1b49e995962c1046b5c8a3df0ea4c20049e300cbe41bd92a0ea5993ef6fd92ea74e28e1cfaf4a8533c224104d6081b64ae08b4e7a23a259b2b03655b987c23687c6e279bab469a3e0881a30620910566982945f8f86229fd614ca2bb2adcbdd49a5c579c0d1bbdefb9e33cd0641bb43f6ca3fab33dc4188e1508e4293e6de932040b895a97bc1f196467ad4a0d4899e6078c014f42521cf39411e2e4f1b5adc26f1f3bb2fcd27b89ac418c8251423de82c4b5980a4e66649b9f3ec48c833c35f8653ca510a0a1b0495619a60bf5d77e64a6938714c3a1946b3fa5079533698bb8f8f85bea8711ccda5cf01de150b055d3586a890d0654d2b4cfba25c434e2ff492b69798aa197dffbfe2bba77d4b4eea35c42e698221e971a4bca34e59c46084f48f2170b83db6719324ecb55e07a9cf74a84ee0fc3567fa5cd2f3937ad956b4ed2187e2026b7d4166d50fd9c937fb4dd5aa96f2731f1db1dda4eac4e589295ffe9b72a7b9533f6e23c82b57c8361c8cb3b15128235f65c84b99d93383b7398e936884542d0e73bdf37cadfb6c70da47af3c5a3cde0d8e381cdf9ec1a39d2fc963f0d8ee31b76d9668c0171967cb9ef2f15d5bbdbd1058328da7a60bbc7d77efed2de74a2ed5637a8a84e1163325dd22b584b15fe894c9b1ce89d24619a344a8987f6d21b7de7ccf6fad223134e1c389a8e6baa375dd142baf4a8852e984eb6c281cf86e2457a7f85782c7764564af26d331d3ddf4850d24742ef449cd5e32f5957d2ee10e05e7d3312215e4d36ac5c8c4bae3340f074f88a20e18b270b3baf05de1b0363f4c6f2ab9386d6034e8567e4828ad256cd250448c70147c318a621697be402c1e8365d2798084f968a8897242ff6756c2937e4d13", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x6, 0x0, 0x1, 0x8, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(r1, &(0x7f0000002440)='./file0\x00', 0x0) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0x0) 1.037681046s ago: executing program 5 (id=1963): r0 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x10120, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg(r1, &(0x7f0000002c40)={&(0x7f0000000140)=@in={0x2, 0x4e24, @empty}, 0x80, 0x0}, 0x0) 480.325481ms ago: executing program 7 (id=1980): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000040)={0x28, r0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x818}, 0x2400c044) 415.845036ms ago: executing program 7 (id=1982): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x355}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004801}, 0x80) 383.412079ms ago: executing program 0 (id=1985): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="8214aba30000007f47c36f28a1ecb7d2e5c2075af7590cbd9e8b11b0", 0x1c}], 0x1}}], 0x1, 0x44004800) 382.340778ms ago: executing program 7 (id=1986): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r1, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) accept4$tipc(r1, 0x0, 0x0, 0x800) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009c00)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000006c0)="856c8b17c18d1c57ce2792311d40d24141831259935e00449955d2892b5f8b38a2c38780125588c5e5cec05c4b53801961e1ec295f81ffb94dc67725fa354b9db7d00f08e82c4f5e4ee6f6a3c78294f252e35753538400289804cae930b4eb595c15d5cef8d4499e09e7ed84bf3e0c7c1f67d22c445b835df7e5e92648e4758a6967d651778543cd410984bf514bd1be8da19c16bfcc0c8c9e49f5330e4c451368d9f3c9830ad05e6d23cf23728ccb7a589d8fd95205c5b38ab26990d740c2785d80e48433425544b41c96a56f9e", 0xce}, {&(0x7f0000000340)}, {0x0}], 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="53fa9986257b17a51d824674c9fbb0e66f96097010873f14f790a77538fe31daf74d02672dd8f76aa96f02d440da6329644aca94394141ef5bb09f7b42a6ae40b586dca3bd7e8bfaeaf5285dd77a91ff41ac4106c97928bc628c351be933e137a1ef6b8542d4e57a63738f5ae6170f982250dadc6505c0843125678fec655664d6e10e849b0f11f7420babc6f8"], 0xf0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x634c, 0x4, 0x3, 0x0, r3}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="94000000", @ANYRES16, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="720033008000de00ffffffff85ec0802110000005050505050508000010100000000000064000245000001"], 0x94}, 0x1, 0x0, 0x0, 0x880}, 0x0) 317.134134ms ago: executing program 0 (id=1987): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_MPATH(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x1c, r0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1800}, 0x8000) 316.881734ms ago: executing program 7 (id=1988): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x10}]]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 315.934224ms ago: executing program 3 (id=1989): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x60000000, 0xcc0, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 240.63594ms ago: executing program 3 (id=1990): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000003d40), 0x8) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000006f80), &(0x7f0000006fc0)=0xc) connect$bt_sco(r0, &(0x7f00000071c0), 0x8) 240.29337ms ago: executing program 7 (id=1991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x4004884) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000840)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x7, 0x7fffffff, 0xfffffff7, 0x7ff, 0x5, 0x9, 0x1, 0x8c27}}}}]}, 0x58}}, 0x4080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 240.11333ms ago: executing program 0 (id=1992): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = fanotify_init(0x4, 0x1000) fanotify_mark(r0, 0x141, 0x40001029, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 239.083ms ago: executing program 8 (id=1993): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="2c003300d0000000ffffffffffff080211000000505050505050"], 0x4c}}, 0x40040c0) 218.345512ms ago: executing program 3 (id=1994): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0x9}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 206.030833ms ago: executing program 0 (id=1995): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={0xffffffffffffffff, 0x0, &(0x7f0000000280)=@udp}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="018d00"}) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, 0x0) r1 = socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r2, &(0x7f0000000900)="2e552f5d9fd8b0d962", 0x9, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0x8, 0xc9100120, 0x0, 0x0) 144.672387ms ago: executing program 5 (id=1996): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x6}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 144.424668ms ago: executing program 5 (id=1997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x355}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004801}, 0x80) 130.826939ms ago: executing program 8 (id=1998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d742abd7000fddbdf250a00000008000300", @ANYRES32=r3, @ANYBLOB="240050800500020002560000040006"], 0x40}, 0x1, 0x0, 0x0, 0x4000e895}, 0x4000000) 122.510919ms ago: executing program 5 (id=1999): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(r1, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) accept4$tipc(r1, 0x0, 0x0, 0x800) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000009c00)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000006c0)="856c8b17c18d1c57ce2792311d40d24141831259935e00449955d2892b5f8b38a2c38780125588c5e5cec05c4b53801961e1ec295f81ffb94dc67725fa354b9db7d00f08e82c4f5e4ee6f6a3c78294f252e35753538400289804cae930b4eb595c15d5cef8d4499e09e7ed84bf3e0c7c1f67d22c445b835df7e5e92648e4758a6967d651778543cd410984bf514bd1be8da19c16bfcc0c8c9e49f5330e4c451368d9f3c9830ad05e6d23cf23728ccb7a589d8fd95205c5b38ab26990d740c2785d80e48433425544b41c96a56f9e", 0xce}, {&(0x7f0000000340)}, {0x0}], 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="53fa9986257b17a51d824674c9fbb0e66f96097010873f14f790a77538fe31daf74d02672dd8f76aa96f02d440da6329644aca94394141ef5bb09f7b42a6ae40b586dca3bd7e8bfaeaf5285dd77a91ff41ac4106c97928bc628c351be933e137a1ef6b8542d4e57a63738f5ae6170f982250dadc6505c0843125678fec655664d6e10e849b0f11f7420babc6f8"], 0xf0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000080)={0x634c, 0x4, 0x3, 0x0, r3}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="94000000", @ANYRES16, @ANYBLOB="01002abd7000fedbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="720033008000de00ffffffff85ec0802110000005050505050508000010100000000000064000245000001"], 0x94}, 0x1, 0x0, 0x0, 0x880}, 0x0) 122.11889ms ago: executing program 3 (id=2000): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000000000000000000000000000180200", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x60000000, 0xcc0, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 95.890101ms ago: executing program 7 (id=2001): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000440)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x5, @f_listen={0x6d, 0x3, 0x1, 0x82, 0x6, 0x1, 0x7, {0x3, "47d9e5"}, 0x5c, 0x1, 0x40, 0x1c, 0x4, '\b$7d'}}, 0x17) 95.649142ms ago: executing program 0 (id=2002): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x30, r1, 0x1, 0x70bd2c, 0x80000000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0x8, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xc001}, 0x4) 62.784984ms ago: executing program 5 (id=2003): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x4, @remote, 0xddcc, 0x5}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe2800000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4061) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 62.351944ms ago: executing program 3 (id=2004): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000002340), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000022c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020) write$FUSE_INIT(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r2}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x0, {0x6, 0x0, 0x1, 0x8, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x4, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(r1, &(0x7f0000002440)='./file0\x00', 0x0) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0x0) 61.927234ms ago: executing program 8 (id=2005): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = fanotify_init(0x4, 0x1000) fanotify_mark(r0, 0x141, 0x40001029, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 11.530248ms ago: executing program 0 (id=2006): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000240), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) 11.183189ms ago: executing program 5 (id=2007): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x3, 0xff) sendto$inet(r0, &(0x7f00000002c0)="b401fcc8311bb8b66f7ee68e052af9c34b7d7494", 0x14, 0x0, &(0x7f0000000040)={0x2, 0x0, @dev}, 0x10) 10.653058ms ago: executing program 3 (id=2008): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 0s ago: executing program 8 (id=2009): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x355}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004801}, 0x80) kernel console output (not intermixed with test programs): mac addresses unique to avoid problems! [ 35.604612][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.606353][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.609235][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.612469][ T486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.613739][ T486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.615593][ T4329] device veth0_macvtap entered promiscuous mode [ 35.620863][ T4417] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.622223][ T4417] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.624538][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.625993][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.628270][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.629749][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.631256][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.632866][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.634460][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.638734][ T4329] device veth1_macvtap entered promiscuous mode [ 35.644313][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.645957][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.647845][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.649533][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.651016][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.652794][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.654312][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.655833][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.658867][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.661016][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.662624][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.664202][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.665888][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.668542][ T4324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.670305][ T4324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.672551][ T4324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.675890][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.677659][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.679668][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.681130][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.682692][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.686674][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.687777][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.692519][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.695382][ T4324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.697976][ T4324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.699631][ T4324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.701127][ T4324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.703807][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.705456][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.708389][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.709981][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.711649][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.713409][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.714887][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.716331][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.718941][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.738737][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.740470][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.743489][ T4329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.755799][ T4329] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.756430][ T4433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.758254][ T4329] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.760105][ T4329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.761520][ T4433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.787722][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.788995][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.790635][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.843433][ T4417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.844776][ T4417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.850746][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.853129][ T486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.854444][ T486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.856237][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 35.868984][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.870208][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.872257][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.910692][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.912020][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.913730][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 35.953342][ T4442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 36.049716][ T4453] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11'. [ 36.053250][ T4447] loop0: detected capacity change from 0 to 1024 [ 36.062622][ T4447] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 36.064468][ T4447] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 36.068736][ T4447] EXT4-fs error (device loop0): ext4_get_journal_inode:5737: inode #32: comm syz.0.1: iget: special inode unallocated [ 36.068842][ T4452] device pim6reg1 entered promiscuous mode [ 36.076319][ T4447] EXT4-fs (loop0): no journal found [ 36.080338][ T4447] EXT4-fs (loop0): can't get journal size [ 36.091053][ T4447] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 36.113701][ T4457] loop4: detected capacity change from 0 to 4096 [ 36.153086][ T4447] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (42152!