last executing test programs: 28.921571001s ago: executing program 3: openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000300)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PARMS={0x1c}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) madvise(&(0x7f00003c3000/0x1000)=nil, 0x1000, 0x18) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x700, 0x10, 0x1, 0x5, {{0x7, 0x4, 0x2, 0x6, 0x1c, 0x65, 0x0, 0x5, 0x4, 0x0, @local, @broadcast, {[@cipso={0x86, 0x6}, @noop]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r2 = fcntl$dupfd(r1, 0x0, r1) read$FUSE(0xffffffffffffffff, &(0x7f000000a400)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x40, &(0x7f0000000c80)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}], [{@obj_user={'obj_user', 0x3d, 'mpls\x00'}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@seclabel}, {@euid_gt}]}}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 27.944928895s ago: executing program 3: syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b36282edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$eJzs0L9rE2Ecx/H397knPypUiYpDBRuweF6oJndVB6fgFCEHDi6CQUMam2KippfBlha6SEGq/Rd0qqMKOokoOBcHwUHPpZs0Q3EQB4nk8kTwb/B5Dfe57wfunodvK+pGGeD3/mqDMgmHg3xE0MC0jDqlRvnazN9Nbo2CS2beNPnM5FS0vHK73m43l/IX8+T+KYAfSfe3il5wTNEXysjn/dVGXW6GDMp01HxIrkrhEU6NrveYKT3J0Rs4DNxNLiu64lbhULHXuVeMllfOLHbqC82F5p0gmLtQOlcqnQ+KtxbbzdIrxHsoiies4YVkQia8NVI1HuzoA8wK4rVU7EihT7rG1o5z+uRsH+XtMUB45/bJfNWtvLrKKbLXh5evcER4ihMyU2VCoUkOqiBX1Evx9Sf9M6XIrjvO2cbd9vzGNSW/0ttl2cuKv0vK9QkKPnPD1XCY92zEzMRUYrZjdr8xLW+Gp4z3qteHz+dmOs4JSHO/3ust+Wn4IDokcEOCHEwmv1PJvXLw1nxjgi/jF8uyLMuyLMuyLOs/8CcAAP//o/hj9Q==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000004c00000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x0, 0x0, {0x0, 0x0, 0x0, 0x20001c, 0x0, 0x800}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00'}, 0x90) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r4, 0x6, 0x23, &(0x7f0000001340)=""/4096, &(0x7f0000000340)=0x1000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000800bfa100000000000007010000f87fffffb702000008000000b70300000000000085000000940000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 24.552970974s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000200)='ext2\x00', &(0x7f00000007c0)='./file3\x00', 0x200402, &(0x7f0000000240)={[{@abort}]}, 0x9, 0x75b, &(0x7f0000000800)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback}, {@in, 0x0, 0x32}, @in6=@loopback, {}, {}, {}, 0x20, 0x0, 0xa}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f0000000100)='./file3\x00', 0x0, 0x80) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@xino_auto}], [], 0x2c}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0xc, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) 23.301797364s ago: executing program 4: ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000180)={0x0, 0x0, '\x00', 0x1, 0x0}) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x3}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x2}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, r2, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x20000, 0x6a}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x514}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000851}, 0x4844) read$watch_queue(r0, 0x0, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$watch_queue(r6, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2, 0x0, 0x2}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/173, 0xad}], 0x0, 0x1}, 0x20) 19.640591073s ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$apparmor_thread_current(0xffffff9c, 0x0, 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000340)=ANY=[@ANYBLOB], 0xff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000002000000000000000000000002008000000000000140400000c070000000000000a000000000000040000000000000000000000000000080000000000000000000000000000b085da05d603888318a0cce400000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000fdffffffff00000000000000000000e4ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000006fb7cd02b734bcce41ef6e95bd000000008000000000000000000000000000000000000000000000000000000000000000eeff3f000000008fc7660c490587b3ab213098a6767c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f8f0000000000000000dbd5a834b3ab2a0cc27081310000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440a05000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000f18a0afe993500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4f016fa70c1255400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000008c7f8f1b44f000000000feffffff000000000000000000100000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000626d8331e48c0bcd93012eed0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e918e0ffffff00000000000000000000000000000000000000000000001b00000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000f20000000000000000000000000000e7dcc79759ce44b4a3145ed155bc5e0000000000000000000000000000000000fffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a330000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000ff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000cb33322c9c564ae5f8eef74d5aa7cc9c0000000000000000000000000000000000005a0300000000000000000500000000000000000000000000000000000000003f7f1c00000000000000000000000000000000ecffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000afe96d981b6f119c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2ffffff000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3d2e85100000000000000000000000000000000000000000000000000844caab24e79bd260000000000000000000000000000000000000000005080000000000000000000000000000000010000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c7700"/2448]}, 0xa08) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) chdir(&(0x7f0000000380)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4040, 0x0) r5 = open(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000680)=@v1={0x0, @aes256, 0xc, @desc2}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000000280)) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x42, 0x3}, 0x4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x17, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x90) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00') unlink(&(0x7f0000000100)='./file1\x00') 11.355642884s ago: executing program 1: signalfd(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000400)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c756e695f786c6174653d302c696f636861727365743d63703933362c73686f72746e616d653d6d697865642c756e695f786c6174653d302c757466383d302c636f6465706167653d3733372c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c73686f72746e616d653d6d697865642c757466383d302c756e695f786c617465001d18"], 0x83, 0x367, &(0x7f0000002cc0)="$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") ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) 11.152135048s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000540)='./file0\x00', 0x21000f, &(0x7f0000000240), 0xfe, 0x50c, &(0x7f0000000600)="$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") 11.097978171s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000d80)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d69736f383835392d312c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dddf2bd6c2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESDEC=r0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030332c63726561746f723d85f194712c626172726965722c6e6f6465636f6d706f73652c756d61736b3d30303030303030303030303030303030303030303231372c6465636f6d706f73652c666f7263652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c637265683661746f723d010000002c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',nobarrier,subj_role=nls,e=!-+,apasig,\x00'/60], 0x1, 0x6e4, &(0x7f0000000340)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) 10.82736487s ago: executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) r1 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000400)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x5, 0x0, 0x1, r1, 0x0, 0x0, 'syz0\x00', 0x0}) 10.594203595s ago: executing program 4: r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xd0, 0x0, 0x0) 10.420905112s ago: executing program 3: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/module/rmi_core', 0x781100, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x1c, &(0x7f00000002c0)={r0}, 0x4) 9.929700267s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x3}, @TCA_U32_HASH={0x8, 0x2, 0x5}]}}]}, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) 9.464820898s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x40000000000000, 0x0, 0x8000000, 0x0, 0x4}}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x120088, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="2c686f6f73652c756e616d653d2c63616368653d6c6f6f73652c76657273696f6e3d3970323034302c616669643d30783030304e6b30303030303030303030362c6e6f657874656e642c616669643d3078303030303030303066666666666666662c616669643d30783030303030303017cf67a730303030342c736d67636b6673686174ca8876813d2c00"]) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$PIO_UNISCRNMAP(r3, 0x4b4d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="7000079588cd4998082f34f3ff13000905000000", @ANYRES32=r6, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac1414aa08000100ac1414aa080004007f00000108000400e00000021400030076657468315f746f5f626f6e640000000800080000030000080008003000"], 0x70}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="70000000140009050000000000000000020100fd", @ANYRES32=r9, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac1e000108000100ac1414aa080004007f00000108000432e68295662eb046e9df0000021400030076657468315f746f5f626f6e640000000800080000b12277fffc0100c5a1d475030000"], 0x70}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x2004040}, 0x4000084) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'sit0\x00', &(0x7f00000002c0)}) 9.239662476s ago: executing program 1: r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0xfd, 0x4fa, &(0x7f00000005c0)="$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") r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x90) r2 = socket(0x10, 0x803, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000300)=""/252, 0x0) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005200010000000000000000000a00", @ANYRES32], 0x1c}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0x1, 0x0, 0x3d}, {0x0, 0x7f, 0x8, 0x80000001}, {0x6, 0x4, 0x8, 0x1}]}) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000ac0)={0x12dc, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1168, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8e, 0x4, "31fcd667f0574b4ca669dff57033480b5b548d4f7e06fd618f327aa5b80fc29fc99723709a4ff6406a19653bc48470a65a2588e608d7016fe0d4feaaecd17de5e8f89fc8c4f36350f74d7e64008bb0844c8712a79288807dbc24fc43db4d0730b54433177ead982bd4dab329a763d87305e8f3269a81a49f29c745df520f0eeef84ea8419add7feae9f8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_MASK={0xffb, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0xa9, 0x4, "5bfd4fdca898474837c03b5410a8e29f5365c72be6918f1ba7c56a15a7e4be63a406992e967f724272f856e8ec75f8cfd0cbcff0536c0db8f1cda96599b780a8d322e3f06c55d9380594acb0fc0e18ec59ecab1f70d80873f3ed81a4c8c68ba6b39539266f6587db0c0582be7be02e9a24cca5709ceea51300b6a3b1fdcfc9cc6b6d0e56931b3d488541a5f5e2a6c5d77b28cceaf564d35f36c61b55093dc217ec8c62dc97"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfb}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x200}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x118, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '*\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'grpquota'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'minixdf'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe75}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$,\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '!){\\\\)!