=20869) [ 36.173625][ T4329] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 36.174779][ T4329] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 36.200365][ T4461] netlink: 'syz.1.15': attribute type 4 has an invalid length. [ 36.208949][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 36.250320][ T4465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.301725][ T4473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.311301][ T4473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.327192][ T4475] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET) [ 36.348854][ T4474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18'. [ 36.395491][ T4479] loop4: detected capacity change from 0 to 2048 [ 36.413773][ T4479] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 36.502326][ T4487] process 'syz.4.23' launched './file0' with NULL argv: empty string added [ 36.556926][ T4326] Bluetooth: hci0: command 0x041b tx timeout [ 36.557931][ T4326] Bluetooth: hci3: command 0x041b tx timeout [ 36.558830][ T4326] Bluetooth: hci4: command 0x041b tx timeout [ 36.559770][ T4326] Bluetooth: hci1: command 0x041b tx timeout [ 36.566672][ T4332] Bluetooth: hci2: command 0x041b tx timeout [ 36.935210][ T4505] loop3: detected capacity change from 0 to 4096 [ 36.940813][ T4505] ntfs3: Unknown parameter 'hide_dot_files' [ 36.974637][ T4507] Zero length message leads to an empty skb [ 36.996406][ T4509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.002226][ T4509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.493317][ T4533] loop4: detected capacity change from 0 to 512 [ 37.501470][ T4533] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 37.531084][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 37.662730][ T4553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.665060][ T4553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.682090][ T4551] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 37.819529][ T4562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.53'. [ 37.840126][ T4564] binder: 4563:4564 ioctl 4018620d 0 returned -22 [ 37.841578][ T4564] binder: 4563:4564 ioctl c018620b 0 returned -14 [ 37.975459][ T4576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.60'. [ 38.060115][ T4588] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 38.062356][ T4588] overlayfs: failed to set xattr on upper [ 38.063293][ T4588] overlayfs: ...falling back to index=off,metacopy=off. [ 38.066180][ T4590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 38.140396][ T4597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.68'. [ 38.144337][ T4597] device vlan2 entered promiscuous mode [ 38.145311][ T4597] device gretap0 entered promiscuous mode [ 38.205832][ T4603] loop0: detected capacity change from 0 to 128 [ 38.211944][ T4605] loop3: detected capacity change from 0 to 64 [ 38.248922][ T4608] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 38.250302][ T4608] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 38.253891][ T4608] vhci_hcd vhci_hcd.0: Device attached [ 38.263185][ T4608] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 38.264231][ T4608] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 38.265682][ T4608] vhci_hcd vhci_hcd.0: Device attached [ 38.268187][ T4608] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 38.273971][ T4608] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 38.274979][ T4608] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 38.277681][ T4608] vhci_hcd vhci_hcd.0: Device attached [ 38.279396][ T4608] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 38.281177][ T4608] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 38.283219][ T4608] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(15) [ 38.284253][ T4608] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 38.286302][ T4608] vhci_hcd vhci_hcd.0: Device attached [ 38.288006][ T4615] vhci_hcd: connection closed [ 38.289146][ T4611] vhci_hcd: connection closed [ 38.289293][ T4609] vhci_hcd: connection closed [ 38.289986][ T4417] vhci_hcd: stop threads [ 38.292430][ T4417] vhci_hcd: release socket [ 38.293234][ T4417] vhci_hcd: disconnect device [ 38.294787][ T4617] vhci_hcd: connection closed [ 38.294967][ T4417] vhci_hcd: stop threads [ 38.297349][ T4417] vhci_hcd: release socket [ 38.298206][ T4417] vhci_hcd: disconnect device [ 38.299814][ T4417] vhci_hcd: stop threads [ 38.300507][ T4417] vhci_hcd: release socket [ 38.301275][ T4417] vhci_hcd: disconnect device [ 38.302190][ T4417] vhci_hcd: stop threads [ 38.302892][ T4417] vhci_hcd: release socket [ 38.303581][ T4417] vhci_hcd: disconnect device [ 38.371140][ T4622] loop3: detected capacity change from 0 to 1024 [ 38.374874][ T4622] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 38.525354][ T4634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 38.526945][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 38.529530][ T4634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 38.532960][ T4634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 38.535158][ T4382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 38.538412][ T4634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 38.557184][ T4396] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 38.637038][ T4332] Bluetooth: hci2: command 0x040f tx timeout [ 38.637042][ T4367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 38.637069][ T4332] Bluetooth: hci4: command 0x040f tx timeout [ 38.638207][ T4326] Bluetooth: hci3: command 0x040f tx timeout [ 38.639448][ T4332] Bluetooth: hci0: command 0x040f tx timeout [ 38.640430][ T4326] Bluetooth: hci1: command 0x040f tx timeout [ 38.845491][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 38.869977][ T4643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 38.891548][ T4643] loop0: detected capacity change from 0 to 2048 [ 38.893780][ T4643] UDF-fs: bad mount option "<" or missing value [ 38.905805][ T4645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.86'. [ 38.928437][ T4459] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 39.069369][ T4662] loop2: detected capacity change from 0 to 8 [ 39.070735][ T4662] ======================================================= [ 39.070735][ T4662] WARNING: The mand mount option has been deprecated and [ 39.070735][ T4662] and is ignored by this kernel. Remove the mand [ 39.070735][ T4662] option from the mount to silence this warning. [ 39.070735][ T4662] ======================================================= [ 39.077000][ T4662] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 39.101036][ T4313] udevd[4313]: incorrect cramfs checksum on /dev/loop2 [ 39.104368][ T4662] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 39.114422][ T4313] udevd[4313]: incorrect cramfs checksum on /dev/loop2 [ 39.251750][ T4680] loop4: detected capacity change from 0 to 256 [ 39.272269][ T4680] binder: 4679:4680 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 39.275592][ T4683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.275659][ T4680] binder: 4680 RLIMIT_NICE not set [ 39.278419][ T4683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.280477][ T4680] binder: 4679:4680 ioctl c0306201 200001c0 returned -14 [ 39.314293][ T4685] loop4: detected capacity change from 0 to 2048 [ 39.322509][ T4685] NILFS (loop4): invalid segment: Inconsistency found [ 39.323784][ T4685] NILFS (loop4): trying rollback from an earlier position [ 39.331390][ T4685] NILFS (loop4): recovery complete [ 39.340246][ T4686] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 39.389547][ T4688] loop4: detected capacity change from 0 to 512 [ 39.399545][ T4688] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.406824][ T27] audit: type=1326 audit(39.390:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4635 comm="syz.3.82" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4d5c0a8 code=0x7fc00000 [ 39.430392][ T4688] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 39.440452][ T3898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 39.442397][ T3898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 39.465513][ T4688] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1097: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 39.470875][ T4688] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 28 [ 39.473267][ T4688] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.473267][ T4688] [ 39.474938][ T4688] EXT4-fs (loop4): Total free blocks count 0 [ 39.476104][ T4688] EXT4-fs (loop4): Free/Dirty block details [ 39.480143][ T4688] EXT4-fs (loop4): free_blocks=39626 [ 39.481243][ T4688] EXT4-fs (loop4): dirty_blocks=15 [ 39.482062][ T4688] EXT4-fs (loop4): Block reservation details [ 39.483168][ T4688] EXT4-fs (loop4): i_reserved_data_blocks=15 [ 39.610029][ T4688] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 2048 with error 28 [ 39.647358][ T4707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.648931][ T4707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.953175][ T4732] loop1: detected capacity change from 0 to 512 [ 39.964587][ T4732] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.969758][ T4732] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.971517][ T4734] 9pnet_fd: Insufficient options for proto=fd [ 39.982393][ T4732] EXT4-fs (loop1): 1 truncate cleaned up [ 39.983356][ T4732] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 40.003062][ T4732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.019935][ T4732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.029154][ T4743] loop2: detected capacity change from 0 to 512 [ 40.055634][ T4743] EXT4-fs (loop2): 1 orphan inode deleted [ 40.063892][ T4743] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 40.098244][ T4331] EXT4-fs (loop2): unmounting filesystem. [ 40.193884][ T4758] loop0: detected capacity change from 0 to 4096 [ 40.195563][ T4758] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 40.205689][ T4758] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 40.209811][ T4756] loop2: detected capacity change from 0 to 2048 [ 40.218972][ T4756] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 40.222717][ T4756] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 40.226203][ T4756] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 40.381835][ T4780] netlink: 'syz.3.144': attribute type 2 has an invalid length. [ 40.499082][ T4785] loop0: detected capacity change from 0 to 2048 [ 40.516050][ T4785] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.519895][ T4785] EXT4-fs error (device loop0): ext4_find_extent:936: inode #2: comm syz.0.146: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 40.526315][ T4785] EXT4-fs (loop0): Remounting filesystem read-only [ 40.532235][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 40.550188][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 40.590984][ T4792] loop0: detected capacity change from 0 to 2048 [ 40.624886][ T4798] loop3: detected capacity change from 0 to 128 [ 40.629368][ T4792] Alternate GPT is invalid, using primary GPT. [ 40.631034][ T4792] loop0: p1 p2 p3 [ 40.644747][ T4798] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 40.716908][ T4326] Bluetooth: hci0: command 0x0419 tx timeout [ 40.717662][ T4328] Bluetooth: hci3: command 0x0419 tx timeout [ 40.718008][ T4326] Bluetooth: hci4: command 0x0419 tx timeout [ 40.719051][ T4328] Bluetooth: hci1: command 0x0419 tx timeout [ 40.719920][ T4326] Bluetooth: hci2: command 0x0419 tx timeout [ 40.724100][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 40.763361][ T4809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.765011][ T4809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.794593][ T4811] loop0: detected capacity change from 0 to 128 [ 40.805898][ T4811] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.844957][ T4459] udevd[4459]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 40.850170][ T4313] udevd[4313]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 40.864862][ T4772] udevd[4772]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 40.880133][ T4806] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 40.940757][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 41.105323][ T4834] loop0: detected capacity change from 0 to 128 [ 41.107351][ T4834] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 41.110279][ T4834] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 41.183337][ T4840] __nla_validate_parse: 4 callbacks suppressed [ 41.183348][ T4840] netlink: 71 bytes leftover after parsing attributes in process `syz.4.167'. [ 41.244446][ T4848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.246053][ T4848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.313262][ T4852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.314939][ T4852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.446633][ T3898] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 41.629611][ T3898] usb 1-1: config 1 interface 0 has no altsetting 0 [ 41.632565][ T3898] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 41.634039][ T3898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.635264][ T3898] usb 1-1: Product: syz [ 41.635878][ T3898] usb 1-1: Manufacturer: syz [ 41.636786][ T3898] usb 1-1: SerialNumber: syz [ 41.853636][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.182'. [ 41.855411][ T4871] netlink: 48 bytes leftover after parsing attributes in process `syz.3.182'. [ 41.881438][ T4873] loop4: detected capacity change from 0 to 4096 [ 41.883319][ T4873] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 42.010193][ T4884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.011950][ T4884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.112818][ T4890] loop3: detected capacity change from 0 to 256 [ 42.129409][ T4890] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 42.147546][ T4890] exFAT-fs (loop3): hint_cluster is invalid (17) [ 42.376037][ T4910] loop2: detected capacity change from 0 to 512 [ 42.478348][ T4919] loop1: detected capacity change from 0 to 1024 [ 42.511684][ T4919] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 42.539778][ T4919] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 3: comm syz.1.202: lblock 3 mapped to illegal pblock 3 (length 3) [ 42.563168][ T4919] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 42.565490][ T4919] EXT4-fs (loop1): This should not happen!! Data will be lost [ 42.565490][ T4919] [ 42.624979][ T9] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 42.628959][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 42.632436][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 42.632436][ T9] [ 42.652565][ T4937] tipc: Started in network mode [ 42.655172][ T4320] EXT4-fs (loop1): unmounting filesystem. [ 42.667541][ T4937] tipc: Node identity 4, cluster identity 4711 [ 42.668555][ T4937] tipc: Node number set to 4 [ 42.715914][ T4946] loop1: detected capacity change from 0 to 128 [ 42.755874][ T4946] syz.1.210: attempt to access beyond end of device [ 42.755874][ T4946] loop1: rw=2049, sector=154, nr_sectors = 96 limit=128 [ 42.764727][ T4946] syz.1.210: attempt to access beyond end of device [ 42.764727][ T4946] loop1: rw=2049, sector=138, nr_sectors = 16 limit=128 [ 42.868789][ T4962] loop3: detected capacity change from 0 to 128 [ 43.020255][ T4972] binder: 4971:4972 ioctl c0306201 0 returned -14 [ 43.022040][ T4972] binder: 4971:4972 ioctl 80081272 0 returned -22 [ 43.049684][ T4326] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 43.051878][ T4326] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 43.053815][ T4326] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 43.057546][ T4974] netlink: 44 bytes leftover after parsing attributes in process `syz.3.218'. [ 43.065359][ T4326] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 43.069619][ T4326] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 43.071106][ T4326] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 43.111505][ T4417] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.212533][ T4417] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.278708][ T4417] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.311912][ T5000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.314350][ T5000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.326032][ T4975] chnl_net:caif_netlink_parms(): no params data found [ 43.334986][ T5000] loop3: detected capacity change from 0 to 4096 [ 43.347467][ T5000] ntfs3: loop3: RAW NTFS volume: Filesystem size 262144.00 Gb > volume size 0.00 Gb. Mount in read-only [ 43.352533][ T5000] ntfs3: loop3: NTFS 262144.00 Gb is too big to use 32 bits per cluster [ 43.378442][ T4417] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.397374][ T4975] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.398771][ T4975] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.400534][ T4975] device bridge_slave_0 entered promiscuous mode [ 43.403646][ T4975] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.405131][ T4975] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.407139][ T4975] device bridge_slave_1 entered promiscuous mode [ 43.418909][ T4975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.421444][ T4975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.430634][ T4975] team0: Port device team_slave_0 added [ 43.432523][ T4975] team0: Port device team_slave_1 added [ 43.443643][ T4975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.444904][ T4975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.449178][ T4975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.452036][ T4975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.453136][ T4975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.460462][ T4975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.508621][ T4975] device hsr_slave_0 entered promiscuous mode [ 43.537014][ T4975] device hsr_slave_1 entered promiscuous mode [ 43.576616][ T4975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.578004][ T4975] Cannot create hsr debugfs directory [ 43.641237][ T5010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.229'. [ 43.670964][ T5010] loop4: detected capacity change from 0 to 512 [ 43.703725][ T4975] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 43.706425][ T5010] EXT4-fs error (device loop4): ext4_quota_enable:7024: inode #3: comm syz.4.229: unexpected EA_INODE flag [ 43.709163][ T5010] EXT4-fs error (device loop4): ext4_quota_enable:7027: comm syz.4.229: Bad quota inode: 3, type: 0 [ 43.711265][ T5010] EXT4-fs warning (device loop4): ext4_enable_quotas:7068: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 43.714672][ T5010] EXT4-fs (loop4): mount failed [ 43.762747][ T5010] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 43.802980][ T4975] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.857904][ T4975] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.925929][ T4381] net_ratelimit: 10 callbacks suppressed [ 43.925944][ T4381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 43.952841][ T4975] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.992334][ T5033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.233'. [ 44.034818][ T5031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.232'. [ 44.042429][ T5034] bridge1: port 1(veth0_to_bond) entered blocking state [ 44.043858][ T5034] bridge1: port 1(veth0_to_bond) entered disabled state [ 44.046319][ T5034] device veth0_to_bond entered promiscuous mode [ 44.141276][ T4975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.146371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.148632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.159331][ T4975] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.166574][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.168391][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.169975][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.171177][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.173150][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.176087][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.177904][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.179446][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.180686][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.202192][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 44.203999][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 44.205812][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 44.214525][ T3898] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 44.221313][ T3898] usb 1-1: USB disconnect, device number 2 [ 44.227903][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 44.229537][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 44.231076][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 44.232652][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.234161][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.235761][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 44.245916][ T3898] usblp0: removed [ 44.264009][ T5055] loop0: detected capacity change from 0 to 512 [ 44.274805][ T5055] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 44.285821][ T5055] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 44.319985][ T5055] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.238: corrupted in-inode xattr [ 44.323176][ T5055] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.238: couldn't read orphan inode 15 (err -117) [ 44.330630][ T5055] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 44.363654][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.365474][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.370258][ T4975] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 44.403789][ T4324] EXT4-fs (loop0): unmounting filesystem. [ 44.557651][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 44.558993][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 44.575693][ T4975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.659726][ T4332] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.662619][ T4332] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.664281][ T4332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.666410][ T4332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.672282][ T4332] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.673751][ T4332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.763243][ T5101] loop0: detected capacity change from 0 to 4096 [ 44.765961][ T5101] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 44.793784][ T5101] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 44.842935][ T4324] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 44.847193][ T4324] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 44.904529][ T5112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.906053][ T5112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.915848][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.918329][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.948063][ T5116] sctp: [Deprecated]: syz.0.247 (pid 5116) Use of int in max_burst socket option. [ 44.948063][ T5116] Use struct sctp_assoc_value instead [ 44.957036][ T4367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 44.981439][ T4975] device veth0_vlan entered promiscuous mode [ 44.984678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.988653][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.990492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.991966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.002152][ T4975] device veth1_vlan entered promiscuous mode [ 45.095820][ T5132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.097705][ T5132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.126607][ T4326] Bluetooth: hci4: command 0x0409 tx timeout [ 45.349344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 45.351076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 45.352600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.354081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.365256][ T4975] device veth0_macvtap entered promiscuous mode [ 45.372397][ T4975] device veth1_macvtap entered promiscuous mode [ 45.407584][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.409649][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.418346][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.420049][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.421557][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.423382][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.425205][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.426954][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.428796][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.430454][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.432850][ T4975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.436363][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.438353][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.440018][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.441538][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.442980][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.444663][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.449181][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.450636][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.451960][ T4975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.453443][ T4975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.455781][ T4975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.457903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 45.459551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.461299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.462815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.464578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.466190][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.638376][ T5142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.640057][ T5142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.756946][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 45.763216][ T5137] bond1: option mode: unable to set because the bond device is up [ 45.769261][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 45.782239][ T5138] device bond_slave_0 entered promiscuous mode [ 45.783312][ T5138] device bond_slave_1 entered promiscuous mode [ 45.784572][ T5138] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 45.790289][ T5138] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 45.803876][ T4975] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.805360][ T4975] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.809175][ T4975] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.810700][ T4975] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.856009][ T4417] device hsr_slave_0 left promiscuous mode [ 45.928280][ T4417] device hsr_slave_1 left promiscuous mode [ 45.930301][ T4367] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 45.979102][ T5169] loop4: detected capacity change from 0 to 512 [ 45.987083][ T5146] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 45.987332][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.989536][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.996974][ T4382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 45.998884][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.000195][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.001874][ T5169] EXT4-fs: journaled quota format not specified [ 46.003528][ T4417] device bridge_slave_1 left promiscuous mode [ 46.005810][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.032726][ T5173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.034263][ T5173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.061794][ T4417] device bridge_slave_0 left promiscuous mode [ 46.062932][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.176912][ T4417] device veth1_macvtap left promiscuous mode [ 46.178097][ T4417] device veth0_macvtap left promiscuous mode [ 46.179038][ T4417] device veth1_vlan left promiscuous mode [ 46.180365][ T4417] device veth0_vlan left promiscuous mode [ 46.563472][ T5179] loop4: detected capacity change from 0 to 512 [ 46.572414][ T5179] EXT4-fs: Ignoring removed mblk_io_submit option [ 46.576064][ T5179] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.580010][ T5179] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 46.581611][ T5179] System zones: 0-2, 18-18, 34-34 [ 46.583838][ T5179] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.262: iget: bad i_size value: 360287970189639680 [ 46.586390][ T5179] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.262: couldn't read orphan inode 15 (err -117) [ 46.589488][ T5179] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 46.605694][ T4329] EXT4-fs (loop4): unmounting filesystem. [ 46.727067][ T4326] Bluetooth: hci1: command 0x0409 tx timeout [ 46.898452][ T5193] capability: warning: `syz.4.267' uses 32-bit capabilities (legacy support in use) [ 46.925719][ T5195] IPVS: set_ctl: invalid protocol: 135 172.30.1.5:20003 [ 46.945980][ T5197] loop4: detected capacity change from 0 to 16 [ 46.952927][ T5197] erofs: (device loop4): mounted with root inode @ nid 36. [ 47.046955][ T4382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 47.197388][ T4328] Bluetooth: hci4: command 0x041b tx timeout [ 47.200291][ T7] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 47.202234][ T3898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 47.768461][ T4417] team0 (unregistering): Port device team_slave_1 removed [ 47.848011][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 47.948456][ T4417] team0 (unregistering): Port device team_slave_0 removed [ 48.077475][ T4382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 48.107618][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.317627][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.796559][ T4326] Bluetooth: hci1: command 0x041b tx timeout [ 49.117484][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.121056][ T4382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.276543][ T4326] Bluetooth: hci4: command 0x040f tx timeout [ 50.167425][ T4382] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.620167][ T4417] bond0 (unregistering): Released all slaves [ 50.849806][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 50.876606][ T4326] Bluetooth: hci1: command 0x040f tx timeout [ 50.878427][ T3898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.920395][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.921621][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.923177][ T5091] device bridge_slave_0 entered promiscuous mode [ 50.951191][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.952485][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.954200][ T5091] device bridge_slave_1 entered promiscuous mode [ 50.987813][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.990455][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.014765][ T486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.016139][ T486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.048852][ T5205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.075674][ T5091] team0: Port device team_slave_0 added [ 51.092437][ T5091] team0: Port device team_slave_1 added [ 51.093844][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.095165][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.104739][ T5205] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.131163][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.132384][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.139742][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.141957][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.143070][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.155857][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.200792][ T22] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.210594][ T5091] device hsr_slave_0 entered promiscuous mode [ 51.268641][ T5091] device hsr_slave_1 entered promiscuous mode [ 51.291465][ T4326] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.295431][ T4326] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.302028][ T4326] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.303766][ T4326] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.305424][ T4326] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 51.307812][ T5091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.312188][ T4326] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.315488][ T5091] Cannot create hsr debugfs directory [ 51.352420][ T5251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.354808][ T5251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.356713][ T4326] Bluetooth: hci4: command 0x0419 tx timeout [ 51.362587][ T5251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.367006][ T5251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.369715][ T5251] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.413748][ T5257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.415468][ T5257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.474170][ T5261] loop3: detected capacity change from 0 to 2048 [ 51.487572][ T5261] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 51.495909][ T5261] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 51.572660][ T5269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.574111][ T5269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.584026][ T5091] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 51.638274][ T5091] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 51.661292][ T5091] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 51.688149][ T5091] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 51.755617][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.756883][ T5091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.758429][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.759593][ T5091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.784826][ T5243] chnl_net:caif_netlink_parms(): no params data found [ 51.822183][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.823866][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.826309][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.830370][ T5243] device bridge_slave_0 entered promiscuous mode [ 51.832725][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.834021][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.835546][ T5243] device bridge_slave_1 entered promiscuous mode [ 51.841872][ T486] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.844357][ T486] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.846223][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 51.853906][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.855405][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.339389][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.349434][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.364316][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.403010][ T4417] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.414938][ T5091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.421152][ T5091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.463742][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.465342][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.467386][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.468525][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.470325][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.471854][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.473241][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.474412][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.475831][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.478476][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.480414][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.483197][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.484872][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.486614][ T4374] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 52.486903][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.489764][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.491495][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.493142][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.495054][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.502695][ T5243] team0: Port device team_slave_0 added [ 52.505177][ T5243] team0: Port device team_slave_1 added [ 52.557773][ T4417] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.562249][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.563906][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.570826][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.572058][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.576371][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.584551][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.585638][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.590613][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.648709][ T5243] device hsr_slave_0 entered promiscuous mode [ 52.668711][ T4374] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 52.670785][ T4374] usb 1-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xC2, skipping [ 52.674368][ T4374] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.675817][ T4374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.677278][ T4374] usb 1-1: Product: syz [ 52.677981][ T4374] usb 1-1: Manufacturer: syz [ 52.678695][ T4374] usb 1-1: SerialNumber: syz [ 52.682967][ T4374] cdc_ncm 1-1:1.0: skipping garbage [ 52.696846][ T5243] device hsr_slave_1 entered promiscuous mode [ 52.746647][ T5243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.748037][ T5243] Cannot create hsr debugfs directory [ 52.787898][ T4417] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.791683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 52.793011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 52.798177][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.858336][ T4417] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.934589][ T5243] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 52.948326][ T5243] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 52.957431][ T4328] Bluetooth: hci1: command 0x0419 tx timeout [ 52.984295][ T5355] capability: warning: `syz.5.306' uses deprecated v2 capabilities in a way that may be insecure [ 52.997991][ T5243] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 53.054399][ T5243] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 53.061846][ T5360] loop5: detected capacity change from 0 to 256 [ 53.070839][ T5360] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.072972][ T5360] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 53.076210][ T5360] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62dd34a, utbl_chksum : 0xe619d30d) [ 53.095860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.099398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.189477][ T4417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.198460][ T5372] netlink: 'syz.3.311': attribute type 4 has an invalid length. [ 53.220724][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.222340][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.224072][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.225576][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.275975][ T4417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.302695][ T5091] device veth0_vlan entered promiscuous mode [ 53.357683][ T4326] Bluetooth: hci3: command 0x0409 tx timeout [ 53.368805][ T4417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.379691][ T5091] device veth1_vlan entered promiscuous mode [ 53.387416][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.388889][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.390386][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.391899][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.448758][ T4417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.455883][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.460395][ T5091] device veth0_macvtap entered promiscuous mode [ 53.478617][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.480382][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.481798][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.484495][ T5091] device veth1_macvtap entered promiscuous mode [ 53.495487][ T5243] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.501546][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.503187][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.504860][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.506268][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.507490][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.520085][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.521802][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.526015][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.528404][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.530053][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.531848][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.533640][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.535357][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.546319][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.548893][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.555463][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.564320][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.565891][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.568080][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.584988][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.597553][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.599122][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.600848][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.602280][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.603851][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.605344][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.615228][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.621366][ T5406] loop3: detected capacity change from 0 to 1024 [ 53.624275][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.626111][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.630266][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.631529][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.633195][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.634635][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.635814][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.641129][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.643930][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.667785][ T5091] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.669446][ T5091] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.670960][ T5091] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.672383][ T5091] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.683094][ T5406] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.321: Invalid block bitmap block 0 in block_group 0 [ 53.690486][ T4374] cdc_ncm 1-1:1.0: bind() failure [ 53.693480][ T4374] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 53.694642][ T4374] cdc_ncm 1-1:1.1: bind() failure [ 53.704469][ T5406] EXT4-fs (loop3): Remounting filesystem read-only [ 53.706162][ T5406] Quota error (device loop3): write_blk: dquota write failed [ 53.711238][ T5406] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 53.712544][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.712815][ T5406] EXT4-fs error (device loop3): ext4_acquire_dquot:6816: comm syz.3.321: Failed to acquire dquot type 0 [ 53.714588][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.719132][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.721112][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.722598][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.724157][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.725693][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.726281][ T5406] EXT4-fs (loop3): Remounting filesystem read-only [ 53.727329][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.729696][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.731135][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.731245][ T5406] EXT4-fs error (device loop3): ext4_free_blocks:6205: comm syz.3.321: Freeing blocks not in datazone - block = 0, count = 4096 [ 53.754000][ T5243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.773470][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.776239][ T5406] EXT4-fs (loop3): Remounting filesystem read-only [ 53.782574][ T5406] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.321: Invalid inode bitmap blk 0 in block_group 0 [ 53.821546][ T68] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 53.823162][ T5205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.824373][ T5205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.829868][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.838124][ T68] EXT4-fs error (device loop3): ext4_release_dquot:6852: comm kworker/u4:3: Failed to release dquot type 0 [ 53.844589][ T486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.846105][ T68] EXT4-fs (loop3): Remounting filesystem read-only [ 53.846110][ T486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.847746][ T5406] EXT4-fs (loop3): Remounting filesystem read-only [ 53.849519][ T5406] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 53.860946][ T5406] EXT4-fs (loop3): Remounting filesystem read-only [ 53.862077][ T5406] EXT4-fs (loop3): 1 orphan inode deleted [ 53.862987][ T5406] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 53.875233][ T5406] overlayfs: failed to clone upperpath [ 53.889518][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.901695][ T5053] usb 1-1: USB disconnect, device number 3 [ 53.923687][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 