}[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'grpquota'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'grpquota'}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x40, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x3c, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc4}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x12dc}, 0x1, 0x0, 0x0, 0x20000001}, 0x4004) ioctl$PTP_ENABLE_PPS(r4, 0x40043d04, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x1, r0, 0x6}) r5 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x100000000) 9.190385852s ago: executing program 0: syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000140)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) 7.756605614s ago: executing program 2: sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}], 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400100000000000000200000028000480240001800b000100736f636b65740000140002800800014000000002080002400000000009"], 0x7c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000000000001000080"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.713124374s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000013001ffff7ff00000800000007000000", @ANYRES32=r2], 0x38}}, 0x0) 7.531303201s ago: executing program 4: epoll_create1(0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000001280)="67c0520700b80a0000000f23c00f21f835020007000f23f8f30fc73500880000c744240008000000c744240202000000c7442406000000000f011424f30fc77300c4e2790f170f01dfc4e17ae6f63ec8585a0836f2263ef4", 0x58}], 0x1, 0x20, 0x0, 0xffffff97) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.976423336s ago: executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) mknod(0x0, 0x8001420, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f0000371000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_ATTACH(0x9, 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x8) 6.724899659s ago: executing program 0: fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0x0, 0x1}, 0x6) r1 = socket(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000700)) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f00000005c0)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/73, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000a40), 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r7, &(0x7f0000004080)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000480)="9de1cedbb712282b7955b1f9ca358394aaad5f6c0dab7d75338b493d0dec3b4d1f7c99a70764b2b151015ed79a1b991a1c0c4fb4", 0x34}, {&(0x7f00000004c0)="a1271605e187031ac70e020809f12c4c6ce52dad5acc3da99b9aac06773f6d3a08ac6229", 0x24}, {&(0x7f00000005c0)}, {&(0x7f0000000700)="a46a2495b5270eb3d4b20b7976b9", 0xe}], 0x4, &(0x7f0000000f00)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, r6, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r7, 0xffffffffffffffff, r7, 0xffffffffffffffff, r2]}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8, 0x860647e2b8daec77}}, {{&(0x7f0000001040)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f00000015c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r6, r6]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c}}], 0xa0}}, {{&(0x7f00000016c0)=@abs, 0x6e, &(0x7f00000018c0)=[{0x0}], 0x1, &(0x7f0000001940)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50, 0x4044}}, {{&(0x7f00000019c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a40), 0x0, &(0x7f0000001a80)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38, 0x20040051}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001ac0)}, {&(0x7f0000001b00)="c2", 0x1}], 0x2, &(0x7f0000001b80)=[@cred={{0x1c}}], 0x20, 0x4000000}}, {{0x0, 0x0, &(0x7f0000001e00), 0x0, 0x0, 0x0, 0x90}}, {{0x0, 0x0, &(0x7f0000003580), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r4, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="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"], 0x68}}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000003780)="e2d9d0850076cc2b5c89628f170bf19e37fa33fbc5909c1dfeb4c06720c17237fa165fca423d177e933b5f481a0d732ef4aad6e48d8f0bff38703672b612f43d90ccfe8b2a0a6c4f3d5cb073d18772", 0x4f}], 0x1, &(0x7f00000039c0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r6, r6]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd0}}], 0x8, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) 6.511315782s ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x0, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0x0, 0x2, r2, 0xb}) 5.365261143s ago: executing program 2: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 3.405845644s ago: executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x20800, &(0x7f00000003c0)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@default_permissions}, {@allow_other}], [{@hash}, {@appraise}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@subj_user={'subj_user', 0x3d, '#/.'}}]}}, 0x1, 0x0, &(0x7f0000000140)="469a58d34c767a4085f63e6d") openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3.00604855s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1a, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = gettid() r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) ioperm(0x0, 0x7, 0x8) r3 = fsopen(&(0x7f0000000240)='virtiofs\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000780)={[{@noload}, {@mblk_io_submit}, {@bh}, {@auto_da_alloc}, {@block_validity}, {@quota}]}, 0x3, 0x434, &(0x7f00000002c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) chdir(&(0x7f0000000a40)='./file0\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r5, 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH(r3, 0x6, 0x0, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f00000003c0)) tkill(r1, 0x7) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 2.615933095s ago: executing program 2: getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x1c}, 0x18) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) write$binfmt_script(r1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) memfd_secret(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x3000000}, 0x0) 1.984854397s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0xfff, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x2000) 620.011694ms ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xffdd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) mkdir(&(0x7f0000000000)='.\x00', 0x4) 493.943753ms ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='ext4_fc_commit_stop\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='ext4_fc_commit_stop\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x42400) 324.706699ms ago: executing program 2: syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000000)='./bus\x00', 0xc0d4, &(0x7f0000002700)=ANY=[], 0x1, 0x270, &(0x7f00000008c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') link(&(0x7f0000000240)='./file0\x00', 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) epoll_create1(0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) 0s ago: executing program 1: syz_mount_image$bcachefs(&(0x7f0000005b00), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="6261636b67726f756e645f636f6d7072657373696f6e3d6e6f6e652c6261636b67726f756e645f636f6d7072657373696f6e3d63726336342c73743332632c646174615f636865636b73756d3d63726336342c646174615f636865636b7375003d6372633332632c7374725f686173683d736970686173682c6261636b67726f756e645f636f6d7072657373696f6e3d6e6f6e652c0063ad2a0f24dbcb9b4c34c2eab4871f7dfe411dc51b7c2cc57106643bb5721eae89517d4a6314015fefa971e2255edc0dcd297a5ba652a6c236bba6ae8074b44c616c423519f5e3de4f62550a9c00ea21b273c6024b2a7d6e407de8a0cbb9a45c"], 0xff, 0x5b1c, &(0x7f000000b6c0)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.98' (ED25519) to the list of known hosts. 2024/06/13 09:49:50 fuzzer started 2024/06/13 09:49:51 dialing manager at 10.128.0.169:30024 [ 162.700237][ T5047] cgroup: Unknown subsys name 'net' [ 162.943869][ T5047] cgroup: Unknown subsys name 'rlimit' 2024/06/13 09:50:38 starting 5 executor processes [ 208.936069][ T5049] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 211.590042][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.602133][ T5082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.611642][ T5082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.625480][ T5082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.636823][ T5082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.645955][ T5082] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.656158][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.664661][ T5082] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.675597][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.684418][ T5084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.693823][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.707740][ T4432] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.717798][ T4432] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.732390][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 211.741763][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.753311][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.776255][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 211.795263][ T4432] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.238296][ T5075] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.248115][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.262142][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.270947][ T5084] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.284309][ T5084] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.312895][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.332145][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.343613][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.353220][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.369565][ T5084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.381064][ T5084] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 212.390518][ T5084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.066568][ T5078] chnl_net:caif_netlink_parms(): no params data found [ 213.384330][ T5076] chnl_net:caif_netlink_parms(): no params data found [ 213.457929][ T5074] chnl_net:caif_netlink_parms(): no params data found [ 213.712520][ T5075] Bluetooth: hci0: command tx timeout [ 213.794330][ T5075] Bluetooth: hci2: command tx timeout [ 213.876063][ T5075] Bluetooth: hci1: command tx timeout [ 214.083065][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 214.228249][ T5089] chnl_net:caif_netlink_parms(): no params data found [ 214.416665][ T5078] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.424545][ T5078] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.432589][ T5078] bridge_slave_0: entered allmulticast mode [ 214.432632][ T5075] Bluetooth: hci4: command tx timeout [ 214.447318][ T5078] bridge_slave_0: entered promiscuous mode [ 214.514610][ T5075] Bluetooth: hci3: command tx timeout [ 214.579095][ T5078] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.587439][ T5078] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.597000][ T5078] bridge_slave_1: entered allmulticast mode [ 214.606185][ T5078] bridge_slave_1: entered promiscuous mode [ 214.775862][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.783641][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.791431][ T5076] bridge_slave_0: entered allmulticast mode [ 214.806099][ T5076] bridge_slave_0: entered promiscuous mode [ 214.828078][ T5076] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.836333][ T5076] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.844133][ T5076] bridge_slave_1: entered allmulticast mode [ 214.853216][ T5076] bridge_slave_1: entered promiscuous mode [ 214.892057][ T5074] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.899916][ T5074] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.907926][ T5074] bridge_slave_0: entered allmulticast mode [ 214.916962][ T5074] bridge_slave_0: entered promiscuous mode [ 214.938229][ T5078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.948100][ T5074] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.955957][ T5074] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.963780][ T5074] bridge_slave_1: entered allmulticast mode [ 214.973000][ T5074] bridge_slave_1: entered promiscuous mode [ 215.086369][ T5078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.293852][ T5076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.309925][ T5078] team0: Port device team_slave_0 added [ 215.364032][ T5074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.373980][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.381644][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.389383][ T5090] bridge_slave_0: entered allmulticast mode [ 215.398398][ T5090] bridge_slave_0: entered promiscuous mode [ 215.420113][ T5078] team0: Port device team_slave_1 added [ 215.428752][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.436592][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.444485][ T5090] bridge_slave_1: entered allmulticast mode [ 215.453655][ T5090] bridge_slave_1: entered promiscuous mode [ 215.472124][ T5076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.516898][ T5074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.793598][ T5075] Bluetooth: hci0: command tx timeout [ 215.863870][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.875761][ T5075] Bluetooth: hci2: command tx timeout [ 215.954298][ T5075] Bluetooth: hci1: command tx timeout [ 215.964182][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.971336][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.998835][ T5078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.020528][ T5076] team0: Port device team_slave_0 added [ 216.031440][ T5078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.038724][ T5078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.065091][ T5078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.085061][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.095374][ T5089] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.103262][ T5089] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.111057][ T5089] bridge_slave_0: entered allmulticast mode [ 216.119934][ T5089] bridge_slave_0: entered promiscuous mode [ 216.151495][ T5074] team0: Port device team_slave_0 added [ 216.179106][ T5076] team0: Port device team_slave_1 added [ 216.246283][ T5089] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.254148][ T5089] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.261850][ T5089] bridge_slave_1: entered allmulticast mode [ 216.271099][ T5089] bridge_slave_1: entered promiscuous mode [ 216.286977][ T5074] team0: Port device team_slave_1 added [ 216.451746][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.459249][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.485593][ T5076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.504914][ T5090] team0: Port device team_slave_0 added [ 216.514597][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.519663][ T5075] Bluetooth: hci4: command tx timeout [ 216.521651][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.553678][ T5076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.593559][ T5075] Bluetooth: hci3: command tx timeout [ 216.630770][ T5074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.638138][ T5074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.664469][ T5074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.714860][ T5090] team0: Port device team_slave_1 added [ 216.724508][ T5074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.731668][ T5074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.759187][ T5074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.810321][ T5089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.840518][ T5078] hsr_slave_0: entered promiscuous mode [ 216.856612][ T5078] hsr_slave_1: entered promiscuous mode [ 217.014894][ T5089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.029496][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.036806][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.064552][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.092122][ T5074] hsr_slave_0: entered promiscuous mode [ 217.100811][ T5074] hsr_slave_1: entered promiscuous mode [ 217.109321][ T5074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.117167][ T5074] Cannot create hsr debugfs directory [ 217.205732][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.213203][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.239610][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.459102][ T5089] team0: Port device team_slave_0 added [ 217.494852][ T5076] hsr_slave_0: entered promiscuous mode [ 217.503902][ T5076] hsr_slave_1: entered promiscuous mode [ 217.511690][ T5076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.519577][ T5076] Cannot create hsr debugfs directory [ 217.632127][ T5090] hsr_slave_0: entered promiscuous mode [ 217.643316][ T5090] hsr_slave_1: entered promiscuous mode [ 217.651267][ T5090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.660824][ T5090] Cannot create hsr debugfs directory [ 217.674295][ T5089] team0: Port device team_slave_1 added [ 217.872498][ T5075] Bluetooth: hci0: command tx timeout [ 217.893499][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.900665][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.927401][ T5089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.953673][ T5075] Bluetooth: hci2: command tx timeout [ 218.032786][ T5075] Bluetooth: hci1: command tx timeout [ 218.050544][ T5089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.057952][ T5089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.084310][ T5089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.575099][ T5089] hsr_slave_0: entered promiscuous mode [ 218.586353][ T5089] hsr_slave_1: entered promiscuous mode [ 218.594936][ T5089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.603241][ T5089] Cannot create hsr debugfs directory [ 218.603808][ T5075] Bluetooth: hci4: command tx timeout [ 218.672422][ T5075] Bluetooth: hci3: command tx timeout [ 218.909739][ T5074] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.994183][ T5074] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.028233][ T5074] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.095762][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.102666][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.116498][ T5074] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.189253][ T5078] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.268852][ T5078] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.311799][ T5078] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.400311][ T5078] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.512381][ T5076] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.549852][ T5076] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.591344][ T5076] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 219.614021][ T5076] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 219.893270][ T5090] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 219.958535][ T5075] Bluetooth: hci0: command tx timeout [ 220.033114][ T5075] Bluetooth: hci2: command tx timeout [ 220.073457][ T5090] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.112725][ T5075] Bluetooth: hci1: command tx timeout [ 220.165267][ T5090] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.189389][ T5090] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.217485][ T5089] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 220.296530][ T5089] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 220.394957][ T5089] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 220.425673][ T5089] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 220.701275][ T5075] Bluetooth: hci4: command tx timeout [ 220.722643][ T5074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.753461][ T5075] Bluetooth: hci3: command tx timeout [ 220.803388][ T5078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.977623][ T5078] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.029399][ T5074] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.111723][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.119800][ T5128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.205493][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.213413][ T5128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.228976][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.236752][ T5128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.323025][ T5076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.446539][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.454300][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.486492][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.584685][ T5076] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.681648][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.689442][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.861742][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.869552][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.913818][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.104280][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.111946][ T5128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.263620][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.271325][ T5128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.363509][ T5076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.471191][ T5089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.656282][ T5090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.717331][ T5089] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.845632][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.853463][ T5128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.965593][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.973528][ T5128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.227358][ T5078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.298631][ T5074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.330817][ T5076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.828648][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.945350][ T5074] veth0_vlan: entered promiscuous mode [ 224.976120][ T5076] veth0_vlan: entered promiscuous mode [ 225.058005][ T5074] veth1_vlan: entered promiscuous mode [ 225.166069][ T5076] veth1_vlan: entered promiscuous mode [ 225.300743][ T5089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.385370][ T5090] veth0_vlan: entered promiscuous mode [ 225.487898][ T5074] veth0_macvtap: entered promiscuous mode [ 225.509749][ T5090] veth1_vlan: entered promiscuous mode [ 225.543492][ T5074] veth1_macvtap: entered promiscuous mode [ 225.719718][ T5076] veth0_macvtap: entered promiscuous mode [ 225.794518][ T5074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.856308][ T5076] veth1_macvtap: entered promiscuous mode [ 225.890850][ T5074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.991202][ T5074] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.000673][ T5074] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.009885][ T5074] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.019042][ T5074] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.076347][ T5089] veth0_vlan: entered promiscuous mode [ 226.089409][ T5090] veth0_macvtap: entered promiscuous mode [ 226.182611][ T5089] veth1_vlan: entered promiscuous mode [ 226.204681][ T5090] veth1_macvtap: entered promiscuous mode [ 226.333318][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.344152][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.359153][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.459382][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.470986][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.481240][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.492010][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.507603][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.587350][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.599192][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.615889][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.711046][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.723017][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.733258][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.743991][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.761169][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.800583][ T5076] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.810946][ T5076] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.821801][ T5076] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.832613][ T5076] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.867090][ T5089] veth0_macvtap: entered promiscuous mode [ 226.917056][ T5090] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.926386][ T5090] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.935668][ T5090] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.944885][ T5090] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.018747][ T5089] veth1_macvtap: entered promiscuous mode [ 227.223811][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.236953][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.247528][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.258267][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.268481][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.279260][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.295246][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.366856][ T5078] veth0_vlan: entered promiscuous mode [ 227.494017][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.504819][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.514977][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.525877][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.536236][ T5089] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.547026][ T5089] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.565127][ T5089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.611370][ T5078] veth1_vlan: entered promiscuous mode [ 227.815208][ T5089] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.824511][ T5089] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.833693][ T5089] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.842811][ T5089] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.015048][ T5078] veth0_macvtap: entered promiscuous mode [ 228.111546][ T5078] veth1_macvtap: entered promiscuous mode [ 228.286149][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.298665][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.308871][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.319720][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.329963][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.340851][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.351039][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.361866][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.377414][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.620869][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.632390][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.642691][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.653504][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.663737][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.674697][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.684870][ T5078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.695709][ T5078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.713856][ T5078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.781134][ T5078] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.790339][ T5078] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.799660][ T5078] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.808924][ T5078] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.996009][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.004548][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.301619][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.309944][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.000009][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.008681][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.164303][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.172466][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.492106][ T5138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.492131][ T5130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.492397][ T5130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.502356][ T5138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.019684][ T4121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.028888][ T4121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.204185][ T5264] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 235.273495][ T5133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.281570][ T5133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.696477][ T5269] loop0: detected capacity change from 0 to 1024 [ 236.142941][ T5265] loop2: detected capacity change from 0 to 32768 [ 236.265698][ T5265] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 236.605569][ T5283] net_ratelimit: 44 callbacks suppressed [ 236.605644][ T5283] TCP: MD5 Hash not found for 172.20.20.187.0->172.20.20.170.20002 [RP.] L3 index 0 [ 236.681932][ T4121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.690107][ T4121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.991183][ T5265] XFS (loop2): Ending clean mount [ 237.016994][ T5265] XFS (loop2): Quotacheck needed: Please wait. [ 237.112596][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.120665][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.229997][ T5265] XFS (loop2): Quotacheck: Done. [ 237.360066][ T5265] batman_adv: batadv0: Adding interface: macvtap1 [ 237.373329][ T5265] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.400865][ T5265] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 237.664974][ T5290] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 237.920644][ T5296] loop4: detected capacity change from 0 to 8 [ 237.965959][ T5293] loop0: detected capacity change from 0 to 1024 [ 238.015870][ T5074] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 238.051890][ T5293] hfsplus: invalid extent max_key_len 0 [ 238.084475][ T5293] hfsplus: failed to load extents file [ 238.097587][ T5130] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 238.133817][ T5293] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.380127][ T5130] usb 4-1: device descriptor read/64, error -71 [ 238.533961][ T5133] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 238.693685][ T5130] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 238.923656][ T5130] usb 4-1: device descriptor read/64, error -71 [ 238.942813][ T5133] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.954399][ T5133] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.964655][ T5133] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 238.974147][ T5133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.045510][ T5133] usb 1-1: config 0 descriptor?? [ 239.083101][ T5084] Bluetooth: hci4: command 0x0405 tx timeout [ 239.083413][ T5130] usb usb4-port1: attempt power cycle [ 239.543069][ T5133] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 239.626000][ T5130] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 239.646951][ T5133] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input5 [ 239.743584][ T5130] usb 4-1: device descriptor read/8, error -71 [ 239.794788][ T5307] loop4: detected capacity change from 0 to 1024 [ 239.880710][ T5133] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 240.053013][ T5130] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 240.080670][ T5307] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.101291][ T8] usb 1-1: USB disconnect, device number 2 [ 240.182927][ T5130] usb 4-1: device descriptor read/8, error -71 [ 240.352703][ T5130] usb usb4-port1: unable to enumerate USB device [ 240.582112][ T5078] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.622772][ T5310] loop2: detected capacity change from 0 to 4096 [ 240.736055][ T5310] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 241.048651][ T5322] loop3: detected capacity change from 0 to 128 [ 241.182560][ T5322] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.223160][ T5322] ext4 filesystem being mounted at /root/syzkaller-testdir3781431551/syzkaller.TuT03t/2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 241.294513][ T5316] loop0: detected capacity change from 0 to 4096 [ 241.802656][ T5324] loop1: detected capacity change from 0 to 