53.994557][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.998622][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.002564][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.107601][ T5444] loop6: detected capacity change from 0 to 2048 [ 54.130921][ T5449] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 54.161004][ T5444] NILFS error (device loop6): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 54.167657][ T5444] Remounting filesystem read-only [ 54.168783][ T5444] overlayfs: failed to create directory ./file0/work (errno: 5); mounting read-only [ 54.193068][ T5091] NILFS error (device loop6): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0 [ 54.196362][ T5091] NILFS error (device loop6): nilfs_readdir: bad page in #12 [ 54.200295][ T5091] NILFS (loop6): bad btree root (ino=16): level = 164, flags = 0x1, nchildren = 1 [ 54.202303][ T5091] NILFS (loop6): bad btree root (ino=16): level = 164, flags = 0x1, nchildren = 1 [ 54.430054][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.431795][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.539290][ T5243] device veth0_vlan entered promiscuous mode [ 54.542556][ T5243] device veth1_vlan entered promiscuous mode [ 54.551021][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.553027][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.554697][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.556339][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.558400][ T5475] loop5: detected capacity change from 0 to 512 [ 54.559607][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.561051][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.569422][ T5475] EXT4-fs: Ignoring removed bh option [ 54.577614][ T5475] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.582287][ T5475] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 54.598319][ T5475] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 54.600069][ T5475] EXT4-fs (loop5): orphan cleanup on readonly fs [ 54.601054][ T5475] EXT4-fs error (device loop5): ext4_quota_enable:7020: comm syz.5.329: Bad quota inum: 4294967291, type: 0 [ 54.603406][ T5475] EXT4-fs warning (device loop5): ext4_enable_quotas:7068: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix. [ 54.606054][ T5475] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 54.607416][ T5475] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 54.613797][ T5475] netlink: 12 bytes leftover after parsing attributes in process `syz.5.329'. [ 54.651775][ T5243] device veth0_macvtap entered promiscuous mode [ 54.654746][ T5243] device veth1_macvtap entered promiscuous mode [ 54.656739][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.658405][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.659955][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.663925][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.672362][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.674108][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.675550][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.678880][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.680277][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.681711][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.683107][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.684970][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.686439][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.693440][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.694898][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.698062][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.700056][ T4975] EXT4-fs (loop5): unmounting filesystem. [ 54.700521][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.705762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.708338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.709760][ T5053] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 54.792796][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.794375][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.795814][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.798737][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.800298][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.802166][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.803750][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.805247][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.807548][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.809241][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.810696][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.812166][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.814466][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.815590][ T5488] netlink: 12 bytes leftover after parsing attributes in process `syz.5.330'. [ 54.829882][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.831689][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.834636][ T5243] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.837924][ T5243] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.841683][ T5243] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.843165][ T5243] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.886834][ T5053] usb 1-1: Using ep0 maxpacket: 32 [ 54.889589][ T5053] usb 1-1: unable to get BOS descriptor or descriptor too short [ 54.891716][ T5053] usb 1-1: config 128 has an invalid interface number: 127 but max is 3 [ 54.893295][ T5053] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 54.895015][ T5053] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 54.896675][ T5053] usb 1-1: config 128 has no interface number 0 [ 54.897688][ T5053] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 54.899507][ T5053] usb 1-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 54.901168][ T5053] usb 1-1: config 128 interface 127 has no altsetting 0 [ 54.907524][ T5053] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 54.909093][ T5053] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 54.910444][ T5053] usb 1-1: Product: syz [ 54.911075][ T5053] usb 1-1: Manufacturer: syz [ 54.911829][ T5053] usb 1-1: SerialNumber: syz [ 55.097194][ T5503] input: syz1 as /devices/virtual/input/input2 [ 55.139632][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.141091][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.143594][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.154458][ T486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.156018][ T486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.161585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.182874][ T5053] usb 1-1: USB disconnect, device number 4 [ 55.315251][ T5521] loop5: detected capacity change from 0 to 2048 [ 55.352938][ T5521] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 55.360304][ T5521] EXT4-fs error (device loop5): ext4_find_extent:936: inode #2: comm syz.5.338: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 55.378342][ T5211] udevd[5211]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 55.384944][ T5521] EXT4-fs (loop5): Remounting filesystem read-only [ 55.393550][ T5521] EXT4-fs error (device loop5): ext4_find_extent:936: inode #2: comm syz.5.338: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 55.411219][ T5521] EXT4-fs (loop5): Remounting filesystem read-only [ 55.437244][ T4328] Bluetooth: hci3: command 0x041b tx timeout [ 55.448321][ T4975] EXT4-fs (loop5): unmounting filesystem. [ 55.546242][ T5547] loop7: detected capacity change from 0 to 128 [ 55.557193][ T5537] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.558706][ T5537] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.560156][ T5537] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.561650][ T5537] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.573191][ T5537] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 55.616159][ T5552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.346'. [ 56.025677][ T5585] loop3: detected capacity change from 0 to 1024 [ 56.093531][ T5591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.357'. [ 56.200825][ T5091] NILFS (loop6): disposed unprocessed dirty file(s) when detaching log writer [ 56.425804][ T68] hfsplus: b-tree write err: -5, ino 4 [ 56.520222][ T5612] loop3: detected capacity change from 0 to 16 [ 56.524075][ T5612] erofs: (device loop3): mounted with root inode @ nid 36. [ 56.548861][ T4328] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.551188][ T4328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.553117][ T4328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.554757][ T4328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.556265][ T4328] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.557813][ T4328] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.581377][ T4319] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 46 [ 56.584200][ T4319] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 56.587152][ T4319] erofs: (device loop3): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 56.766213][ T5635] binder: 5634:5635 unknown command 0 [ 56.780114][ T5635] binder: 5634:5635 ioctl c0306201 20000080 returned -22 [ 56.791251][ T5635] binder: 5634:5635 tried to acquire reference to desc 0, got 1 instead [ 56.800678][ T5635] binder: 5634:5635 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 56.802783][ T5635] binder: 5635 RLIMIT_NICE not set [ 56.817686][ T5635] binder: 5635 RLIMIT_NICE not set [ 56.819028][ T4367] binder: release 5634:5635 transaction 5 out, still active [ 56.823425][ T4367] binder: undelivered TRANSACTION_COMPLETE [ 56.850528][ T4367] binder: release 5634:5635 transaction 5 in, still active [ 56.851814][ T4367] binder: send failed reply for transaction 5, target dead [ 56.892389][ T5653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.377'. [ 56.921535][ T5657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.935324][ T5657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.367379][ T5610] chnl_net:caif_netlink_parms(): no params data found [ 57.396704][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.398033][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.399493][ T5610] device bridge_slave_0 entered promiscuous mode [ 57.402688][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.404024][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.405730][ T5610] device bridge_slave_1 entered promiscuous mode [ 57.448753][ T4417] device veth0_to_bond left promiscuous mode [ 57.449862][ T4417] bridge1: port 1(veth0_to_bond) entered disabled state [ 57.514207][ T4417] device hsr_slave_0 left promiscuous mode [ 57.516873][ T4326] Bluetooth: hci3: command 0x040f tx timeout [ 57.550878][ T4417] device hsr_slave_1 left promiscuous mode [ 57.606701][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.608102][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.621129][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.622441][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.623933][ T4417] device bridge_slave_1 left promiscuous mode [ 57.624029][ T5714] binder: tried to use weak ref as strong ref [ 57.625019][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.626070][ T5714] binder: 5713:5714 Acquire 1 refcount change on invalid ref 0 ret -22 [ 57.668368][ T4417] device bridge_slave_0 left promiscuous mode [ 57.669506][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.699690][ T4417] device hsr_slave_0 left promiscuous mode [ 57.736749][ T4417] device hsr_slave_1 left promiscuous mode [ 57.817297][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.818674][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.820260][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.821498][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.823047][ T4417] device bridge_slave_1 left promiscuous mode [ 57.824205][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.846954][ T5728] fuse: root generation should be zero [ 57.857180][ T4417] device bridge_slave_0 left promiscuous mode [ 57.858328][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.937757][ T4417] device bond_slave_0 left promiscuous mode [ 57.938890][ T4417] device bond_slave_1 left promiscuous mode [ 58.086858][ T4417] device veth1_macvtap left promiscuous mode [ 58.087973][ T4417] device veth0_macvtap left promiscuous mode [ 58.088964][ T4417] device veth1_vlan left promiscuous mode [ 58.089987][ T4417] device veth0_vlan left promiscuous mode [ 58.166817][ T4417] device veth1_macvtap left promiscuous mode [ 58.167961][ T4417] device veth0_macvtap left promiscuous mode [ 58.168910][ T4417] device veth1_vlan left promiscuous mode [ 58.170245][ T4417] device veth0_vlan left promiscuous mode [ 58.251736][ C0] vxcan1: j1939_tp_rxtimer: 0x00000000c7644bc6: rx timeout, send abort [ 58.253999][ C0] vxcan1: j1939_xtp_rx_abort_one: 0x00000000c7644bc6: 0x1f000: (3) A timeout occurred and this is the connection abort to close the session. [ 58.300023][ T5731] loop6: detected capacity change from 0 to 7 [ 58.302956][ T5211] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 58.304083][ T5211] loop6: partition table partially beyond EOD, truncated [ 58.306800][ T5211] loop6: p1 size 262016 extends beyond EOD, truncated [ 58.315588][ T5731] loop6: [CUMANA/ADFS] p1 [ADFS] p1 [ 58.321241][ T4417] bond1 (unregistering): (slave macvlan2): Removing an active aggregator [ 58.323212][ T5731] loop6: partition table partially beyond EOD, truncated [ 58.323227][ T4417] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 58.326127][ T5731] loop6: p1 size 262016 extends beyond EOD, truncated [ 58.357290][ T5211] udevd[5211]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 58.365890][ T5211] udevd[5211]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 58.548611][ T5737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.550150][ T5737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.636572][ T4328] Bluetooth: hci1: command 0x0409 tx timeout [ 59.107960][ T4417] bond1 (unregistering): Released all slaves [ 59.596827][ T4328] Bluetooth: hci3: command 0x0419 tx timeout [ 60.716585][ T4326] Bluetooth: hci1: command 0x041b tx timeout [ 60.748515][ T4417] team0 (unregistering): Port device team_slave_1 removed [ 60.909166][ T4417] team0 (unregistering): Port device team_slave_0 removed [ 61.067330][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.287395][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.796558][ T4328] Bluetooth: hci1: command 0x040f tx timeout [ 63.702330][ T4417] bond0 (unregistering): Released all slaves [ 64.479413][ T3438] cfg80211: failed to load regulatory.db [ 64.479840][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.481717][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.876614][ T4326] Bluetooth: hci1: command 0x0419 tx timeout [ 65.649126][ T4417] team0 (unregistering): Port device team_slave_1 removed [ 65.818634][ T4417] team0 (unregistering): Port device team_slave_0 removed [ 66.007562][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.228308][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.581698][ T4417] bond0 (unregistering): Released all slaves [ 68.836719][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.842873][ T5720] netlink: 36 bytes leftover after parsing attributes in process `syz.7.393'. [ 68.859573][ T5741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.398'. [ 68.941759][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.965904][ T5761] loop0: detected capacity change from 0 to 4096 [ 68.967805][ T5610] team0: Port device team_slave_0 added [ 68.969931][ T5610] team0: Port device team_slave_1 added [ 68.996339][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.997920][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.001859][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.004391][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.005573][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.020676][ T5767] loop3: detected capacity change from 0 to 256 [ 69.022207][ T5767] FAT-fs (loop3): Unrecognized mount option "uni_xlatí¾cÁÓte=1rodir" or missing value [ 69.027784][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.032817][ T5761] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 69.079904][ T5746] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 69.088396][ T5610] device hsr_slave_0 entered promiscuous mode [ 69.121427][ T5610] device hsr_slave_1 entered promiscuous mode [ 69.140274][ T5769] netlink: 20 bytes leftover after parsing attributes in process `syz.5.402'. [ 69.141803][ T5769] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.143050][ T5769] IPv6: NLM_F_CREATE should be set when creating new route [ 69.144336][ T5769] IPv6: NLM_F_CREATE should be set when creating new route [ 69.233097][ T5781] loop5: detected capacity change from 0 to 128 [ 69.242637][ T5781] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 69.243791][ T5610] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 69.258847][ T5781] FAT-fs (loop5): FAT read failed (blocknr 32) [ 69.281740][ T5610] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 69.318834][ T5610] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 69.359004][ T5610] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 69.444672][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.452482][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.458529][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.460144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.469946][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.471522][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.473088][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.474343][ T486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.477249][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.479095][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.480684][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.481827][ T486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.483199][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.491528][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.493158][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.494934][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.498092][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.502149][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.504562][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.514872][ T5610] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.516862][ T4382] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 69.531899][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.534200][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.651813][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.653239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.673873][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.702090][ T5825] loop5: detected capacity change from 0 to 64 [ 69.709183][ T4382] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.710880][ T4382] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 69.714154][ T4382] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.715895][ T4382] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.720037][ T4382] usb 1-1: Product: syz [ 69.720768][ T4382] usb 1-1: Manufacturer: syz [ 69.726073][ T4382] usb 1-1: SerialNumber: syz [ 69.921401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.923150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.955211][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.956877][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.959081][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.960402][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.963719][ T5610] device veth0_vlan entered promiscuous mode [ 69.966231][ T5842] netlink: 56 bytes leftover after parsing attributes in process `syz.5.417'. [ 69.978844][ T5610] device veth1_vlan entered promiscuous mode [ 70.039524][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.041236][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.042735][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.044366][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.050417][ T5610] device veth0_macvtap entered promiscuous mode [ 70.062094][ T5848] loop5: detected capacity change from 0 to 16 [ 70.075901][ T5848] erofs: (device loop5): mounted with root inode @ nid 36. [ 70.081698][ T5610] device veth1_macvtap entered promiscuous mode [ 70.122258][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.124058][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.146961][ T4382] usb 1-1: cannot find UAC_HEADER [ 70.154682][ T4382] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 70.158459][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.160417][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.165977][ T4382] usb 1-1: USB disconnect, device number 5 [ 70.177973][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.179757][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.181614][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.183250][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.184823][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.186362][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.187093][ T5855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.194912][ T5855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.217671][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.218995][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.220858][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.222390][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.225235][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.238196][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.239860][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.241270][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.242732][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.244368][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.246054][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.270593][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.272523][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.274250][ T5610] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.284147][ T5610] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.297842][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.304198][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.306109][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.312098][ T5610] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.319283][ T5610] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.320802][ T5610] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.322303][ T5610] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.379030][ T5868] loop3: detected capacity change from 0 to 2048 [ 70.380866][ T5746] udevd[5746]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.436462][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.438149][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.441559][ T486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.469591][ T5868] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 70.475240][ T5868] fs-verity (loop3, inode 13): Unknown hash algorithm number: 5 [ 70.512762][ T4319] EXT4-fs (loop3): unmounting filesystem. [ 70.540280][ T5878] loop5: detected capacity change from 0 to 2048 [ 70.549445][ T486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.554822][ T486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.555725][ T5878] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 70.566328][ T5884] loop3: detected capacity change from 0 to 1024 [ 70.580141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.590347][ T5884] hfsplus: unable to parse mount options [ 70.720610][ T5896] netlink: 4 bytes leftover after parsing attributes in process `syz.5.431'. [ 70.835979][ T5915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.860980][ T5915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.892239][ T5919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.894187][ T5919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.951019][ T5928] loop3: detected capacity change from 0 to 256 [ 70.972074][ T5928] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104f4, chksum : 0x5f17efa6, utbl_chksum : 0xe619d30d) [ 71.101844][ T5942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.104311][ T5942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.125328][ T4417] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.237814][ T4417] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.306896][ T5424] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 71.330556][ T5953] loop5: detected capacity change from 0 to 40427 [ 71.338971][ T4417] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.343705][ T5953] F2FS-fs (loop5): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 71.345039][ T5953] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 71.413706][ T5967] loop7: detected capacity change from 0 to 4096 [ 71.415225][ T5967] ntfs3: Unknown parameter 'hide_dot_files' [ 71.449640][ T4417] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.456013][ T5751] I/O error, dev loop7, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 71.480217][ T5969] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 71.497265][ T5973] loop7: detected capacity change from 0 to 256 [ 71.506741][ T5424] usb 1-1: Using ep0 maxpacket: 8 [ 71.514644][ T5973] FAT-fs (loop7): Directory bread(block 64) failed [ 71.515776][ T5973] FAT-fs (loop7): Directory bread(block 65) failed [ 71.518261][ T5424] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 71.519730][ T5424] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.519888][ T5973] FAT-fs (loop7): Directory bread(block 66) failed [ 71.521118][ T5424] usb 1-1: Product: syz [ 71.522104][ T5973] FAT-fs (loop7): Directory bread(block 67) failed [ 71.522717][ T5424] usb 1-1: Manufacturer: syz [ 71.524032][ T5973] FAT-fs (loop7): Directory bread(block 68) failed [ 71.529700][ T5973] FAT-fs (loop7): Directory bread(block 69) failed [ 71.530933][ T5973] FAT-fs (loop7): Directory bread(block 70) failed [ 71.531953][ T5424] usb 1-1: SerialNumber: syz [ 71.532111][ T5973] FAT-fs (loop7): Directory bread(block 71) failed [ 71.533906][ T5973] FAT-fs (loop7): Directory bread(block 72) failed [ 71.534804][ T5424] usb 1-1: config 0 descriptor?? [ 71.536023][ T5973] FAT-fs (loop7): Directory bread(block 73) failed [ 71.540104][ T5424] gspca_main: sq905-2.14.0 probing 2770:9120 [ 71.560018][ T5973] syz.7.451: attempt to access beyond end of device [ 71.560018][ T5973] loop7: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 71.752461][ T5994] device syzkaller0 entered promiscuous mode [ 71.762603][ T5991] loop5: detected capacity change from 0 to 2048 [ 71.790574][ T5991] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.101487][ T6022] netlink: 'syz.3.463': attribute type 4 has an invalid length. [ 72.554635][ T5424] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 72.555927][ T5424] sq905: probe of 1-1:0.0 failed with error -71 [ 72.562004][ T5424] usb 1-1: USB disconnect, device number 6 [ 72.680380][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.685068][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.732237][ T4328] Bluetooth: hci1: Unknown advertising packet type: 0x60dd [ 72.732273][ T4328] Bluetooth: hci1: Unknown advertising packet type: 0x2ff [ 72.733512][ T4328] Bluetooth: hci1: Unknown advertising packet type: 0xfd60 [ 72.734690][ T4328] Bluetooth: hci1: Unknown advertising packet type: 0x2ff [ 72.735798][ T4328] Bluetooth: hci1: Malformed LE Event: 0x0d [ 72.760261][ T6088] netlink: 'syz.5.488': attribute type 16 has an invalid length. [ 73.116450][ T27] audit: type=1326 audit(73.100:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f5c0a8 code=0x7ffc0000 [ 73.120737][ T27] audit: type=1326 audit(73.110:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f5c0a8 code=0x7ffc0000 [ 73.124185][ T27] audit: type=1326 audit(73.110:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=167 compat=0 ip=0xffffa3f5c0a8 code=0x7ffc0000 [ 73.128612][ T27] audit: type=1326 audit(73.110:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f5c0a8 code=0x7ffc0000 [ 73.132241][ T27] audit: type=1326 audit(73.110:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f5c0a8 code=0x7ffc0000 [ 73.135631][ T27] audit: type=1326 audit(73.110:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=107 compat=0 ip=0xffffa3f5c0a8 code=0x7ffc0000 [ 73.143976][ T27] audit: type=1326 audit(73.110:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f5c0a8 code=0x7ffc0000 [ 73.147514][ T27] audit: type=1326 audit(73.110:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f5c0a8 code=0x7ffc0000 [ 73.151233][ T27] audit: type=1326 audit(73.110:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=110 compat=0 ip=0xffffa3f5c0a8 code=0x7ffc0000 [ 73.154830][ T27] audit: type=1326 audit(73.110:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6123 comm="syz.0.497" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa3f5c0a8 code=0x7ffc0000 [ 73.320888][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.322449][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.360848][ T6134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.364768][ T6134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.676004][ T4417] device hsr_slave_0 left promiscuous mode [ 73.727110][ T4417] device hsr_slave_1 left promiscuous mode [ 73.797130][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.798553][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.800282][ T4417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.802674][ T4417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.804175][ T4417] device bridge_slave_1 left promiscuous mode [ 73.807601][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.848577][ T4417] device bridge_slave_0 left promiscuous mode [ 73.849657][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.967398][ T4417] device veth1_macvtap left promiscuous mode [ 73.968518][ T4417] device veth0_macvtap left promiscuous mode [ 73.969612][ T4417] device veth1_vlan left promiscuous mode [ 73.970664][ T4417] device veth0_vlan left promiscuous mode [ 75.750386][ T4417] team0 (unregistering): Port device team_slave_1 removed [ 75.927682][ T4417] team0 (unregistering): Port device team_slave_0 removed [ 76.087023][ T4417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.287696][ T4417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.671668][ T4417] bond0 (unregistering): Released all slaves [ 78.889675][ T6166] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 79.082311][ T6261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 79.479466][ T6314] fuseblk: Bad value for 'fd' [ 79.534500][ T6318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.539597][ T6318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.561537][ T6324] netlink: 'syz.7.569': attribute type 29 has an invalid length. [ 79.580471][ T6324] netlink: 'syz.7.569': attribute type 29 has an invalid length. [ 79.584910][ T6324] netlink: 'syz.7.569': attribute type 29 has an invalid length. [ 79.590151][ T6324] netlink: 'syz.7.569': attribute type 29 has an invalid length. [ 79.658802][ T6336] netlink: 14 bytes leftover after parsing attributes in process `syz.5.577'. [ 79.995623][ T6377] netlink: 65039 bytes leftover after parsing attributes in process `syz.8.592'. [ 80.041186][ T6381] fuseblk: Bad value for 'fd' [ 80.043803][ T6382] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.591'. [ 80.045272][ T6382] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.591'. [ 80.050202][ T6375] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.591'. [ 80.297789][ T6413] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 80.363170][ T6423] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.609'. [ 80.503839][ T6436] netlink: 'syz.7.613': attribute type 12 has an invalid length. [ 80.505136][ T6436] netlink: 132 bytes leftover after parsing attributes in process `syz.7.613'. [ 80.631409][ T6458] sctp: [Deprecated]: syz.8.619 (pid 6458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 80.631409][ T6458] Use struct sctp_sack_info instead [ 80.775069][ T6471] netlink: 111 bytes leftover after parsing attributes in process `syz.7.625'. [ 80.963140][ T6499] netlink: 40 bytes leftover after parsing attributes in process `syz.0.638'. [ 81.899439][ T6641] fuseblk: Bad value for 'fd' [ 82.376833][ T6715] fuseblk: Bad value for 'fd' [ 83.924574][ T6935] overlayfs: failed to clone upperpath [ 84.162001][ T6973] loop7: detected capacity change from 0 to 1024 [ 84.174626][ T6973] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 84.185856][ T6973] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 84.192615][ T6973] EXT4-fs error (device loop7): ext4_get_journal_inode:5737: inode #32: comm syz.7.827: iget: special inode unallocated [ 84.205245][ T6973] EXT4-fs (loop7): no journal found [ 84.208378][ T6973] EXT4-fs (loop7): can't get journal size [ 84.217426][ T6973] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 84.264712][ T6973] EXT4-fs (loop7): ext4_remount: Checksum for group 0 failed (42152!