40427 [ 241.886939][ T5324] F2FS-fs (loop1): invalid crc value [ 241.905781][ T5324] F2FS-fs (loop1): Found nat_bits in checkpoint [ 242.131256][ T5326] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 242.146420][ T5324] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 242.158842][ T5310] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 242.226621][ T5310] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 242.357282][ T5330] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 242.367616][ T5330] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 242.404023][ T5076] syz-executor.1: attempt to access beyond end of device [ 242.404023][ T5076] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 242.485099][ T5310] mmap: syz-executor.2 (5310) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 242.529637][ T5089] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 243.031869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 243.961480][ T5348] loop1: detected capacity change from 0 to 512 [ 244.224638][ T5348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.335008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 244.362004][ T5353] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 244.373296][ T5353] syzkaller1: entered promiscuous mode [ 244.379008][ T5353] syzkaller1: entered allmulticast mode [ 244.403181][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 244.445779][ T5348] process 'syz-executor.1' launched './file1' with NULL argv: empty string added [ 244.700484][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 244.814838][ T5076] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.873404][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 244.882809][ T8] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 244.893797][ T8] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 244.903934][ T8] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 244.914031][ T8] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 244.924263][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 244.931183][ T8] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 244.940597][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.034339][ T5353] loop2: detected capacity change from 0 to 4096 [ 245.097416][ T8] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 245.101079][ T5353] ======================================================= [ 245.101079][ T5353] WARNING: The mand mount option has been deprecated and [ 245.101079][ T5353] and is ignored by this kernel. Remove the mand [ 245.101079][ T5353] option from the mount to silence this warning. [ 245.101079][ T5353] ======================================================= [ 245.339754][ T29] audit: type=1326 audit(1718272274.897:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5356 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff16767cea9 code=0x0 [ 245.527823][ T8] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 245.621824][ T5359] loop4: detected capacity change from 0 to 8 [ 245.666447][ T8] usb 4-1: USB disconnect, device number 6 [ 247.058720][ T5365] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 247.283576][ T5372] loop3: detected capacity change from 0 to 128 [ 247.347886][ T5373] loop2: detected capacity change from 0 to 256 [ 247.352087][ T5372] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 248.050194][ T3058] kworker/u8:19: attempt to access beyond end of device [ 248.050194][ T3058] loop2: rw=1, sector=256, nr_sectors = 12 limit=256 [ 248.540093][ T5380] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. [ 248.552439][ T5380] unsupported nlmsg_type 40 [ 248.613981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 248.792532][ T5391] loop2: detected capacity change from 0 to 16 [ 249.013742][ T5395] loop0: detected capacity change from 0 to 1024 [ 249.026034][ T5395] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.161495][ T5395] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.289291][ T5400] tmpfs: Unknown parameter 'usrquota˙˙˙˙' [ 249.406901][ T5395] EXT4-fs (loop0): can't enable nombcache during remount [ 249.806761][ T5090] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 250.462655][ T5419] loop3: detected capacity change from 0 to 256 [ 250.492957][ T5133] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 250.496213][ T5419] exfat: Deprecated parameter 'namecase' [ 250.559452][ T5419] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d) [ 250.675775][ T5138] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 250.754755][ T5133] usb 5-1: Using ep0 maxpacket: 16 [ 250.888459][ T5133] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 250.897954][ T5133] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 250.908073][ T5133] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 250.918249][ T5133] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 250.928451][ T5133] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 250.938422][ T5133] usb 5-1: config 1 interface 0 has no altsetting 0 [ 250.945299][ T5133] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 250.954554][ T5133] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.967801][ T5138] usb 1-1: Using ep0 maxpacket: 8 [ 251.095323][ T5133] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 251.117489][ T5138] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 251.131074][ T5138] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 251.140525][ T5138] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.216519][ T5138] usb 1-1: config 0 descriptor?? [ 251.285010][ T5138] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 251.429011][ T5133] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 251.517211][ T5133] usb 5-1: USB disconnect, device number 2 [ 251.541960][ T29] audit: type=1800 audit(1718272281.077:3): pid=5427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1971 res=0 errno=0 [ 251.619039][ T5138] usb 1-1: USB disconnect, device number 3 [ 251.672548][ T5429] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.462080][ T5439] use of bytesused == 0 is deprecated and will be removed in the future, [ 252.474269][ T5439] use the actual size instead. [ 252.847677][ T5443] loop2: detected capacity change from 0 to 2048 [ 252.944241][ T5452] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 253.174755][ T5445] loop0: detected capacity change from 0 to 2048 [ 253.314684][ T5445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.474586][ T5464] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 253.516505][ T5462] loop4: detected capacity change from 0 to 1024 [ 253.551163][ T5462] EXT4-fs: Ignoring removed nomblk_io_submit option [ 253.607246][ T5462] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 253.651591][ T5462] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 253.748792][ T5462] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #11: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 253.784531][ T5462] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 11 (err -117) [ 253.800070][ T5462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.950106][ T29] audit: type=1800 audit(1718272283.487:4): pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 253.951829][ T5462] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz-executor.4: Invalid block bitmap block 0 in block_group 0 [ 254.051022][ T5462] Quota error (device loop4): write_blk: dquota write failed [ 254.062961][ T5462] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 254.075029][ T5462] EXT4-fs error (device loop4): ext4_acquire_dquot:6882: comm syz-executor.4: Failed to acquire dquot type 0 [ 254.190446][ T5090] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.280717][ T5470] loop1: detected capacity change from 0 to 2048 [ 254.323297][ T5470] udf: Unknown parameter 'iocharret' [ 254.443796][ T5078] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.702017][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 254.922537][ T5133] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 255.103745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 255.232556][ T5133] usb 3-1: Using ep0 maxpacket: 8 [ 255.355214][ T5133] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 255.355537][ T5138] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 255.368576][ T5133] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 255.368733][ T5133] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.505372][ T5133] usb 3-1: config 0 descriptor?? [ 255.564101][ T5130] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 255.585565][ T5133] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 255.803550][ T5138] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 255.815184][ T5138] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 255.826362][ T5138] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 255.836780][ T5138] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 255.847620][ T5130] usb 1-1: Using ep0 maxpacket: 16 [ 256.024001][ T5130] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 256.033634][ T5130] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 256.043611][ T5130] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 256.053505][ T5130] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 256.063466][ T5130] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 256.073490][ T5130] usb 1-1: config 1 interface 0 has no altsetting 0 [ 256.080271][ T5130] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 256.089538][ T5130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.143151][ T5138] usb 5-1: string descriptor 0 read error: -22 [ 256.150313][ T5138] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 256.159947][ T5138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.207219][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 256.221834][ T5130] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 256.274701][ T5482] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 256.303492][ T5482] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 256.352122][ T5482] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 256.406611][ T5138] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 256.582686][ T5130] ums-sddr09 1-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 256.609922][ T5130] usb 1-1: USB disconnect, device number 4 [ 257.279051][ T5130] usb 3-1: USB disconnect, device number 2 [ 258.133116][ T5512] loop0: detected capacity change from 0 to 1024 [ 258.529297][ T4234] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.575099][ T5515] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 258.587644][ T25] usb 5-1: USB disconnect, device number 3 [ 258.691927][ T29] audit: type=1800 audit(1718272288.217:5): pid=5515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="sda1" ino=1946 res=0 errno=0 [ 258.727972][ T4234] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.804773][ T3058] hfsplus: b-tree write err: -5, ino 4 [ 258.929513][ T4234] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.091047][ T4234] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.183663][ T5520] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 259.532955][ T4234] bridge_slave_1: left allmulticast mode [ 259.538851][ T4234] bridge_slave_1: left promiscuous mode [ 259.545561][ T4234] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.581169][ T4234] bridge_slave_0: left allmulticast mode [ 259.593324][ T4234] bridge_slave_0: left promiscuous mode [ 259.599961][ T4234] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.197835][ T5520] loop2: detected capacity change from 0 to 512 [ 260.299207][ T4234] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.332694][ T4234] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.413087][ T4234] bond0 (unregistering): Released all slaves [ 261.159357][ T5538] loop2: detected capacity change from 0 to 128 [ 261.216152][ T4234] hsr_slave_0: left promiscuous mode [ 261.247820][ T5538] VFS: Found a Xenix FS (block size = 1024) on device loop2 [ 261.258762][ T4234] hsr_slave_1: left promiscuous mode [ 261.462628][ T4234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.470576][ T4234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.516374][ T4234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.525729][ T4234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.618683][ T4234] veth1_macvtap: left promiscuous mode [ 261.624750][ T4234] veth0_macvtap: left promiscuous mode [ 261.630652][ T4234] veth1_vlan: left promiscuous mode [ 261.642045][ T4234] veth0_vlan: left promiscuous mode [ 261.873800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 261.978921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 261.989410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 262.164149][ T5075] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 262.182002][ T5075] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 262.209990][ T5075] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 262.242903][ T5075] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 262.330870][ T5075] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 262.347389][ T5075] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 262.407895][ T5138] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 262.659002][ T4234] team0 (unregistering): Port device team_slave_1 removed [ 262.735291][ T4234] team0 (unregistering): Port device team_slave_0 removed [ 262.883654][ T5138] usb 5-1: Using ep0 maxpacket: 8 [ 262.912484][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 263.074987][ T5549] loop1: detected capacity change from 0 to 8 [ 263.193633][ T5138] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 263.206933][ T5138] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 263.216422][ T5138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.283071][ T5138] usb 5-1: config 0 descriptor?? [ 263.340491][ T5138] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 263.780481][ T25] usb 5-1: USB disconnect, device number 4 [ 264.041816][ T5561] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.127391][ T5546] chnl_net:caif_netlink_parms(): no params data found [ 264.593090][ T5084] Bluetooth: hci3: command tx timeout [ 264.990538][ T5573] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 265.207788][ T29] audit: type=1800 audit(1718272294.687:6): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file2" dev="sda1" ino=1954 res=0 errno=0 [ 265.368115][ T5576] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 266.010482][ T5546] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.018626][ T5546] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.026519][ T5546] bridge_slave_0: entered allmulticast mode [ 266.035950][ T5546] bridge_slave_0: entered promiscuous mode [ 266.053934][ T5587] loop4: detected capacity change from 0 to 512 [ 266.113217][ T5587] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 266.157221][ T5587] EXT4-fs (loop4): orphan cleanup on readonly fs [ 266.195225][ T5546] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.197166][ T5587] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 266.203204][ T5546] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.213613][ T5587] EXT4-fs warning (device loop4): ext4_enable_quotas:7100: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 266.220902][ T5546] bridge_slave_1: entered allmulticast mode [ 266.248626][ T5546] bridge_slave_1: entered promiscuous mode [ 266.267298][ T5587] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 266.285973][ T5587] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #16: comm syz-executor.4: casefold flag without casefold feature [ 266.352393][ T5587] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 16 (err -117) [ 266.405519][ T5598] tipc: Can't bind to reserved service type 0 [ 266.423776][ T5587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 266.439813][ T5587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.573302][ T5546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.658162][ T5546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.672650][ T5084] Bluetooth: hci3: command tx timeout [ 267.007653][ T5604] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 267.035483][ T5546] team0: Port device team_slave_0 added [ 267.118381][ T5546] team0: Port device team_slave_1 added [ 267.421089][ T5546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.428474][ T5546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.455029][ T5546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.609409][ T5546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.618185][ T5546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.645193][ T5546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.741433][ T5616] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 267.890242][ T5619] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 268.023725][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 268.259070][ T5546] hsr_slave_0: entered promiscuous mode [ 268.323650][ T5546] hsr_slave_1: entered promiscuous mode [ 268.347181][ T5546] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.355594][ T5546] Cannot create hsr debugfs directory [ 268.399711][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 268.566517][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 268.579638][ T25] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 268.588963][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.645616][ T25] usb 5-1: config 0 descriptor?? [ 269.176217][ T5626] loop0: detected capacity change from 0 to 32768 [ 269.195075][ T5084] Bluetooth: hci3: command tx timeout [ 269.259589][ T5626] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 269.267093][ T25] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 269.448846][ T5627] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 269.458230][ T5627] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 269.539411][ T5628] loop1: detected capacity change from 0 to 8 [ 269.663495][ T5639] Zero length message leads to an empty skb [ 270.001165][ T5626] XFS (loop0): Ending clean mount [ 270.079577][ T5626] XFS (loop0): Quotacheck needed: Please wait. [ 270.171690][ T5626] XFS (loop0): Quotacheck: Done. [ 270.192608][ T4709] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 270.367392][ T5626] batman_adv: batadv0: Adding interface: macvtap1 [ 270.374060][ T5626] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.401608][ T5626] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 270.413163][ T4709] usb 3-1: device descriptor read/64, error -71 [ 270.725711][ T4709] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 270.734718][ T5138] usb 5-1: USB disconnect, device number 5 [ 270.796934][ T5546] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 270.944017][ T5546] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 270.971186][ T5090] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 270.975252][ T5546] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 270.988584][ T4709] usb 3-1: device descriptor read/64, error -71 [ 271.011074][ T5546] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 271.122901][ T4709] usb usb3-port1: attempt power cycle [ 271.235264][ T5084] Bluetooth: hci3: command tx timeout [ 271.392105][ T29] audit: type=1800 audit(1718272300.917:7): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1942 res=0 errno=0 [ 271.602780][ T4709] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 271.732984][ T4709] usb 3-1: device descriptor read/8, error -71 [ 271.910857][ T5546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.053156][ T4709] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 272.087093][ T5546] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.128972][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.134302][ T5657] loop4: detected capacity change from 0 to 8 [ 272.136701][ T5138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.219461][ T4709] usb 3-1: device descriptor read/8, error -71 [ 272.255554][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.263475][ T5138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.272107][ T5657] SQUASHFS error: zlib decompression failed, data probably corrupt [ 272.284674][ T5657] SQUASHFS error: Failed to read block 0x9b: -5 [ 272.291113][ T5657] SQUASHFS error: Unable to read metadata cache entry [99] [ 272.301429][ T5657] SQUASHFS error: Unable to read inode 0x127 [ 272.318983][ T5659] loop1: detected capacity change from 0 to 256 [ 272.351704][ T4709] usb usb3-port1: unable to enumerate USB device [ 272.476482][ T5546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.356811][ T5664] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 274.141336][ T5684] loop2: detected capacity change from 0 to 2048 [ 274.213580][ T5684] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 274.450038][ T5689] loop0: detected capacity change from 0 to 256 [ 274.491375][ T5546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.573770][ T5689] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 274.615384][ T29] audit: type=1800 audit(1718272304.127:8): pid=5684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 274.636606][ T29] audit: type=1800 audit(1718272304.137:9): pid=5687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1952 res=0 errno=0 [ 274.884720][ T5691] loop1: detected capacity change from 0 to 512 [ 275.167012][ T5691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.180522][ T5691] ext4 filesystem being mounted at /root/syzkaller-testdir3430153103/syzkaller.sh72Sf/27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 275.251767][ T5546] veth0_vlan: entered promiscuous mode [ 275.345931][ T5700] overlayfs: failed to resolve './file2': -2 [ 277.871722][ T5546] veth1_vlan: entered promiscuous mode [ 278.375813][ T5546] veth0_macvtap: entered promiscuous mode [ 278.486527][ T5076] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.511612][ T5546] veth1_macvtap: entered promiscuous mode [ 278.854347][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.865178][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.875314][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.886116][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.896219][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.906954][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.917068][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.927864][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.947602][ T5546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.606019][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.617037][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.627194][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.638175][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.648289][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.663114][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.673252][ T5546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.684017][ T5546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.699207][ T5546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.021653][ T5546] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.031099][ T5546] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.043304][ T5546] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.052529][ T5546] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.536770][ T1222] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.544021][ T1222] ieee802154 phy1 wpan1: encryption failed: -22 [ 283.899287][ T5725] loop0: detected capacity change from 0 to 256 [ 283.995010][ T5725] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 285.014440][ T43] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 285.413293][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.424758][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 285.438188][ T43] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 285.447797][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.568520][ T43] usb 1-1: config 0 descriptor?? [ 286.032658][ T3895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.040821][ T3895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.080658][ T43] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 286.188691][ T43] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 286.210252][ T43] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 286.304907][ T3895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.316175][ T3895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.549350][ T43] usb 1-1: USB disconnect, device number 5 [ 286.968407][ T5701] syz-executor.2 (5701) used greatest stack depth: 2472 bytes left [ 288.347837][ T5744] loop0: detected capacity change from 0 to 32768 [ 288.606838][ T5744] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 288.613845][ T5762] loop1: detected capacity change from 0 to 512 [ 288.666217][ T29] audit: type=1800 audit(1718272318.217:10): pid=5755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1956 res=0 errno=0 [ 288.745876][ T5770] loop3: detected capacity change from 0 to 8 [ 288.909980][ T5744] XFS (loop0): Ending clean mount [ 288.926757][ T5744] XFS (loop0): Quotacheck needed: Please wait. [ 288.944430][ T5762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.958404][ T5762] ext4 filesystem being mounted at /root/syzkaller-testdir3430153103/syzkaller.sh72Sf/30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 289.095141][ T5744] XFS (loop0): Quotacheck: Done. [ 289.258999][ T5090] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 289.578662][ T29] audit: type=1800 audit(1718272319.077:11): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 291.914552][ T5076] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.323280][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 292.376872][ T5790] loop3: detected capacity change from 0 to 2048 [ 292.422081][ T5790] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 292.478907][ T5792] loop1: detected capacity change from 0 to 256 [ 292.626320][ T5792] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 292.800892][ T29] audit: type=1800 audit(1718272322.287:12): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1948 res=0 errno=0 [ 292.938857][ T5794] loop2: detected capacity change from 0 to 2048 [ 293.110076][ T5794] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 293.173188][ T5794] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 293.184655][ T5794] UDF-fs: Scanning with blocksize 512 failed [ 293.302476][ T5794] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.393384][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.404709][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.418025][ T43] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.427439][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.474732][ T43] usb 1-1: config 0 descriptor?? [ 293.591338][ T5799] overlayfs: failed to resolve './file2': -2 [ 296.913475][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 296.920236][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 297.036241][ T43] usb 1-1: USB disconnect, device number 6 [ 297.287705][ T5806] loop1: detected capacity change from 0 to 512 [ 297.461259][ T5806] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.512741][ T29] audit: type=1800 audit(1718272326.927:13): pid=5811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1966 res=0 errno=0 [ 297.761217][ T5813] loop0: detected capacity change from 0 to 2048 [ 297.935641][ T43] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 298.553424][ T43] usb 2-1: config 0 has an invalid interface number: 32 but max is 0 [ 298.562071][ T43] usb 2-1: config 0 has an invalid descriptor of length 34, skipping remainder of the config [ 298.572843][ T43] usb 2-1: config 0 has no interface number 0 [ 298.579176][ T43] usb 2-1: too many endpoints for config 0 interface 32 altsetting 9: 33, using maximum allowed: 30 [ 298.590368][ T43] usb 2-1: config 0 interface 32 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 33 [ 298.608264][ T43] usb 2-1: config 0 interface 32 has no altsetting 0 [ 298.616581][ T43] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 298.626000][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.671658][ T43] usb 2-1: config 0 descriptor?? [ 299.444574][ T5822] loop2: detected capacity change from 0 to 4096 [ 300.289769][ T5824] loop2: detected capacity change from 0 to 2048 [ 300.363800][ T5824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.648733][ T5074] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.202952][ T5128] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 301.722934][ T5128] usb 3-1: New USB device found, idVendor=04bb, idProduct=0919, bcdDevice=67.93 [ 301.732496][ T5128] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.740759][ T5128] usb 3-1: Product: syz [ 301.745285][ T5128] usb 3-1: Manufacturer: syz [ 301.750108][ T5128] usb 3-1: SerialNumber: syz [ 301.770694][ T5128] usb 3-1: config 0 descriptor?? [ 301.831256][ T5128] rndis_host 3-1:0.0: skipping garbage [ 301.837224][ T5128] usb 3-1: bad CDC descriptors [ 302.068475][ T5128] usb 3-1: USB disconnect, device number 7 [ 304.449366][ T5833] loop2: detected capacity change from 0 to 32768 [ 304.547616][ T43] usb 2-1: string descriptor 0 read error: -32 [ 304.611002][ T5833] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 304.636336][ T43] usb 2-1: USB disconnect, device number 2 [ 304.971619][ T5833] XFS (loop2): Ending clean mount [ 305.024577][ T5076] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.041962][ T25] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0xae/0x2f0, xfs_bnobt block 0x8 [ 305.059391][ T25] XFS (loop2): Unmount and run xfs_repair [ 305.065518][ T25] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 305.073271][ T25] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 305.082504][ T25] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 305.091606][ T25] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 305.100793][ T25] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 305.109978][ T25] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 305.111779][ T29] audit: type=1800 audit(1718272334.597:14): pid=5832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=1062 res=0 errno=0 [ 305.119031][ T25] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 305.119131][ T25] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 305.163095][ T25] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 305.207600][ T5832] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x354/0x5c0" at daddr 0x8 len 8 error 74 [ 305.322769][ T5832] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x766/0xf20 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 305.338047][ T5843] loop4: detected capacity change from 0 to 1024 [ 305.341064][ T5832] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 305.487997][ T5847] loop3: detected capacity change from 0 to 512 [ 305.531819][ T5074] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 305.535690][ T5846] loop0: detected capacity change from 0 to 256 [ 305.587302][ T5847] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 305.607905][ T5846] FAT-fs (loop0): Unrecognized mount option "uni_xlate=1¨utf8=0" or missing value [ 305.644367][ T5847] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 305.666324][ T5847] EXT4-fs (loop3): orphan cleanup on readonly fs [ 305.696876][ T5847] EXT4-fs error (device loop3): ext4_orphan_get:1420: comm syz-executor.3: bad orphan inode 15 [ 305.711960][ T5078] hfsplus: bad catalog entry type [ 305.718260][ T5847] ext4_test_bit(bit=14, block=2) = 0 [ 305.718430][ T5847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 305.746813][ T5846] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 305.778408][ T5078] hfsplus: bad catalog entry type [ 305.917511][ T5546] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.960581][ T5851] loop1: detected capacity change from 0 to 256 [ 306.016456][ T4234] hfsplus: b-tree write err: -5, ino 4 [ 306.473009][ T5851] FAT-fs (loop1): Directory bread(block 64) failed [ 306.480011][ T5851] FAT-fs (loop1): Directory bread(block 65) failed [ 306.492680][ T5851] FAT-fs (loop1): Directory bread(block 66) failed [ 306.499422][ T5851] FAT-fs (loop1): Directory bread(block 67) failed [ 306.507194][ T5851] FAT-fs (loop1): Directory bread(block 68) failed [ 306.513967][ T5851] FAT-fs (loop1): Directory bread(block 69) failed [ 306.520710][ T5851] FAT-fs (loop1): Directory bread(block 70) failed [ 306.527587][ T5851] FAT-fs (loop1): Directory bread(block 71) failed [ 306.534660][ T5851] FAT-fs (loop1): Directory bread(block 72) failed [ 306.541372][ T5851] FAT-fs (loop1): Directory bread(block 73) failed [ 306.608308][ T4121] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.831086][ T4121] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.006093][ T4121] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.199942][ T4121] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.786025][ T5861] loop0: detected capacity change from 0 to 256 [ 307.843080][ T4121] bridge_slave_1: left allmulticast mode [ 307.849005][ T4121] bridge_slave_1: left promiscuous mode [ 307.858540][ T4121] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.935614][ T4121] bridge_slave_0: left allmulticast mode [ 307.941728][ T4121] bridge_slave_0: left promiscuous mode [ 307.948413][ T4121] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.051829][ T5861] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 308.068855][ T5861] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 308.187841][ T5864] loop1: detected capacity change from 0 to 512 [ 308.574558][ T4121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.616599][ T4121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.627365][ T5864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.647318][ T5864] ext4 filesystem being mounted at /root/syzkaller-testdir3430153103/syzkaller.sh72Sf/35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 308.655417][ T4121] bond0 (unregistering): Released all slaves [ 308.803516][ T5867] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 308.850094][ T5873] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 308.984685][ T29] audit: type=1326 audit(1718272338.517:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5862 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c72c7cea9 code=0x0 [ 309.229403][ T29] audit: type=1800 audit(1718272338.677:16): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 309.438754][ T5076] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.827668][ T4121] hsr_slave_0: left promiscuous mode [ 309.855820][ T4121] hsr_slave_1: left promiscuous mode [ 309.974370][ T4121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.982132][ T4121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.027221][ T4121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.035241][ T4121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.144603][ T4121] veth1_macvtap: left promiscuous mode [ 310.150452][ T4121] veth0_macvtap: left promiscuous mode [ 310.156737][ T4121] veth1_vlan: left promiscuous mode [ 310.162422][ T4121] veth0_vlan: left promiscuous mode [ 310.189603][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 310.207874][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 310.220192][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 310.365935][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 310.505722][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 310.524527][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 312.885543][ T5084] Bluetooth: hci1: command tx timeout [ 312.971952][ T4121] team0 (unregistering): Port device team_slave_1 removed [ 313.090647][ T4121] team0 (unregistering): Port device team_slave_0 removed [ 313.372635][ T29] audit: type=1804 audit(1718272342.867:17): pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir4058479011/syzkaller.RC4eyW/35/file0" dev="sda1" ino=1958 res=1 errno=0 [ 313.425087][ T5895] IPv6: NLM_F_REPLACE set, but no existing node found! [ 314.198645][ T5904] loop1: detected capacity change from 0 to 512 [ 314.280341][ T5904] EXT4-fs: Ignoring removed mblk_io_submit option [ 314.287344][ T5904] EXT4-fs: Ignoring removed bh option [ 314.384396][ T5904] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 314.397969][ T5904] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 314.672562][ T29] audit: type=1800 audit(1718272344.107:18): pid=5908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1939 res=0 errno=0 [ 314.696260][ T29] audit: type=1800 audit(1718272344.107:19): pid=5908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1939 res=0 errno=0 [ 314.847879][ T5904] EXT4-fs (loop1): 1 truncate cleaned up [ 314.854297][ T5904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.912511][ T5084] Bluetooth: hci1: command tx timeout [ 315.025288][ T5904] loop1: detected capacity change from 512 to 0 [ 315.051475][ T5914] syz-executor.1: attempt to access beyond end of device [ 315.051475][ T5914] loop1: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 315.065870][ T5914] EXT4-fs error (device loop1): __ext4_find_entry:1684: inode #2: comm syz-executor.1: reading directory lblock 0 [ 315.071742][ T5904] syz-executor.1: attempt to access beyond end of device [ 315.071742][ T5904] loop1: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 315.078349][ T5914] syz-executor.1: attempt to access beyond end of device [ 315.078349][ T5914] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 315.078489][ T5914] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 315.078587][ T5914] EXT4-fs (loop1): I/O error while writing superblock [ 315.277781][ T5888] chnl_net:caif_netlink_parms(): no params data found [ 315.380307][ T5904] syz-executor.1: attempt to access beyond end of device [ 315.380307][ T5904] loop1: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 315.397397][ T5904] EXT4-fs error (device loop1): __ext4_find_entry:1684: inode #2: comm syz-executor.1: reading directory lblock 0 [ 315.412914][ T5904] syz-executor.1: attempt to access beyond end of device [ 315.412914][ T5904] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 315.430444][ T5904] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 315.439055][ T5904] EXT4-fs (loop1): I/O error while writing superblock [ 315.692852][ T5076] syz-executor.1: attempt to access beyond end of device [ 315.692852][ T5076] loop1: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 315.890730][ T5076] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.921285][ T5076] syz-executor.1: attempt to access beyond end of device [ 315.921285][ T5076] loop1: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 315.935628][ T5076] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 315.944480][ T5076] EXT4-fs (loop1): I/O error while writing superblock [ 316.361493][ T5923] loop2: detected capacity change from 0 to 64 [ 316.388237][ T5923] ===================================================== [ 316.396129][ T5923] BUG: KMSAN: uninit-value in hfs_revalidate_dentry+0x30b/0x3f0 [ 316.404510][ T5923] hfs_revalidate_dentry+0x30b/0x3f0 [ 316.410019][ T5923] lookup_fast+0x418/0x8e0 [ 316.415166][ T5923] walk_component+0x82/0x650 [ 316.422823][ T5923] path_lookupat+0x27d/0x6f0 [ 316.427603][ T5923] filename_lookup+0x22f/0x750 [ 316.433709][ T5923] user_path_at_empty+0x8b/0x3a0 [ 316.438868][ T5923] __se_sys_chdir+0x5e/0x2e0 [ 316.443784][ T5923] __x64_sys_chdir+0x48/0x60 [ 316.448533][ T5923] x64_sys_call+0x36dd/0x3b50 [ 316.453559][ T5923] do_syscall_64+0xcf/0x1e0 2024/06/13 09:52:26 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 316.458288][ T5923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.465955][ T5923] [ 316.468371][ T5923] Uninit was created at: [ 316.473102][ T5923] __alloc_pages+0x9d6/0xe70 [ 316.477859][ T5923] new_slab+0x2de/0x1400 [ 316.482453][ T5923] ___slab_alloc+0x121d/0x34a0 [ 316.487398][ T5923] kmem_cache_alloc_lru+0x6da/0xc20 [ 316.493412][ T5923] hfs_alloc_inode+0x5a/0xd0 [ 316.498972][ T5923] alloc_inode+0x86/0x460 [ 316.503644][ T5923] iget_locked+0x2bf/0xee0 [ 316.508224][ T5923] hfs_btree_open+0x16c/0x1aa0 [ 316.513276][ T5923] hfs_mdb_get+0x1fe2/0x28b0 [ 316.518043][ T5923] hfs_fill_super+0x1cf6/0x23c0 [ 316.526032][ T5923] mount_bdev+0x397/0x520 [ 316.530572][ T5923] hfs_mount+0x4d/0x60 [ 316.535887][ T5923] legacy_get_tree+0x114/0x290 [ 316.540871][ T5923] vfs_get_tree+0xa7/0x570 [ 316.545634][ T5923] do_new_mount+0x71f/0x15e0 [ 316.550417][ T5923] path_mount+0x742/0x1f20 [ 316.555144][ T5923] __se_sys_mount+0x725/0x810 [ 316.560018][ T5923] __x64_sys_mount+0xe4/0x150 [ 316.565018][ T5923] x64_sys_call+0x2bf4/0x3b50 [ 316.569891][ T5923] do_syscall_64+0xcf/0x1e0 [ 316.574735][ T5923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.580844][ T5923] [ 316.584062][ T5923] CPU: 1 PID: 5923 Comm: syz-executor.2 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 316.594501][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 316.604863][ T5923] ===================================================== [ 316.611895][ T5923] Disabling lock debugging due to kernel taint [ 316.618432][ T5923] Kernel panic - not syncing: kmsan.panic set ... [ 316.624968][ T5923] CPU: 1 PID: 5923 Comm: syz-executor.2 Tainted: G B 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 316.636615][ T5923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 316.646836][ T5923] Call Trace: [ 316.650233][ T5923] [ 316.653267][ T5923] dump_stack_lvl+0x216/0x2d0 [ 316.658166][ T5923] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 316.664185][ T5923] dump_stack+0x1e/0x30 [ 316.668549][ T5923] panic+0x4e2/0xcd0 [ 316.672653][ T5923] ? kmsan_get_metadata+0xf1/0x1d0 [ 316.677982][ T5923] kmsan_report+0x2d5/0x2e0 [ 316.682696][ T5923] ? __msan_warning+0x95/0x120 [ 316.687639][ T5923] ? hfs_revalidate_dentry+0x30b/0x3f0 [ 316.693319][ T5923] ? lookup_fast+0x418/0x8e0 [ 316.698091][ T5923] ? walk_component+0x82/0x650 [ 316.703045][ T5923] ? path_lookupat+0x27d/0x6f0 [ 316.707999][ T5923] ? filename_lookup+0x22f/0x750 [ 316.713132][ T5923] ? user_path_at_empty+0x8b/0x3a0 [ 316.718450][ T5923] ? __se_sys_chdir+0x5e/0x2e0 [ 316.723378][ T5923] ? __x64_sys_chdir+0x48/0x60 [ 316.728309][ T5923] ? x64_sys_call+0x36dd/0x3b50 [ 316.733369][ T5923] ? do_syscall_64+0xcf/0x1e0 [ 316.738254][ T5923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.744542][ T5923] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 316.750552][ T5923] ? kmsan_get_metadata+0x146/0x1d0 [ 316.755932][ T5923] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 316.761944][ T5923] ? __d_lookup_rcu_op_compare+0x673/0x6f0 [ 316.767978][ T5923] ? kmsan_get_metadata+0x146/0x1d0 [ 316.773365][ T5923] ? kmsan_get_metadata+0x146/0x1d0 [ 316.778747][ T5923] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 316.785235][ T5923] ? kmsan_get_metadata+0x146/0x1d0 [ 316.790617][ T5923] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 316.796618][ T5923] ? kmsan_get_metadata+0x146/0x1d0 [ 316.802013][ T5923] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 316.808022][ T5923] __msan_warning+0x95/0x120 [ 316.812798][ T5923] hfs_revalidate_dentry+0x30b/0x3f0 [ 316.818317][ T5923] ? __pfx_hfs_revalidate_dentry+0x10/0x10 [ 316.824347][ T5923] lookup_fast+0x418/0x8e0 [ 316.828964][ T5923] walk_component+0x82/0x650 [ 316.833739][ T5923] ? kmsan_get_metadata+0x146/0x1d0 [ 316.839147][ T5923] path_lookupat+0x27d/0x6f0 [ 316.843940][ T5923] filename_lookup+0x22f/0x750 [ 316.848911][ T5923] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 316.854938][ T5923] user_path_at_empty+0x8b/0x3a0 [ 316.860093][ T5923] __se_sys_chdir+0x5e/0x2e0 [ 316.864847][ T5923] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 316.870859][ T5923] __x64_sys_chdir+0x48/0x60 [ 316.875626][ T5923] x64_sys_call+0x36dd/0x3b50 [ 316.880530][ T5923] do_syscall_64+0xcf/0x1e0 [ 316.885243][ T5923] ? clear_bhb_loop+0x25/0x80 [ 316.890131][ T5923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.896251][ T5923] RIP: 0033:0x7fec7f07cea9 [ 316.900805][ T5923] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 316.920618][ T5923] RSP: 002b:00007fec7fea10c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 316.929246][ T5923] RAX: ffffffffffffffda RBX: 00007fec7f1b3f80 RCX: 00007fec7f07cea9 [ 316.937389][ T5923] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 316.945522][ T5923] RBP: 00007fec7f0ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 316.953649][ T5923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.961774][ T5923] R13: 000000000000000b R14: 00007fec7f1b3f80 R15: 00007ffd530c52c8 [ 316.969926][ T5923] [ 316.973283][ T5923] Kernel Offset: disabled [ 316.977665][ T5923] Rebooting in 86400 seconds..