=20869) [ 84.341842][ T5243] EXT4-fs (loop7): unmounting filesystem. [ 84.460175][ T7014] overlayfs: failed to clone upperpath [ 85.582780][ T7174] overlayfs: failed to clone upperpath [ 98.273323][ T7457] overlayfs: failed to resolve './file1': -2 [ 98.458833][ T7484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.460735][ T7484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.514611][ T7492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.518277][ T7492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.988827][ T7519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.990383][ T7519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.053062][ T7521] overlayfs: failed to resolve './file1': -2 [ 99.534318][ T7542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.536030][ T7542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.984214][ T7544] overlayfs: failed to resolve './file1': -2 [ 100.039765][ T7548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.041344][ T7548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.690287][ T7567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.691901][ T7567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.215937][ T7577] overlayfs: failed to resolve './file0': -2 [ 109.309099][ T7574] tipc: Enabling of bearer rejected, failed to enable media [ 109.384246][ T7592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.385633][ T7592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.501579][ T7616] overlayfs: failed to resolve './file0': -2 [ 109.676736][ T4366] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 109.782430][ T7669] random: crng reseeded on system resumption [ 109.814174][ T7669] Restarting kernel threads ... done. [ 109.856763][ T4366] usb 1-1: Using ep0 maxpacket: 8 [ 109.859861][ T4366] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.862111][ T4366] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 109.864630][ T4366] usb 1-1: config 0 has no interface number 0 [ 109.865676][ T4366] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 109.873462][ T4366] usb 1-1: config 0 interface 88 has no altsetting 0 [ 109.878097][ T4366] usb 1-1: string descriptor 0 read error: -22 [ 109.879202][ T4366] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 109.880641][ T4366] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 109.913408][ T4366] usb 1-1: config 0 descriptor?? [ 109.917843][ T4366] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input3 [ 109.979902][ T7684] overlayfs: failed to resolve './file0': -2 [ 110.153446][ T3438] usb 1-1: USB disconnect, device number 7 [ 110.154461][ C0] usb_acecad 1-1:0.88: can't resubmit intr, dummy_hcd.0-1/input0, status -19 [ 110.271308][ T7710] random: crng reseeded on system resumption [ 110.318902][ T7710] Restarting kernel threads ... done. [ 110.497165][ T7724] overlayfs: failed to resolve './file0': -2 [ 110.706988][ T7742] fuse: Bad value for 'fd' [ 110.771223][ T7747] overlayfs: failed to resolve './file0': -2 [ 110.840070][ T7755] __nla_validate_parse: 7 callbacks suppressed [ 110.840085][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1105'. [ 111.271343][ T7783] overlayfs: failed to resolve './file0': -2 [ 111.396993][ T7801] loop0: detected capacity change from 0 to 760 [ 111.594305][ T7820] overlayfs: failed to clone upperpath [ 111.686232][ T7833] loop3: detected capacity change from 0 to 128 [ 111.790648][ T7845] overlayfs: failed to clone upperpath [ 112.048736][ T7886] loop8: detected capacity change from 0 to 256 [ 112.071831][ T7886] FAT-fs (loop8): Directory bread(block 64) failed [ 112.074561][ T7886] FAT-fs (loop8): Directory bread(block 65) failed [ 112.081218][ T7886] FAT-fs (loop8): Directory bread(block 66) failed [ 112.083579][ T7886] FAT-fs (loop8): Directory bread(block 67) failed [ 112.085935][ T7886] FAT-fs (loop8): Directory bread(block 68) failed [ 112.089486][ T7886] FAT-fs (loop8): Directory bread(block 69) failed [ 112.091841][ T7886] FAT-fs (loop8): Directory bread(block 70) failed [ 112.093043][ T7886] FAT-fs (loop8): Directory bread(block 71) failed [ 112.095463][ T7886] FAT-fs (loop8): Directory bread(block 72) failed [ 112.097878][ T7886] FAT-fs (loop8): Directory bread(block 73) failed [ 112.120054][ T7893] loop0: detected capacity change from 0 to 128 [ 112.182488][ T7899] loop8: detected capacity change from 0 to 256 [ 112.577928][ T7941] mmap: syz.7.1190 (7941) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.707132][ T7954] overlayfs: failed to resolve './file1': -2 [ 113.337365][ T8013] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.339080][ T8013] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.523544][ T8023] overlayfs: failed to resolve './file1': -2 [ 113.746430][ T8013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.763227][ T8013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.811601][ T8036] overlayfs: failed to clone upperpath [ 114.033836][ T8013] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.035249][ T8013] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.037030][ T8013] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.038421][ T8013] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.272147][ T8013] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.273677][ T8013] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.275137][ T8013] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.276711][ T8013] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 114.576206][ T8080] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 114.584299][ T8080] overlayfs: failed to set xattr on upper [ 114.585216][ T8080] overlayfs: ...falling back to index=off,metacopy=off. [ 114.999060][ T8145] fuse: Bad value for 'fd' [ 115.235418][ T8174] overlayfs: failed to clone upperpath [ 115.867068][ T8201] loop8: detected capacity change from 0 to 512 [ 115.881234][ T8201] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.201146][ T8235] fuse: Bad value for 'fd' [ 116.649893][ T8292] fuse: Bad value for 'fd' [ 116.846643][ T8316] loop8: detected capacity change from 0 to 16 [ 116.850508][ T8316] erofs: (device loop8): mounted with root inode @ nid 36. [ 117.401850][ T8396] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 117.403157][ T8396] overlayfs: failed to set xattr on upper [ 117.404155][ T8396] overlayfs: ...falling back to index=off,metacopy=off. [ 118.092998][ T8458] loop8: detected capacity change from 0 to 128 [ 118.112265][ T8458] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 118.125543][ T22] Process accounting resumed [ 118.126834][ T22] FAT-fs (loop8): error, corrupted file size (i_pos 548, 512) [ 118.128071][ T22] FAT-fs (loop8): Filesystem has been set read-only [ 118.161334][ T5610] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 118.183926][ T8463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1315'. [ 119.129464][ T8514] loop8: detected capacity change from 0 to 764 [ 119.151543][ T8514] rock: directory entry would overflow storage [ 119.152717][ T8514] rock: sig=0x5245, size=8, remaining=5 [ 119.742348][ T8548] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1352'. [ 119.767771][ T8548] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1352'. [ 119.948589][ T8569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 119.970086][ T8569] net_ratelimit: 17 callbacks suppressed [ 119.970092][ T8569] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.042642][ T8575] overlayfs: missing 'lowerdir' [ 120.290066][ T8605] overlayfs: missing 'lowerdir' [ 120.315206][ T8607] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.347162][ T8607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 120.518997][ T8636] overlayfs: missing 'lowerdir' [ 120.578923][ T8643] tap0: tun_chr_ioctl cmd 2147767517 [ 120.756385][ T8663] overlayfs: missing 'lowerdir' [ 121.038702][ T8693] overlayfs: missing 'lowerdir' [ 121.241673][ T8712] loop0: detected capacity change from 0 to 164 [ 121.251283][ T8712] rock: directory entry would overflow storage [ 121.252313][ T8712] rock: sig=0x66, size=4, remaining=3 [ 121.263698][ T8712] rock: directory entry would overflow storage [ 121.264939][ T8712] rock: sig=0x66, size=4, remaining=3 [ 121.270325][ T8712] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 121.373148][ T8720] overlayfs: missing 'lowerdir' [ 121.742231][ T8736] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1435'. [ 122.036463][ T8753] overlayfs: failed to clone upperpath [ 122.060958][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1446'. [ 122.093126][ T8764] fuse: Bad value for 'fd' [ 122.173493][ T22] kernel write not supported for file bpf-prog (pid: 22 comm: kworker/1:0) [ 122.353518][ T8801] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.396776][ T8801] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.420026][ T8809] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1460'. [ 122.520287][ T8817] overlayfs: failed to clone upperpath [ 122.601405][ T8828] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 122.602821][ T8828] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 122.640554][ T8833] netlink: 264 bytes leftover after parsing attributes in process `syz.3.1467'. [ 122.658954][ T8833] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1467'. [ 122.847764][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1472'. [ 123.611384][ T8930] loop8: detected capacity change from 0 to 512 [ 124.105287][ T8999] loop7: detected capacity change from 0 to 512 [ 124.113335][ T8999] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 124.888348][ T9065] netlink: 'syz.8.1537': attribute type 2 has an invalid length. [ 125.915922][ T9123] fuse: Bad value for 'fd' [ 125.931126][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.932239][ T2060] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.048370][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1569'. [ 126.231149][ T9150] fuse: Bad value for 'fd' [ 126.389906][ T9163] overlayfs: failed to clone upperpath [ 126.556105][ T9169] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1583'. [ 126.561697][ T9169] netlink: 'syz.0.1583': attribute type 7 has an invalid length. [ 126.563085][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1583'. [ 126.601623][ T9169] device gretap0 entered promiscuous mode [ 126.637619][ T9169] device batadv_slave_1 entered promiscuous mode [ 126.678484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 126.788999][ T9188] TCP: TCP_TX_DELAY enabled [ 126.923803][ T9195] overlayfs: failed to clone upperpath [ 127.041330][ T9203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1595'. [ 127.645755][ T9226] overlayfs: failed to clone upperpath [ 127.762565][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1611'. [ 127.766007][ T9238] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.767725][ T9238] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.769083][ T9238] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.770491][ T9238] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.773731][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1611'. [ 128.019963][ T9254] overlayfs: failed to clone upperpath [ 128.407180][ T9285] overlayfs: failed to clone upperpath [ 128.417227][ T9288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1635'. [ 128.504611][ T9296] netlink: 'syz.3.1639': attribute type 26 has an invalid length. [ 128.506009][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1639'. [ 128.508625][ T9296] netlink: 'syz.3.1639': attribute type 26 has an invalid length. [ 128.509881][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1639'. [ 128.537432][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1641'. [ 128.545817][ T9304] device bridge0 entered promiscuous mode [ 128.561065][ T9304] device macsec1 entered promiscuous mode [ 128.562738][ T9304] bridge0: port 3(macsec1) entered blocking state [ 128.563822][ T9304] bridge0: port 3(macsec1) entered disabled state [ 128.566043][ T9304] device bridge0 left promiscuous mode [ 128.816962][ T9327] fuse: Bad value for 'fd' [ 129.026057][ T9346] batman_adv: batadv0: Adding interface: dummy0 [ 129.027627][ T9346] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.032389][ T9346] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 129.102566][ T9354] fuse: Bad value for 'fd' [ 129.154254][ T9358] tipc: Enabling of bearer rejected, failed to enable media [ 129.208110][ T9366] netlink: 'syz.0.1669': attribute type 1 has an invalid length. [ 129.209615][ T9366] netlink: 'syz.0.1669': attribute type 2 has an invalid length. [ 129.649515][ T9416] overlayfs: failed to resolve './file2': -2 [ 129.895328][ T9448] tipc: Started in network mode [ 129.900046][ T9448] tipc: Node identity b69ec0dcd8c3, cluster identity 4711 [ 129.901476][ T9448] tipc: Enabled bearer , priority 0 [ 129.903201][ T9448] device syzkaller0 entered promiscuous mode [ 129.908865][ T9448] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 129.934825][ T9455] overlayfs: failed to resolve './file2': -2 [ 129.999473][ T9448] tipc: Resetting bearer [ 130.018607][ T9446] tipc: Resetting bearer [ 130.148093][ T9446] tipc: Disabling bearer [ 130.181434][ T9475] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.183027][ T9475] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.184360][ T9475] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.185871][ T9475] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.245696][ T9481] netlink: 'syz.5.1713': attribute type 29 has an invalid length. [ 130.251974][ T9481] netlink: 'syz.5.1713': attribute type 29 has an invalid length. [ 130.256267][ T9481] netlink: 'syz.5.1713': attribute type 29 has an invalid length. [ 130.323850][ T9491] fuse: Bad value for 'fd' [ 130.451239][ T9504] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.452719][ T9504] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.454006][ T9504] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.455254][ T9504] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 130.555492][ T9515] fuse: Bad value for 'fd' [ 130.612800][ T9523] netem: change failed [ 131.105034][ T9565] device netdevsim0 entered promiscuous mode [ 131.455560][ T9601] fuse: Bad value for 'fd' [ 131.700252][ T9626] overlayfs: failed to clone upperpath [ 131.978841][ T9652] overlayfs: failed to clone upperpath [ 132.623497][ T9713] device syzkaller0 entered promiscuous mode [ 132.626399][ T9713] tipc: Started in network mode [ 132.631424][ T9713] tipc: Node identity 4ead52f4eeaa, cluster identity 4711 [ 132.632954][ T9713] tipc: Enabled bearer , priority 0 [ 132.635183][ T9713] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 132.739663][ T9713] tipc: Resetting bearer [ 132.752978][ T9712] tipc: Resetting bearer [ 132.837222][ T9712] tipc: Disabling bearer [ 133.069651][ T9742] tipc: Enabled bearer , priority 0 [ 133.072425][ T9742] device syzkaller0 entered promiscuous mode [ 133.093020][ T9742] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 133.192791][ T9748] __nla_validate_parse: 6 callbacks suppressed [ 133.192801][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1826'. [ 133.211573][ T9742] tipc: Resetting bearer [ 133.249310][ T9741] tipc: Resetting bearer [ 133.377094][ T9741] tipc: Disabling bearer [ 133.515574][ T9708] Set syz1 is full, maxelem 65536 reached [ 133.897494][ T9791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1843'. [ 134.218559][ T9822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1857'. [ 134.426631][ T9844] overlayfs: failed to clone upperpath [ 134.522226][ T9854] tipc: Enabling of bearer rejected, failed to enable media [ 134.571538][ T9857] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1872'. [ 134.792117][ T9882] overlayfs: failed to clone upperpath [ 134.821457][ T9887] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1884'. [ 134.990036][ T9911] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1894'. [ 135.058416][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1896'. [ 135.560676][ T9943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1908'. [ 136.075664][ T9987] tipc: Started in network mode [ 136.085631][ T9987] tipc: Node identity da9d50b88015, cluster identity 4711 [ 136.095808][ T9987] tipc: Enabled bearer , priority 0 [ 136.098027][ T9987] device syzkaller0 entered promiscuous mode [ 136.108406][ T9987] tipc: Resetting bearer [ 136.115168][ T9985] tipc: Resetting bearer [ 136.177109][ T9985] tipc: Disabling bearer [ 136.604090][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1948'. [ 136.796401][T10060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1954'. [ 137.352314][T10128] tipc: Enabled bearer , priority 0 [ 137.358230][T10128] device syzkaller0 entered promiscuous mode [ 137.368875][T10128] tipc: Resetting bearer [ 137.371083][T10125] tipc: Resetting bearer [ 137.417712][T10125] tipc: Disabling bearer [ 137.692226][T10175] tipc: Enabled bearer , priority 0 [ 137.707670][T10175] device syzkaller0 entered promiscuous mode [ 137.731908][T10175] tipc: Resetting bearer [ 137.740639][T10173] tipc: Resetting bearer [ 137.797704][T10173] tipc: Disabling bearer [ 137.899421][T10205] fuse: Bad value for 'fd' [ 137.994541][T10213] ------------[ cut here ]------------ [ 137.995712][T10213] WARNING: CPU: 1 PID: 10213 at kernel/softirq.c:401 __local_bh_enable_ip+0x25c/0x380 [ 137.997182][T10213] Modules linked in: [ 137.997824][T10213] CPU: 1 PID: 10213 Comm: syz.0.2006 Not tainted syzkaller #0 [ 137.999060][T10213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 138.000771][T10213] pstate: 224000c5 (nzCv daIF +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 138.002075][T10213] pc : __local_bh_enable_ip+0x25c/0x380 [ 138.002988][T10213] lr : _raw_spin_unlock_bh+0x48/0x58 [ 138.003880][T10213] sp : ffff800021656810 [ 138.004549][T10213] x29: ffff800021656820 x28: 1fffe0001e5d78b8 x27: 1fffe0001e5d78d9 [ 138.005877][T10213] x26: dfff800000000000 x25: 1fffe0001b4b4379 x24: 0000000000000000 [ 138.007235][T10213] x23: dfff800000000000 x22: 1fffe0001b4b4379 x21: ffff80000fe24824 [ 138.008630][T10213] x20: 0000000000000201 x19: ffff0000da5a1bc8 x18: ffff800011abbcc0 [ 138.009871][T10213] x17: ffff8000181f9000 x16: ffff8000082e7b10 x15: ffff800017cd9fc0 [ 138.011076][T10213] x14: ffff0000da5a2658 x13: ffff0000da5a26d0 x12: 0000000000000001 [ 138.012442][T10213] x11: 1fffe0001e5d78b9 x10: 0000000000000000 x9 : 0000000000000000 [ 138.013803][T10213] x8 : 0000000100000203 x7 : 0000000000000000 x6 : 0000000000000000 [ 138.015164][T10213] x5 : ffff800018514d00 x4 : 0000000000000008 x3 : ffff8000082e7c24 [ 138.016474][T10213] x2 : 0000000000000001 x1 : 0000000000000201 x0 : ffff80000fe24824 [ 138.017742][T10213] Call trace: [ 138.018235][T10213] __local_bh_enable_ip+0x25c/0x380 [ 138.018954][T10213] _raw_spin_unlock_bh+0x48/0x58 [ 138.019668][T10213] page_pool_put_defragged_page+0x4d0/0xae8 [ 138.020510][T10213] __xdp_return+0x3ac/0x524 [ 138.021214][T10213] xdp_return_frame+0x90/0x264 [ 138.021997][T10213] tun_device_event+0x8e4/0xe80 [ 138.022751][T10213] raw_notifier_call_chain+0xd4/0x164 [ 138.023657][T10213] dev_change_tx_queue_len+0x170/0x2c8 [ 138.024555][T10213] do_setlink+0xcd4/0x32c4 [ 138.025210][T10213] rtnl_newlink+0xce0/0x1a1c [ 138.025921][T10213] rtnetlink_rcv_msg+0x734/0xce4 [ 138.026694][T10213] netlink_rcv_skb+0x208/0x3c4 [ 138.027488][T10213] rtnetlink_rcv+0x28/0x38 [ 138.028201][T10213] netlink_unicast+0x60c/0x824 [ 138.028924][T10213] netlink_sendmsg+0x6e8/0x9b0 [ 138.029725][T10213] ____sys_sendmsg+0x5b8/0x918 [ 138.030433][T10213] __sys_sendmsg+0x25c/0x320 [ 138.031174][T10213] __arm64_sys_sendmsg+0x80/0x94 [ 138.031946][T10213] invoke_syscall+0x98/0x2bc [ 138.032637][T10213] el0_svc_common+0x138/0x258 [ 138.033347][T10213] do_el0_svc+0x58/0x13c [ 138.033978][T10213] el0_svc+0x58/0x138 [ 138.034606][T10213] el0t_64_sync_handler+0x84/0xf0 [ 138.035462][T10213] el0t_64_sync+0x18c/0x190 [ 138.036217][T10213] irq event stamp: 3867 [ 138.036880][T10213] hardirqs last enabled at (3865): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 138.038558][T10213] hardirqs last disabled at (3866): [] _raw_spin_lock_irqsave+0xa4/0xb4 [ 138.040185][T10213] softirqs last enabled at (3830): [] inet6_fill_ifla6_attrs+0xc70/0x1b6c [ 138.041848][T10213] softirqs last disabled at (3867): [] page_pool_put_defragged_page+0x350/0xae8 [ 138.043551][T10213] ---[ end trace 0000000000000000 ]--- [ 138.044456][T10213] [ 138.044795][T10213] ================================ [ 138.045592][T10213] WARNING: inconsistent lock state [ 138.046329][T10213] syzkaller #0 Tainted: G W [ 138.047196][T10213] -------------------------------- [ 138.047977][T10213] inconsistent {IN-SOFTIRQ-W} -> {SOFTIRQ-ON-W} usage. [ 138.048972][T10213] syz.0.2006/10213 [HC0[0]:SC0[0]:HE0:SE1] takes: [ 138.049941][T10213] ffff0000d5bf68a0 (&r->producer_lock#2){+.?.}-{2:2}, at: tun_device_event+0x6c0/0xe80 [ 138.051371][T10213] {IN-SOFTIRQ-W} state was registered at: [ 138.052324][T10213] lock_acquire+0x20c/0x644 [ 138.053088][T10213] _raw_spin_lock+0x54/0x6c [ 138.053867][T10213] tun_net_xmit+0x9d4/0x132c [ 138.054647][T10213] dev_hard_start_xmit+0x244/0x8e0 [ 138.055508][T10213] sch_direct_xmit+0x204/0x480 [ 138.056368][T10213] __dev_queue_xmit+0x1384/0x309c [ 138.057187][T10213] arp_xmit_finish+0x24/0x34 [ 138.057882][T10213] NF_HOOK+0x2b8/0x34c [ 138.058556][T10213] arp_xmit+0x160/0x26c [ 138.059266][T10213] arp_send_dst+0x1f8/0x2c8 [ 138.060054][T10213] arp_solicit+0x9b0/0xc44 [ 138.060768][T10213] neigh_probe+0xc4/0x128 [ 138.061480][T10213] neigh_timer_handler+0x7c0/0xe18 [ 138.062454][T10213] call_timer_fn+0x1b8/0x964 [ 138.063228][T10213] __run_timers+0x460/0x6bc [ 138.063928][T10213] run_timer_softirq+0x7c/0x114 [ 138.064728][T10213] handle_softirqs+0x318/0xc6c [ 138.065582][T10213] __do_softirq+0x14/0x20 [ 138.066285][T10213] ____do_softirq+0x14/0x20 [ 138.066994][T10213] call_on_irq_stack+0x30/0x48 [ 138.067789][T10213] do_softirq_own_stack+0x20/0x2c [ 138.068663][T10213] __irq_exit_rcu+0x23c/0x43c [ 138.069506][T10213] irq_exit_rcu+0x14/0x84 [ 138.070250][T10213] el1_interrupt+0x38/0x54 [ 138.071010][T10213] el1h_64_irq_handler+0x18/0x24 [ 138.071749][T10213] el1h_64_irq+0x64/0x68 [ 138.072507][T10213] _raw_spin_lock_irqsave+0x14/0xb4 [ 138.073364][T10213] debug_check_no_obj_freed+0x148/0x46c [ 138.074408][T10213] slab_free_freelist_hook+0x104/0x1ec [ 138.075362][T10213] kmem_cache_free+0x11c/0x324 [ 138.076167][T10213] putname+0x118/0x180 [ 138.076851][T10213] do_sys_openat2+0x1c0/0x3d8 [ 138.077594][T10213] __arm64_sys_openat+0x120/0x154 [ 138.078380][T10213] invoke_syscall+0x98/0x2bc [ 138.079172][T10213] el0_svc_common+0x138/0x258 [ 138.079932][T10213] do_el0_svc+0x58/0x13c [ 138.080701][T10213] el0_svc+0x58/0x138 [ 138.081403][T10213] el0t_64_sync_handler+0x84/0xf0 [ 138.082198][T10213] el0t_64_sync+0x18c/0x190 [ 138.082966][T10213] irq event stamp: 3868 [ 138.083647][T10213] hardirqs last enabled at (3865): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 138.085366][T10213] hardirqs last disabled at (3866): [] _raw_spin_lock_irqsave+0xa4/0xb4 [ 138.086926][T10213] softirqs last enabled at (3868): [] page_pool_put_defragged_page+0x4d0/0xae8 [ 138.088595][T10213] softirqs last disabled at (3867): [] page_pool_put_defragged_page+0x350/0xae8 [ 138.090255][T10213] [ 138.090255][T10213] other info that might help us debug this: [ 138.091548][T10213] Possible unsafe locking scenario: [ 138.091548][T10213] [ 138.092793][T10213] CPU0 [ 138.093364][T10213] ---- [ 138.093878][T10213] lock(&r->producer_lock#2); [ 138.094634][T10213] [ 138.095175][T10213] lock(&r->producer_lock#2); [ 138.095991][T10213] [ 138.095991][T10213] *** DEADLOCK *** [ 138.095991][T10213] [ 138.097306][T10213] 3 locks held by syz.0.2006/10213: [ 138.098094][T10213] #0: ffff8000177317c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 [ 138.099523][T10213] #1: ffff0000d5bf6920 (&r->consumer_lock){+.+.}-{2:2}, at: tun_device_event+0x69c/0xe80 [ 138.101056][T10213] #2: ffff0000d5bf68a0 (&r->producer_lock#2){+.?.}-{2:2}, at: tun_device_event+0x6c0/0xe80 [ 138.102649][T10213] [ 138.102649][T10213] stack backtrace: [ 138.103568][T10213] CPU: 1 PID: 10213 Comm: syz.0.2006 Tainted: G W syzkaller #0 [ 138.104964][T10213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 138.106567][T10213] Call trace: [ 138.107101][T10213] dump_backtrace+0x1c8/0x1f4 [ 138.107907][T10213] show_stack+0x2c/0x3c [ 138.108657][T10213] __dump_stack+0x30/0x40 [ 138.109407][T10213] dump_stack_lvl+0xf8/0x160 [ 138.110115][T10213] dump_stack+0x1c/0x5c [ 138.110779][T10213] print_usage_bug+0x4c0/0x6d8 [ 138.111557][T10213] mark_lock_irq+0x788/0x9e4 [ 138.112251][T10213] mark_lock+0x224/0x320 [ 138.112916][T10213] lockdep_hardirqs_on_prepare+0x38c/0x7a8 [ 138.113824][T10213] trace_hardirqs_on+0x164/0x23c [ 138.114685][T10213] __local_bh_enable_ip+0x1f8/0x380 [ 138.115570][T10213] _raw_spin_unlock_bh+0x48/0x58 [ 138.116386][T10213] page_pool_put_defragged_page+0x4d0/0xae8 [ 138.117380][T10213] __xdp_return+0x3ac/0x524 [ 138.118164][T10213] xdp_return_frame+0x90/0x264 [ 138.119006][T10213] tun_device_event+0x8e4/0xe80 [ 138.119836][T10213] raw_notifier_call_chain+0xd4/0x164 [ 138.120684][T10213] dev_change_tx_queue_len+0x170/0x2c8 [ 138.121654][T10213] do_setlink+0xcd4/0x32c4 [ 138.122402][T10213] rtnl_newlink+0xce0/0x1a1c [ 138.123116][T10213] rtnetlink_rcv_msg+0x734/0xce4 [ 138.123870][T10213] netlink_rcv_skb+0x208/0x3c4 [ 138.124592][T10213] rtnetlink_rcv+0x28/0x38 [ 138.125285][T10213] netlink_unicast+0x60c/0x824 [ 138.126009][T10213] netlink_sendmsg+0x6e8/0x9b0 [ 138.126764][T10213] ____sys_sendmsg+0x5b8/0x918 [ 138.127579][T10213] __sys_sendmsg+0x25c/0x320 [ 138.128324][T10213] __arm64_sys_sendmsg+0x80/0x94 [ 138.129191][T10213] invoke_syscall+0x98/0x2bc [ 138.129962][T10213] el0_svc_common+0x138/0x258 [ 138.130713][T10213] do_el0_svc+0x58/0x13c [ 138.131424][T10213] el0_svc+0x58/0x138 [ 138.132094][T10213] el0t_64_sync_handler+0x84/0xf0 [ 138.132960][T10213] el0t_64_sync+0x18c/0x190 [ 138.134422][T10213] ------------[ cut here ]------------ [ 138.135305][T10213] raw_local_irq_restore() called with IRQs enabled [ 138.136383][T10213] WARNING: CPU: 1 PID: 10213 at kernel/locking/irqflag-debug.c:10 warn_bogus_irq_restore+0x34/0x44 [ 138.138132][T10213] Modules linked in: [ 138.138841][T10213] CPU: 1 PID: 10213 Comm: syz.0.2006 Tainted: G W syzkaller #0 [ 138.140248][T10213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 138.141801][T10213] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 138.143007][T10213] pc : warn_bogus_irq_restore+0x34/0x44 [ 138.143875][T10213] lr : warn_bogus_irq_restore+0x34/0x44 [ 138.144678][T10213] sp : ffff800021656960 [ 138.145310][T10213] x29: ffff800021656960 x28: 0000000000000001 x27: 1fffe0001ab7ed30 [ 138.146493][T10213] x26: 0000000000000003 x25: dfff800000000000 x24: 1fffe0001ab7ed31 [ 138.147681][T10213] x23: 0000000000000001 x22: ffff0000e3bb0e00 x21: ffff0000d5bf6988 [ 138.148898][T10213] x20: ffff0000d5bf6908 x19: 0000000000000000 x18: ffff800011abbcc0 [ 138.150167][T10213] x17: 0000000000000000 x16: ffff800008042c8c x15: 0000000000000002 [ 138.151320][T10213] x14: 00000000ffffffff x13: 0000000000000001 x12: 0000000000080000 [ 138.152639][T10213] x11: 000000000007ffff x10: ffff80002264b000 x9 : 1f72502372a7d000 [ 138.153795][T10213] x8 : 1f72502372a7d000 x7 : 0000000000000001 x6 : 0000000000000001 [ 138.154957][T10213] x5 : ffff8000216563f8 x4 : ffff8000151a4820 x3 : ffff800008311cf4 [ 138.156177][T10213] x2 : 0000000000000001 x1 : 0000000000000001 x0 : 0000000000000000 [ 138.157351][T10213] Call trace: [ 138.157842][T10213] warn_bogus_irq_restore+0x34/0x44 [ 138.158738][T10213] _raw_spin_unlock_irqrestore+0xa0/0xac [ 138.159704][T10213] tun_device_event+0xbf8/0xe80 [ 138.160505][T10213] raw_notifier_call_chain+0xd4/0x164 [ 138.161361][T10213] dev_change_tx_queue_len+0x170/0x2c8 [ 138.162308][T10213] do_setlink+0xcd4/0x32c4 [ 138.163077][T10213] rtnl_newlink+0xce0/0x1a1c [ 138.163800][T10213] rtnetlink_rcv_msg+0x734/0xce4 [ 138.164589][T10213] netlink_rcv_skb+0x208/0x3c4 [ 138.165305][T10213] rtnetlink_rcv+0x28/0x38 [ 138.166009][T10213] netlink_unicast+0x60c/0x824 [ 138.166732][T10213] netlink_sendmsg+0x6e8/0x9b0 [ 138.167444][T10213] ____sys_sendmsg+0x5b8/0x918 [ 138.168127][T10213] __sys_sendmsg+0x25c/0x320 [ 138.168825][T10213] __arm64_sys_sendmsg+0x80/0x94 [ 138.169674][T10213] invoke_syscall+0x98/0x2bc [ 138.170379][T10213] el0_svc_common+0x138/0x258 [ 138.171170][T10213] do_el0_svc+0x58/0x13c [ 138.171909][T10213] el0_svc+0x58/0x138 [ 138.172543][T10213] el0t_64_sync_handler+0x84/0xf0 [ 138.173370][T10213] el0t_64_sync+0x18c/0x190 [ 138.174105][T10213] irq event stamp: 3868 [ 138.174791][T10213] hardirqs last enabled at (3865): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 138.176356][T10213] hardirqs last disabled at (3866): [] _raw_spin_lock_irqsave+0xa4/0xb4 [ 138.177898][T10213] softirqs last enabled at (3868): [] page_pool_put_defragged_page+0x4d0/0xae8 [ 138.179515][T10213] softirqs last disabled at (3867): [] page_pool_put_defragged_page+0x350/0xae8 [ 138.181222][T10213] ---[ end trace 0000000000000000 ]--- [ 138.185284][T10213] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 138.188760][T10213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.190074][T10213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready