last executing test programs: 50.934623789s ago: executing program 3 (id=1011): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000ac0), 0x200, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x3b, &(0x7f0000000080), &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r6, 0x0}) listen(r6, 0x0) io_uring_enter(r3, 0x92, 0x0, 0x0, 0x0, 0x0) 49.286205158s ago: executing program 3 (id=1015): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0xffffffffffffffff, 0x80000000}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r4, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @loopback}, r4}}, 0x48) 48.340086698s ago: executing program 3 (id=1017): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f00000000c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r6) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) renameat2(r1, &(0x7f00000000c0)='./file2\x00', r0, &(0x7f0000000100)='./file1\x00', 0x0) 43.21809377s ago: executing program 3 (id=1032): syz_open_dev$sg(&(0x7f0000002d00), 0x0, 0x103802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) listen(r3, 0xfffffffd) r4 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f0000001500), 0x588, 0x0) 41.997997792s ago: executing program 3 (id=1035): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x0, 0xb998, 0xfd, "194f2f83c2e798c3584770116cddc8819592b1"}) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$packet(0x11, 0x2, 0x300) r3 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) lseek(r3, 0x8000000000000000, 0x4) sched_setscheduler(0x0, 0x1, 0x0) socket(0x2, 0x2, 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000000e8fffffffe0500000008000300", @ANYRES32=r5], 0x24}}, 0x0) 40.859548088s ago: executing program 3 (id=1039): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) open(0x0, 0x1a200, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000440)={0xfffa, [0x0, 0xffffffff], 0x1000}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000)=0x1bc, 0x4) sendmmsg$inet6(r5, 0x0, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) 36.155671334s ago: executing program 4 (id=1049): sched_setscheduler(0x0, 0x1, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf9, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r3, 0x7fff, 0x0) 30.948127733s ago: executing program 4 (id=1050): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0xffffffffffffffff, 0x80000000}}, 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @loopback}, r5}}, 0x48) 28.430269995s ago: executing program 1 (id=1053): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket(0xa, 0x3, 0x102) setsockopt$WPAN_WANTACK(r1, 0x29, 0x4c, 0x0, 0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x3f8, 0xffffffff, 0x98, 0x2b0, 0x98, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@uncond, 0x287, 0x1f0, 0x218, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@empty, [], @ipv6=@private0}, {@ipv6=@private1, [], @ipv6=@local}, {@ipv4=@dev, [], @ipv4=@private}, {@ipv4=@remote, [], @ipv4=@empty}], 0xb}}, @common=@icmp={{0x28}, {0x0, "e2fa"}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "81d0042c436dbdac8bebde18b54dd11bf035c1d8b6b0e88ef5aee0eccad7"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) pwritev(r2, &(0x7f0000000440)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x4000000, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-des3_ede-asm\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendfile(r4, r2, 0x0, 0xfacf) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r7, 0x0, 0x40) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r8, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000000000000002016800", @ANYRES32=r8, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}}, 0x18}}, 0x0) 28.095299063s ago: executing program 1 (id=1055): r0 = syz_open_dev$loop(&(0x7f0000000000), 0xff, 0x2000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xffffffe0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x101) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x45c00, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0x4, 0x9, 0xe, 0x4, "c19833b95063a2449ecf27da83549a84c42977078a7ea3f9e31a8c29e0150b34446d3e9e0721aa7a9ea721919136dc97348dc267b41e424216278bac4cdfd918", "ceacff692faead71408a434269c8f5c24053cd2dd2a48b4e2593fcb8a4925b3c", [0x6, 0xa3]}) socket$l2tp6(0xa, 0x2, 0x73) r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) ioctl$CAPI_INSTALLED(r6, 0x80024322) 28.013991s ago: executing program 1 (id=1056): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x210808, &(0x7f0000000640)=ANY=[], 0x5, 0x329, &(0x7f00000000c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000438000/0x4000)=nil, 0x4000) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3ce11000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/dev_mcast\x00') connect$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e21, 0x1a, @rand_addr=' \x01\x00', 0xa}, 0x1c) pread64(r4, &(0x7f0000000880)=""/4096, 0x1000, 0xa96) sysinfo(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 26.370039799s ago: executing program 1 (id=1065): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file0\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20048004, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 24.588226469s ago: executing program 1 (id=1060): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000180)='./bus\x00', 0x400, &(0x7f0000000440)=ANY=[], 0x1, 0x63a, &(0x7f0000000840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@ifindex, 0x37, 0x0, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x25, 0x9, @val=@tcx={@void, @value, @void, @void, r1}}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) epoll_pwait(0xffffffffffffffff, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x5, 0x1ff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) linkat(r5, &(0x7f0000000180)='./file1\x00', r5, &(0x7f0000000640)='./bus\x00', 0x0) unlink(0x0) 23.778496807s ago: executing program 1 (id=1062): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3400008000001000000000000000000000000000f07935d288fa741afc3403a8fe2d69a67e685e63222ee8003914e9d6eb3fa349f4f97ab261d72b4b3ad3f465db357dc4951fd8d14d99cc7614a9d09c9e3619dfeb5a8c6f51f803797b8dced16728236fe1e3688ba4b91e2624f17898edd502b47e56e89061e3bf2d26d254876fef729c1cdcfa4e0f196f228575035ed89da1e65960d4fbdf81b62b03b9f209a4e78cb0", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x2}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket(0x3, 0x6, 0xb91a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='signal_generate\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000580)=0x1810, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000080), 0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000680)={0x0, 0x53, &(0x7f0000000640)={&(0x7f0000000100)={0x28, r2, 0x809, 0x70bd25, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x0, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) 14.448801073s ago: executing program 2 (id=1079): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x84, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x65c, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1f00, 0x12) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_print_times', 0x242, 0x0) sendfile(r4, r4, 0x0, 0xa) 12.387672647s ago: executing program 2 (id=1082): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x7a}, [@func], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000400), &(0x7f0000000440)=0xc) syz_usb_connect$printer(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x2, 0xf, 0x12}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x7f, 0x18}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x5, 0x8, 0xfb, 0x20, 0x7}, 0x3a, &(0x7f0000000200)={0x5, 0xf, 0x3a, 0x3, [@generic={0x2b, 0x10, 0x1, "2b91851fa35a83ddc4751973d2b4a21bc52346e09ab67288ca5450207a8abaed86842456c156d622"}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xd, 0xa, 0x378}]}, 0x1, [{0xd4, &(0x7f0000000500)=@string={0xd4, 0x3, "28adac658816b1bfbaff7732c15d0502698deabcfdcb25ad21f505afd330bc810b9f5110993529c58d5e78cf179b4602e95920a90bcc0ace9cf001024c6399272ebd4606636979881bdb81a51e1eab6c756c64ec899825abafc8fa4cad7b31be4ce3d4613ca46f0c659f24ab2faa465dc78e0b5ccc8eb955f778ff3067ffe6d0b9414035914cca54685021665f8c37f477a07aa2a774bde56b8779498a1f211c686900e469aa303f0a1cb50d24382eeabf828b6c0206235d5daf412817f3a146d9638a15e06d7a251679c1d04f27856b7005"}}]}) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f00000004c0)={&(0x7f0000000340), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0x40, 0x0, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xffff}}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_STATUS={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 7.607234589s ago: executing program 2 (id=1087): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) bind$unix(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(0x0, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000200)=[{0xffffffffffffffff, 0xa604}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x13, &(0x7f0000000a40)=0x800, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) lstat(0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b00)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) dup(0xffffffffffffffff) 6.671138668s ago: executing program 2 (id=1090): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket(0x1e, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000240)={0x7ff}, 0x10) write(r2, &(0x7f000018efdc), 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000300), 0x4) write$binfmt_misc(r4, &(0x7f0000000300), 0x6) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x28, r5, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000850}, 0x20008014) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="2e000300010002", 0x7) sendmsg$nl_generic(r0, 0x0, 0x0) 5.503458056s ago: executing program 2 (id=1092): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, &(0x7f00000000c0)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r6) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) renameat2(r1, &(0x7f00000000c0)='./file2\x00', r0, &(0x7f0000000100)='./file1\x00', 0x0) 5.019193567s ago: executing program 0 (id=1093): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000080), 0x4) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@alu={0x4, 0x0, 0xc, 0xb, 0x8, 0xc, 0x1}, @exit]}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x34) fcntl$setsig(r2, 0xa, 0x21) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) fcntl$notify(r3, 0x402, 0x34) fcntl$setsig(r3, 0xa, 0x21) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x34) fcntl$setsig(r5, 0xa, 0x21) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x34) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 4.874759149s ago: executing program 0 (id=1094): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r4}, 0x18) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r5) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x2}}, 0x2e) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) 3.783954201s ago: executing program 0 (id=1095): syz_emit_ethernet(0x8a, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x1a, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x52, 0x0, 0x0, "23f12f4860a44b0bc15ba15ff24af6985862903ebeb97f2918c713975bf95aefc56dc0c47215146671a0c2baf90fa3de0356cd9d9628d4a6267468dae3319f08d9b5c0709d246a5db56f511cad8621"}]}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r0) r1 = socket$netlink(0x10, 0x3, 0x9) r2 = socket$inet(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='veth0_virt_wifi\x00', 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ea}, [], {0x14, 0x3f9}}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x2}]}], {0x14, 0x10}}, 0x80}}, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000300), &(0x7f00000003c0)=0x8) socket$inet6_mptcp(0xa, 0x1, 0x106) 3.769551352s ago: executing program 4 (id=1052): tkill(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, @void, @value}, 0x94) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) write$cgroup_pid(r4, &(0x7f0000000040), 0x12) 3.508561064s ago: executing program 0 (id=1096): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @loopback}, r5}}, 0x48) 2.227207032s ago: executing program 0 (id=1097): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff0000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = getpid() socket$vsock_stream(0x28, 0x1, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x800, 0x0, 0x2, 0x1}, 0x20) connect$inet6(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r6, 0x601}, 0x14}}, 0x0) 1.973806363s ago: executing program 4 (id=1098): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) connect(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21}, {0xa, 0x0, 0x0, @loopback}, r5}}, 0x48) 1.397628052s ago: executing program 2 (id=1099): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000640)={[{@nojournal_checksum}, {@nombcache}, {@inlinecrypt}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@jqfmt_vfsv0}, {@noauto_da_alloc}]}, 0xfe, 0x55a, &(0x7f0000000a00)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, 0x0}) r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000380)=0x4000) 1.236759035s ago: executing program 0 (id=1100): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x48}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1503"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETOFFLOAD(r1, 0x4010744d, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_writepages\x00'}, 0x10) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@private}}, &(0x7f0000000600)=0xe8) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=0x0) statx(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x4000, 0x1, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000007c0)='\x00', 0x0, 0x1000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000600), 0x0, 0x5e7, &(0x7f0000000c00)="$eJzs3c1vFVUbAPBnbj9oKe/bQoyKC2liDCRKSwsYYlzA1pAGP+LGjZUWRAo0tEaLJpQENybGjTEmrlyI/4US2bLSlQs3rgwJUUNcmXjN3DtTetvpJ+0dZH6/5HLnnHOn5wy3T+fMuefMDaCyBtN/ahF7I2I6iehP5hfKOiMrHGy+7t6fH51OH0nU66/9nkSS5eWvT7Lnvmznnoj48Yck9nQsr3dm7sr58ampyctZenj2wvTwzNyVg+cujJ+dPDt5cfSF0WNHjxw9NnJoU8d1tSDv5PV33+//ZOzNb776Oxn59pexJI7Hy9kLFx/HVhmMwcb/SbK8qO/YVldWko7s92TxW5x0ltggNiR//7oi4onoj464/+b1x8evlNo4YFvVk4g6UFGJ+IeKyvsB+bX90uvgWim9EqAd7p5oDgAsj//O5thg9DTGBnbeS2LxsE4SEZsbmWu1KyJu3xq7fubW2PXYpnE4oNj8tYh4sij+k0b8D0RPDDTiv9YS/2m/4FT2nOa/usn6lw4Vi39on2b896wa/7FC/L+VPl9txvDbm6x/8P7mO70t8d+72UMCAAAAAACAyrp5IiKeL/r8v7Yw/ycan//91bJfX0Qc34L6B5ekl3/+X7uzBdUABe6eiHipcP5vLZ/9O9CRbf2vMR+gKzlzbmryUET8PyIORNeOND2ySh0HP93z5Uplg9n8v/yR1n87mwuYteNO547WfSbGZ8cf9LiBiLvXIp4qnP+bLJz/k4L5v+nfg+l11rHn2RunVipbO/6B7VL/OmJ/4fn//l0rktXvzzHc6A8M572C5Z7+8LPvVqp/s/HvFhPw4NLz/87V438gWXy/npmN13F4rrNekN0I4c32/7uT1xu3nOnO8j4Yn529PBLRnZzsSHNb8kc33mZ4FOXxkMdLGv8Hnll9/K+o/98bEfNLfnbyR+ua4tzj//T9ulJ79P+hPGn8T2zo/L/xjdEbA9+vVP/6zv9HGuf6A1mO8T9o+iIP0+7W/IJw7Cwqand7AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBRUIuIXZHUhha2a7U00RcRj8XO2tSlmdnnzlx67+JEWtb4/v9a/k2//c10kn///8Ci9OiS9OGI2B0Rn3f0NtJDpy9NTZR98AAAAAAAAAAAAAAAAAAAAPCQ6CtY/z801Cz7raPs1gHbrrPsBgClKYj/n8poB9B+zv9QXeIfqkv8Q3WJf6gu8Q/VJf6husQ/VJf4BwAAAACAR8rufTd/TiJi/sXexiPVnZV1ldoyYLvVym4AUBq3+IHqMvUHqss1PpCsUd6z4k5r7bma6dMPsDMAAAAAAAAAAAAAVM7+vdb/Q1VZ/w/VZf0/VFe+/n9fye0A2s81PhBrrOQvXP+/5l4AAAAAAAAAAAAAwFaambtyfnxqavKyjTcejma0c6Ner19Nfwselvb8xzfyqfDtr7071vHifK3f+n5yeX+TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAVv8GAAD///5GJUU=") r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes128, 0x0, @auto="4b4a176636b678c2"}) fsetxattr$system_posix_acl(r0, &(0x7f0000000480)='system.posix_acl_access\x00', &(0x7f0000000880)={{}, {}, [{0x2, 0x9, r2}, {0x2, 0x4, r3}, {0x2, 0x4}, {0x2, 0x1, r4}], {0x4, 0x1}, [{0x8, 0x348503a77de04278}], {0x10, 0x1}, {0x20, 0x2}}, 0x4c, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) inotify_init1(0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}}, 0x0) 1.235608615s ago: executing program 4 (id=1101): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000240)={@loopback, 0x1c, 0x2, 0x0, 0x1, 0x4}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pread64(0xffffffffffffffff, &(0x7f0000000880)=""/4096, 0x1000, 0x0) unshare(0x2a020400) r5 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_QUERYBUF_DMABUF(r5, 0xc0585609, &(0x7f0000000040)={0x0, 0x3, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c7e49ffd"}}) 0s ago: executing program 4 (id=1102): syz_mount_image$msdos(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x40, &(0x7f0000000b00)=ANY=[@ANYBLOB='\x00'], 0x1, 0x4fb, &(0x7f0000000000)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x180) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) kernel console output (not intermixed with test programs): mes ready [ 428.955392][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 428.967818][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 428.977700][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 429.888656][ T7753] loop0: detected capacity change from 0 to 128 [ 430.455796][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 430.468331][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 430.499151][ T7757] netlink: 'syz.1.859': attribute type 15 has an invalid length. [ 430.556859][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 430.580052][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 430.623509][ T7548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.647075][ T7753] EXT4-fs (loop0): Test dummy encryption mode enabled [ 430.683615][ T7548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 430.695898][ T7753] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 430.733870][ T7747] loop4: detected capacity change from 0 to 32768 [ 430.744715][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 430.753856][ T1246] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 430.754420][ T7753] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038 (0x7fffffff) [ 430.850433][ T7761] loop2: detected capacity change from 0 to 8192 [ 430.913167][ T7761] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 430.929508][ T7761] REISERFS (device loop2): using ordered data mode [ 430.954946][ T7761] reiserfs: using flush barriers [ 431.134896][ T7761] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 431.152313][ T7761] REISERFS (device loop2): checking transaction log (loop2) [ 431.162428][ T7761] REISERFS (device loop2): Using r5 hash to sort names [ 431.174143][ T7761] REISERFS (device loop2): using 3.5.x disk format [ 431.187188][ T7768] overlayfs: upper fs needs to support d_type. [ 431.193481][ T7768] overlayfs: upper fs does not support tmpfile. [ 431.200397][ T7768] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 431.209931][ T7761] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 431.246522][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 431.257592][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 431.270851][ T7548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.000499][ T13] Bluetooth: hci5: command 0x0406 tx timeout [ 432.015715][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 432.040407][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 432.095783][ T7458] non-latin1 character 0x2e66 found in JFS file name [ 432.107550][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 432.119099][ T7458] mount with iocharset=utf8 to access [ 432.405127][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 432.885057][ T7780] loop2: detected capacity change from 0 to 512 [ 432.942871][ T7548] device veth0_vlan entered promiscuous mode [ 432.959053][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 432.981071][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 433.009470][ T7782] netlink: 76 bytes leftover after parsing attributes in process `syz.1.863'. [ 433.009651][ T7780] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 433.032514][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.863'. [ 433.038466][ T7785] loop0: detected capacity change from 0 to 24 [ 433.058578][ T7785] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 433.066596][ T7780] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.862: inode #1: comm syz.2.862: iget: illegal inode # [ 433.084748][ T7548] device veth1_vlan entered promiscuous mode [ 433.097993][ T7780] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.862: error while reading EA inode 1 err=-117 [ 433.117641][ T7780] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.862: inode #1: comm syz.2.862: iget: illegal inode # [ 433.137569][ T7780] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.862: error while reading EA inode 1 err=-117 [ 433.145797][ T7785] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 433.163081][ T7780] EXT4-fs (loop2): 1 orphan inode deleted [ 433.168826][ T7780] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,resgid=0x0000000000000000,nomblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 433.427562][ T7548] device veth0_macvtap entered promiscuous mode [ 433.451935][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 433.462946][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 434.461783][ T7548] device veth1_macvtap entered promiscuous mode [ 434.509586][ T7799] 9pnet: Insufficient options for proto=fd [ 434.521627][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 434.548748][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 434.797322][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.803621][ T7799] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 434.814914][ T7799] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 434.821442][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.857155][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.175522][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.302827][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.339407][ T7799] vhci_hcd vhci_hcd.0: Device attached [ 435.350233][ T7] vhci_hcd: vhci_device speed not set [ 435.429835][ T7] usb 11-1: new full-speed USB device number 2 using vhci_hcd [ 435.446569][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.466848][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.477382][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.487277][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.498255][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.611118][ T7548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.622700][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 435.650438][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 435.695314][ T7803] vhci_hcd: connection reset by peer [ 435.707927][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.736304][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.756999][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.760536][ T3670] vhci_hcd: stop threads [ 435.780420][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.786025][ T7812] loop2: detected capacity change from 0 to 1024 [ 435.798431][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.808846][ T3670] vhci_hcd: release socket [ 435.836025][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.856564][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.869798][ T3670] vhci_hcd: disconnect device [ 435.893646][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.924546][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.940880][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.952309][ T7548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.960740][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 435.975328][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 436.003153][ T7812] EXT4-fs (loop2): Ignoring removed orlov option [ 436.004207][ T7548] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.017045][ T7812] EXT4-fs (loop2): filesystem is read-only [ 436.025167][ T7548] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.034082][ T7548] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.043000][ T7548] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.101116][ T7812] EXT4-fs (loop2): #clusters per group too big: 8193 [ 437.428553][ T154] device hsr_slave_0 left promiscuous mode [ 437.435971][ T154] device hsr_slave_1 left promiscuous mode [ 437.452043][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.465413][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.476250][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.492718][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.513359][ T154] device bridge_slave_1 left promiscuous mode [ 437.524157][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.536703][ T154] device bridge_slave_0 left promiscuous mode [ 437.547693][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.585367][ T154] device veth1_macvtap left promiscuous mode [ 437.594959][ T154] device veth0_macvtap left promiscuous mode [ 437.601425][ T154] device veth1_vlan left promiscuous mode [ 437.607196][ T154] device veth0_vlan left promiscuous mode [ 437.775384][ T154] team0 (unregistering): Port device team_slave_1 removed [ 437.791966][ T154] team0 (unregistering): Port device team_slave_0 removed [ 437.806570][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.821959][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 437.889991][ T154] bond0 (unregistering): Released all slaves [ 437.970957][ T3728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.981515][ T3728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.982700][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.034695][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.037388][ T7817] chnl_net:caif_netlink_parms(): no params data found [ 438.072149][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 438.087661][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 438.317369][ T7817] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.324574][ T7817] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.333093][ T7817] device bridge_slave_0 entered promiscuous mode [ 438.341950][ T7817] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.370809][ T7817] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.389946][ T7817] device bridge_slave_1 entered promiscuous mode [ 438.441068][ T24] Bluetooth: hci1: command 0x0409 tx timeout [ 438.487677][ T7825] loop3: detected capacity change from 0 to 2048 [ 438.488399][ T7817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.530437][ T7825] Alternate GPT is invalid, using primary GPT. [ 438.536752][ T7825] loop3: p1 p2 p3 [ 438.652170][ T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 438.708822][ T3028] Alternate GPT is invalid, using primary GPT. [ 438.857478][ T3028] loop3: p1 p2 p3 [ 438.950278][ T7817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.259130][ T7817] team0: Port device team_slave_0 added [ 439.280673][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.292109][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.302766][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 439.312751][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.322649][ T24] usb 3-1: config 0 descriptor?? [ 439.356328][ T7817] team0: Port device team_slave_1 added [ 439.554303][ T7845] loop0: detected capacity change from 0 to 128 [ 439.830846][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.840415][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.893105][ T7169] udevd[7169]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 440.027729][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.041753][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.087551][ T7845] EXT4-fs (loop0): Test dummy encryption mode enabled [ 440.115949][ T7817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.140362][ T7845] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 440.167157][ T7169] udevd[7169]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 440.210038][ T7845] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038 (0x7fffffff) [ 440.229348][ T7169] udevd[7169]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 440.274969][ T7137] udevd[7137]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 440.287694][ T7136] udevd[7136]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 440.339753][ T7817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.434337][ T7169] udevd[7169]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 440.449232][ T7817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.017224][ T4685] Bluetooth: hci1: command 0x041b tx timeout [ 441.024625][ T24] isku 0003:1E7D:319C.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.2-1/input0 [ 441.046492][ T7817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.071161][ T7] vhci_hcd: vhci_device speed not set [ 441.111720][ T26] audit: type=1326 audit(1728964951.216:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.1.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4795467ff9 code=0x7ffc0000 [ 441.229788][ T7817] device hsr_slave_0 entered promiscuous mode [ 441.250005][ T7817] device hsr_slave_1 entered promiscuous mode [ 441.251305][ T26] audit: type=1326 audit(1728964951.246:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.1.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4795467ff9 code=0x7ffc0000 [ 441.258587][ T7869] loop0: detected capacity change from 0 to 256 [ 441.338331][ T26] audit: type=1326 audit(1728964951.286:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.1.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4795467ff9 code=0x7ffc0000 [ 441.361033][ T7817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.369464][ T26] audit: type=1326 audit(1728964951.286:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.1.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4795467ff9 code=0x7ffc0000 [ 441.373921][ T7817] Cannot create hsr debugfs directory [ 441.398595][ T26] audit: type=1326 audit(1728964951.286:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.1.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4795467ff9 code=0x7ffc0000 [ 441.434129][ T26] audit: type=1326 audit(1728964951.306:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.1.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4795467ff9 code=0x7ffc0000 [ 441.503324][ T26] audit: type=1326 audit(1728964951.306:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.1.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4795467ff9 code=0x7ffc0000 [ 441.510728][ T7869] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x84cb8d72, utbl_chksum : 0xe619d30d) [ 441.536703][ T26] audit: type=1326 audit(1728964951.306:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.1.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4795467ff9 code=0x7ffc0000 [ 441.660020][ T26] audit: type=1326 audit(1728964951.306:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.1.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4795467ff9 code=0x7ffc0000 [ 441.709438][ T24] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 441.737968][ T7869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.802427][ T26] audit: type=1326 audit(1728964951.306:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7866 comm="syz.1.880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4795467ff9 code=0x7ffc0000 [ 441.873708][ T7817] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.945733][ T7817] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.969404][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 441.996495][ T7817] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.088170][ T7817] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.089670][ T24] usb 2-1: config 0 has no interfaces? [ 442.138204][ T24] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 442.186826][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.244173][ T24] usb 2-1: config 0 descriptor?? [ 442.433935][ T7817] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 442.468415][ T7817] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 442.497551][ T7817] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 442.545755][ T7817] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 442.810477][ T7817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.879575][ T7817] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.897987][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 442.927817][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 442.940337][ T4685] usb 3-1: USB disconnect, device number 16 [ 443.000709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 443.018362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 443.045738][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.052830][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.099899][ T21] Bluetooth: hci1: command 0x040f tx timeout [ 443.110313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 443.167729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 443.187065][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.194180][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.224299][ T4682] usb 2-1: USB disconnect, device number 11 [ 443.237504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 443.293691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 443.320253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 443.347470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 443.361838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 443.370498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 443.379875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 443.396713][ T7817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 443.583028][ T7817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 444.389494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 444.413230][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 444.425347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 444.446951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 444.468926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 444.514879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 444.676238][ T7891] loop2: detected capacity change from 0 to 1024 [ 444.700327][ T7892] netlink: 'syz.1.888': attribute type 62 has an invalid length. [ 444.958040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 445.190970][ T21] Bluetooth: hci1: command 0x0419 tx timeout [ 445.271302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 445.351207][ T7817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.655884][ T7898] loop0: detected capacity change from 0 to 1024 [ 445.764628][ T7898] EXT4-fs (loop0): Test dummy encryption mode enabled [ 445.836781][ T7913] loop1: detected capacity change from 0 to 128 [ 445.844189][ T7898] EXT4-fs error (device loop0): ext4_init_orphan_info:586: comm syz.0.900: inode #0: comm syz.0.900: iget: illegal inode # [ 445.870774][ T7898] EXT4-fs (loop0): Remounting filesystem read-only [ 445.877419][ T7898] EXT4-fs (loop0): get orphan inode failed [ 445.895060][ T7913] EXT4-fs (loop1): Test dummy encryption mode enabled [ 446.035098][ T7898] EXT4-fs (loop0): mount failed [ 446.148162][ T7913] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 446.317792][ T7913] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038 (0x7fffffff) [ 446.409473][ T4681] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 446.665350][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 446.682952][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 446.949538][ T4681] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.965293][ T7930] loop1: detected capacity change from 0 to 128 [ 446.973947][ T4681] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.976770][ T7927] loop0: detected capacity change from 0 to 1024 [ 447.023673][ T7930] VFS: unable to find oldfs superblock on device loop1 [ 447.038039][ T7925] device ip6gre0 entered promiscuous mode [ 447.052289][ T7925] device vlan2 entered promiscuous mode [ 447.059778][ T4681] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 447.069085][ T4681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 447.086748][ T4681] usb 3-1: SerialNumber: syz [ 447.091731][ T7925] device ip6gre0 left promiscuous mode [ 447.145472][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 447.156982][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 447.215034][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 447.263751][ T7930] loop1: detected capacity change from 0 to 512 [ 447.276166][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 447.730850][ T7817] device veth0_vlan entered promiscuous mode [ 447.756777][ T5974] hfsplus: bad catalog entry type [ 447.807110][ T4681] usb 3-1: 0:2 : does not exist [ 447.822982][ T7930] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 447.827713][ T7817] device veth1_vlan entered promiscuous mode [ 447.832857][ T7930] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 447.845441][ T7930] System zones: 0-1, 15-15, 18-18, 34-34 [ 447.852587][ T7930] EXT4-fs (loop1): orphan cleanup on readonly fs [ 447.859290][ T7930] __quota_error: 63 callbacks suppressed [ 447.859303][ T7930] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 447.874558][ T7930] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 447.889466][ T7930] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 448.000136][ T4681] usb 3-1: unit 24 not found! [ 448.003305][ T7930] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.899: bad orphan inode 16 [ 448.020387][ T7930] ext4_test_bit(bit=15, block=18) = 1 [ 448.025826][ T7930] is_bad_inode(inode)=0 [ 448.032439][ T7930] NEXT_ORPHAN(inode)=0 [ 448.036625][ T7930] max_ino=32 [ 448.040062][ T7930] i_nlink=2 [ 448.043232][ T7930] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 448.059777][ T7930] fscrypt (loop1, inode 16): Error -61 getting encryption context [ 448.147799][ T7938] loop3: detected capacity change from 0 to 512 [ 448.309011][ T7938] EXT4-fs (loop3): Ignoring removed nobh option [ 448.315730][ T7938] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 448.419169][ T7938] EXT4-fs (loop3): 1 truncate cleaned up [ 448.425083][ T7938] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nobh,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 448.658501][ T4681] usb 3-1: USB disconnect, device number 17 [ 448.756455][ T7169] udevd[7169]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 448.925462][ T7817] device veth0_macvtap entered promiscuous mode [ 448.962419][ T7945] loop0: detected capacity change from 0 to 256 [ 448.973996][ T7817] device veth1_macvtap entered promiscuous mode [ 449.003707][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.031807][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.051900][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.068669][ T7945] FAT-fs (loop0): Unrecognized mount option "codepag" or missing value [ 449.084185][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.400120][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.557289][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.650670][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.767371][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.806808][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.864525][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.914854][ T7817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.943451][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 449.980170][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 449.988843][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 450.027796][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 450.048218][ T7945] loop0: detected capacity change from 0 to 8 [ 450.055596][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 450.084785][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 450.173899][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.188537][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.206755][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.217687][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.235790][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.247928][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.263258][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.276423][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.298612][ T7817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.299375][ T7945] unable to read inode lookup table [ 450.309610][ T7817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.465648][ T7817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.563683][ T7817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.614930][ T7817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.674822][ T7817] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.729253][ T7817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.066320][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 451.086751][ T7945] UBIFS error (pid: 7945): cannot open "ubifs", error -22 [ 451.106988][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 451.165318][ T7969] loop0: detected capacity change from 0 to 1024 [ 451.187975][ T3670] hfsplus: b-tree write err: -5, ino 8 [ 452.290211][ T3808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.346664][ T3808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.378536][ T3728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.400196][ T3728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.421439][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 452.446992][ T3669] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 452.722922][ T3624] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 454.673240][ T4682] Bluetooth: hci3: command 0x0409 tx timeout [ 454.701332][ T6576] hfsplus: bad catalog entry type [ 454.999063][ T8003] xt_hashlimit: invalid rate [ 455.347987][ T8003] loop4: detected capacity change from 0 to 8192 [ 455.503027][ T8003] REISERFS warning (device loop4): jmacd-7 reiserfs_fill_super: resize option for remount only [ 455.616625][ T8006] loop3: detected capacity change from 0 to 2048 [ 455.671292][ T8008] loop1: detected capacity change from 0 to 256 [ 455.678775][ T8006] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 455.725336][ T3808] hfsplus: b-tree write err: -5, ino 8 [ 455.740735][ T8008] exfat: Bad value for 'uid' [ 455.762933][ T8009] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 455.826753][ T8006] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=32, inode=11, rec_len=24, name_len=139 [ 455.923330][ T8008] loop1: detected capacity change from 0 to 256 [ 455.989491][ T8006] Remounting filesystem read-only [ 456.192610][ T8010] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=32, inode=11, rec_len=24, name_len=139 [ 456.231840][ T154] device hsr_slave_0 left promiscuous mode [ 456.565261][ T154] device hsr_slave_1 left promiscuous mode [ 456.646010][ T8008] FAT-fs (loop1): Directory bread(block 64) failed [ 456.710360][ T1074] Bluetooth: hci3: command 0x041b tx timeout [ 456.828137][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.853164][ T8008] FAT-fs (loop1): Directory bread(block 65) failed [ 456.860433][ T8008] FAT-fs (loop1): Directory bread(block 66) failed [ 456.877573][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.892714][ T8008] FAT-fs (loop1): Directory bread(block 67) failed [ 456.909516][ T8008] FAT-fs (loop1): Directory bread(block 68) failed [ 456.916303][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.935286][ T8008] FAT-fs (loop1): Directory bread(block 69) failed [ 456.948002][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.955496][ T8008] FAT-fs (loop1): Directory bread(block 70) failed [ 456.974858][ T154] device bridge_slave_1 left promiscuous mode [ 456.981908][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.990649][ T154] device bridge_slave_0 left promiscuous mode [ 456.996825][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.010393][ T8008] FAT-fs (loop1): Directory bread(block 71) failed [ 457.029541][ T8008] FAT-fs (loop1): Directory bread(block 72) failed [ 457.036208][ T8008] FAT-fs (loop1): Directory bread(block 73) failed [ 457.074064][ T154] device veth1_macvtap left promiscuous mode [ 457.108226][ T154] device veth0_macvtap left promiscuous mode [ 457.129421][ T154] device veth1_vlan left promiscuous mode [ 457.148486][ T154] device veth0_vlan left promiscuous mode [ 457.492072][ T26] audit: type=1804 audit(1728965223.514:200): pid=8025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.929" name="/newroot/3/file0/file1" dev="overlay" ino=33 res=1 errno=0 [ 458.240703][ T154] team0 (unregistering): Port device team_slave_1 removed [ 458.261805][ T154] team0 (unregistering): Port device team_slave_0 removed [ 458.285116][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.779792][ T7] Bluetooth: hci3: command 0x040f tx timeout [ 459.020600][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 459.067430][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.164242][ T8035] loop1: detected capacity change from 0 to 2048 [ 459.277078][ T154] bond0 (unregistering): Released all slaves [ 459.310865][ T8035] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz.1.932: casefold flag without casefold feature [ 459.330824][ T7989] chnl_net:caif_netlink_parms(): no params data found [ 459.563260][ T8035] EXT4-fs (loop1): get root inode failed [ 459.634277][ T8035] EXT4-fs (loop1): mount failed [ 459.809495][ T21] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 460.089296][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 460.219485][ T21] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.233383][ T21] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 460.242814][ T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 460.254196][ T21] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 460.265538][ T21] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 460.274636][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.288713][ T7989] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.296064][ T7989] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.310497][ T7989] device bridge_slave_0 entered promiscuous mode [ 460.322404][ T21] hub 5-1:1.0: bad descriptor, ignoring hub [ 460.337047][ T21] hub: probe of 5-1:1.0 failed with error -5 [ 460.344224][ T21] cdc_wdm 5-1:1.0: skipping garbage [ 460.349568][ T21] cdc_wdm 5-1:1.0: skipping garbage [ 460.388011][ T21] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 460.394520][ T21] cdc_wdm 5-1:1.0: Unknown control protocol [ 460.406372][ T7989] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.416555][ T7989] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.445290][ T7989] device bridge_slave_1 entered promiscuous mode [ 460.510950][ T7989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.524504][ T8020] chnl_net:caif_netlink_parms(): no params data found [ 460.536905][ T7989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.629079][ T7989] team0: Port device team_slave_0 added [ 460.691147][ T7989] team0: Port device team_slave_1 added [ 460.795066][ T8020] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.823707][ T8020] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.856577][ T8020] device bridge_slave_0 entered promiscuous mode [ 460.863589][ T1074] Bluetooth: hci3: command 0x0419 tx timeout [ 460.895122][ T7989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.909310][ T7989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.950881][ T7989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.995680][ T8020] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.017734][ T8020] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.045583][ T8020] device bridge_slave_1 entered promiscuous mode [ 461.053515][ T7989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.061021][ T7989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.087377][ T7989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.109370][ T1074] Bluetooth: hci4: command 0x041b tx timeout [ 461.214625][ T8020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.448902][ T8020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.573814][ T7989] device hsr_slave_0 entered promiscuous mode [ 461.694767][ T7989] device hsr_slave_1 entered promiscuous mode [ 461.808436][ T7989] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 461.841516][ T7989] Cannot create hsr debugfs directory [ 462.032763][ T8020] team0: Port device team_slave_0 added [ 462.070071][ T8071] device vlan2 entered promiscuous mode [ 462.112331][ T8074] loop1: detected capacity change from 0 to 512 [ 462.268404][ T8020] team0: Port device team_slave_1 added [ 462.275130][ T8074] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 462.310160][ T1074] usb 5-1: USB disconnect, device number 8 [ 462.439237][ T8074] ext4 filesystem being mounted at /127/bus supports timestamps until 2038 (0x7fffffff) [ 462.504506][ T8020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.515986][ T8020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.545467][ T8076] loop4: detected capacity change from 0 to 4096 [ 462.575955][ T8020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.588702][ T8020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.595705][ T8020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.623056][ T8020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.644108][ T8076] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 462.699898][ T8076] ntfs3: loop4: Failed to load $MFTMirr. [ 462.732061][ T7989] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.906338][ T8084] loop3: detected capacity change from 0 to 1024 [ 463.142716][ T8084] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 463.326953][ T3614] Bluetooth: hci4: command 0x040f tx timeout [ 464.013985][ T7989] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.209586][ T8097] block nbd3: shutting down sockets [ 464.261174][ T8099] loop1: detected capacity change from 0 to 256 [ 464.268663][ T8020] device hsr_slave_0 entered promiscuous mode [ 464.275981][ T8020] device hsr_slave_1 entered promiscuous mode [ 464.297337][ T8020] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.305263][ T8020] Cannot create hsr debugfs directory [ 464.309098][ T8101] loop4: detected capacity change from 0 to 1024 [ 464.335987][ T8099] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 464.353873][ T7989] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.412641][ T8099] Core dump to core aborted: cannot preserve file permissions [ 464.509152][ T7989] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.628053][ T3808] hfsplus: b-tree write err: -5, ino 4 [ 465.558591][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 465.707157][ T8112] device macvlan2 entered promiscuous mode [ 465.720157][ T8112] device virt_wifi0 entered promiscuous mode [ 465.819748][ T8112] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 466.167990][ T3728] hfsplus: b-tree write err: -5, ino 4 [ 466.386320][ T7989] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 466.481032][ T8020] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.505385][ T7989] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 466.529751][ T7989] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 466.548152][ T7989] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 466.569559][ T8117] netlink: 64 bytes leftover after parsing attributes in process `syz.3.954'. [ 466.581521][ T8117] afs: Unknown parameter '00000000000000000000011' [ 466.590585][ T8020] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.727887][ T8122] loop3: detected capacity change from 0 to 1024 [ 466.747595][ T8020] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.825227][ T7989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.843548][ T7989] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.881970][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 466.891595][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 466.905478][ T8122] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 7696581394437)! [ 466.920066][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 466.937397][ T8122] EXT4-fs (loop3): group descriptors corrupted! [ 466.945378][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 466.945812][ T3614] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 466.963470][ T3631] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.970698][ T3631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.979051][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 466.987981][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 466.996927][ T3631] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.003986][ T3631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.012620][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 467.021593][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 467.090191][ T8128] ubi0: attaching mtd0 [ 467.107252][ T8128] ubi0: scanning is finished [ 467.112007][ T8128] ubi0: empty MTD device detected [ 467.397763][ T8128] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 467.405451][ T8128] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 467.412838][ T8128] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 467.420249][ T8128] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 467.427735][ T8128] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 467.434659][ T8128] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 467.442813][ T8128] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 933984072 [ 467.452913][ T8128] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 467.469686][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 467.477861][ T8129] ubi0: background thread "ubi_bgt0d" started, PID 8129 [ 467.497089][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 467.510232][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 467.529976][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 467.538595][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 467.554802][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 467.653246][ T8020] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.697654][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 467.710078][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 467.733010][ T8132] loop3: detected capacity change from 0 to 512 [ 467.772881][ T7989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 467.784888][ T7989] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 467.819747][ T3614] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 468.020138][ T3614] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 468.041644][ T3614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.093221][ T3614] usb 5-1: Product: syz [ 468.120185][ T3614] usb 5-1: Manufacturer: syz [ 468.141944][ T3614] usb 5-1: SerialNumber: syz [ 468.214909][ T3614] usb 5-1: config 0 descriptor?? [ 468.250483][ T8119] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 468.490035][ T8131] netlink: 20 bytes leftover after parsing attributes in process `syz.3.958'. [ 468.496540][ T8132] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.958: bad orphan inode 15 [ 468.518132][ T8132] ext4_test_bit(bit=14, block=5) = 0 [ 468.524619][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 468.537533][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 468.543455][ T8132] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000001,journal_dev=0x0000000000000003,grpid,journal_ioprio=0x0000000000000002,journal_ioprio=0x0000000000000003,nolazytime,noload,,errors=continue. Quota mode: none. [ 468.570244][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.636475][ T3614] usb 5-1: USB disconnect, device number 9 [ 468.675583][ T8142] loop1: detected capacity change from 0 to 16 [ 468.699798][ T8131] EXT4-fs error (device loop3): __ext4_new_inode:1072: comm syz.3.958: reserved inode found cleared - inode=1 [ 468.741450][ T8020] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 468.764532][ T8020] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 468.780659][ T8142] erofs: (device loop1): mounted with root inode @ nid 36. [ 468.803953][ T7137] udevd[7137]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.822018][ T8132] cgroup: No subsys list or none specified [ 468.842529][ T8020] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 468.909081][ T8020] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 468.959452][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 468.966957][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 468.982140][ T8142] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 468.983729][ T7989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.023427][ T8142] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 469.219322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 469.249592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 469.489919][ T8153] loop3: detected capacity change from 0 to 512 [ 469.511529][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.962'. [ 469.529632][ T8153] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 469.558342][ T8020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.573033][ T8153] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 469.602745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 469.613045][ T8153] EXT4-fs (loop3): 1 truncate cleaned up [ 469.619047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 469.621554][ T8153] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x000000000000002e,lazytime,quota,quota,,errors=continue. Quota mode: writeback. [ 469.657544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 469.666083][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 469.693057][ T7989] device veth0_vlan entered promiscuous mode [ 469.751229][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 469.762883][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 469.778607][ T8159] device vlan2 entered promiscuous mode [ 469.791332][ T8020] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.816725][ T7989] device veth1_vlan entered promiscuous mode [ 469.872166][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 469.887068][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 469.924886][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.932020][ T6366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.007665][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 470.042298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 470.060295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 471.137990][ T26] audit: type=1804 audit(1728965236.854:201): pid=8173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.964" name="/newroot/31/file0/file1" dev="overlay" ino=187 res=1 errno=0 [ 471.214670][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.221849][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.278608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 471.335299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 471.351665][ T8183] loop3: detected capacity change from 0 to 16 [ 471.372608][ T154] bond0: (slave wlan1): Releasing backup interface [ 471.382698][ T8183] erofs: (device loop3): mounted with root inode @ nid 36. [ 471.517627][ T8020] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 471.549407][ T8020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.583393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 471.596350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 471.606087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 471.615624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 471.624611][ T8188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.970'. [ 471.635938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 471.644997][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 471.654081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 471.662787][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 471.671856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 471.680583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 471.693404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 471.704306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 472.002173][ T7989] device veth0_macvtap entered promiscuous mode [ 472.015382][ T7989] device veth1_macvtap entered promiscuous mode [ 472.034101][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.044706][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.055653][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.066270][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.076234][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.088250][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.121693][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.142523][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.162985][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.180384][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.192605][ T7989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.204809][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 472.264239][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 472.275311][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 472.285499][ T8201] tmpfs: Unknown parameter 'nr_bl!' [ 472.292794][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.307514][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.319349][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.330199][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.340757][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.351712][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.361832][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.392474][ T8206] fuse: Bad value for 'fd' [ 472.396110][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.408201][ T7989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.419981][ T7989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.444375][ T150] block nbd1: Attempted send on invalid socket [ 472.446064][ T7989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.451156][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 472.473192][ T8205] SQUASHFS error: Failed to read block 0x0: -5 [ 472.479547][ T8205] unable to read squashfs_super_block [ 472.746927][ T7989] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.807482][ T7989] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.911528][ T8213] dlm: non-version read from control device 0 [ 472.965900][ T7989] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.112374][ T7989] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.292549][ T8217] loop3: detected capacity change from 0 to 512 [ 473.308409][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 473.347337][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 473.425826][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 473.443670][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 473.453426][ T8217] EXT4-fs (loop3): 1 orphan inode deleted [ 473.459349][ T8217] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,stripe=0x0000000000000008,resuid=0x0000000000000000,stripe=0x0000000000000004,data_err=ignore,user_xattr,min_batch_time=0x0000000000000a9f,nodiscard,,errors=continue. Quota mode: none. [ 473.485143][ C0] vkms_vblank_simulate: vblank timer overrun [ 473.500562][ T8217] netem: change failed [ 473.564343][ T8223] loop4: detected capacity change from 0 to 128 [ 473.587340][ T154] device hsr_slave_0 left promiscuous mode [ 473.627906][ T8223] EXT4-fs (loop4): Test dummy encryption mode enabled [ 473.646393][ T8223] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 473.666438][ T8223] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038 (0x7fffffff) [ 473.676279][ T154] device hsr_slave_1 left promiscuous mode [ 473.861785][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.937808][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.048408][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.108882][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.208140][ T154] device bridge_slave_1 left promiscuous mode [ 474.242296][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.305213][ T154] device bridge_slave_0 left promiscuous mode [ 474.338715][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.391405][ T8234] loop3: detected capacity change from 0 to 8 [ 474.403321][ T154] device veth1_macvtap left promiscuous mode [ 474.409467][ T154] device veth0_macvtap left promiscuous mode [ 474.415524][ T154] device veth1_vlan left promiscuous mode [ 474.430513][ T8232] loop1: detected capacity change from 0 to 512 [ 474.436956][ T154] device veth0_vlan left promiscuous mode [ 474.682291][ T8232] EXT4-fs (loop1): 1 orphan inode deleted [ 474.714241][ T8234] SQUASHFS error: Failed to read block 0x260685: -5 [ 474.722325][ T8232] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 474.755067][ T8234] SQUASHFS error: Unable to read metadata cache entry [260685] [ 474.799874][ T8234] SQUASHFS error: Unable to read directory block [260685:0] [ 474.831710][ T8232] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038 (0x7fffffff) [ 474.858436][ T8239] SQUASHFS error: Unable to read metadata cache entry [260685] [ 474.919431][ T8239] SQUASHFS error: Unable to read directory block [260685:0] [ 474.998058][ T154] team0 (unregistering): Port device team_slave_1 removed [ 475.017516][ T8240] SQUASHFS error: Unable to read metadata cache entry [260685] [ 475.029800][ T8240] SQUASHFS error: Unable to read directory block [260685:0] [ 475.053809][ T154] team0 (unregistering): Port device team_slave_0 removed [ 475.069419][ T8239] SQUASHFS error: Unable to read metadata cache entry [260685] [ 475.087526][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.103942][ T8239] SQUASHFS error: Unable to read directory block [260685:0] [ 475.122021][ T8240] SQUASHFS error: Unable to read metadata cache entry [260685] [ 475.143933][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.158090][ T8240] SQUASHFS error: Unable to read directory block [260685:0] [ 475.179385][ T8234] SQUASHFS error: Unable to read metadata cache entry [260685] [ 475.199343][ T8234] SQUASHFS error: Unable to read directory block [260685:0] [ 475.643540][ T8234] SQUASHFS error: Unable to read metadata cache entry [260685] [ 475.673766][ T8234] SQUASHFS error: Unable to read directory block [260685:0] [ 475.762133][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 475.766394][ T154] bond0 (unregistering): Released all slaves [ 475.978392][ T8020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.735886][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 476.754334][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 476.833180][ T6366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.843393][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.854558][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.864954][ T6366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.877249][ T8020] device veth0_vlan entered promiscuous mode [ 476.883465][ T24] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 476.900314][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 476.908924][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 476.921291][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.930985][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 476.950650][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 476.965324][ T24] usb 5-1: config 0 descriptor?? [ 476.967617][ T1204] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 477.024181][ T8020] device veth1_vlan entered promiscuous mode [ 477.032702][ T1204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.088097][ T1204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.140307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 477.157773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 477.174693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 477.187007][ T8020] device veth0_macvtap entered promiscuous mode [ 477.214522][ T8020] device veth1_macvtap entered promiscuous mode [ 477.240287][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.282572][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.349422][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.388175][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.409441][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.434682][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.548550][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.451043][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.689252][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.740558][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.798521][ T8020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.819966][ T8282] netlink: 140 bytes leftover after parsing attributes in process `syz.1.989'. [ 478.861689][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 478.899454][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 478.905573][ T24] usbhid: probe of 5-1:0.0 failed with error -71 [ 478.916468][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 478.930699][ T24] usb 5-1: USB disconnect, device number 10 [ 478.937454][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 478.964176][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 479.029426][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.049692][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.129384][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.206008][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.235789][ T8293] loop4: detected capacity change from 0 to 512 [ 480.268455][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.295011][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.304984][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.315657][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.325551][ T8020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 480.339761][ T8020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.351050][ T8020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.569798][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 480.636204][ T3652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 480.670273][ T8299] syz.3.994 (8299): /proc/8298/oom_adj is deprecated, please use /proc/8298/oom_score_adj instead. [ 480.694787][ T8020] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.725945][ T8020] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.801965][ T8020] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.847919][ T8020] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.978959][ T8293] EXT4-fs (loop4): failed to open journal device unknown-block(0,0) -6 [ 481.917457][ T3808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.949282][ T3808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.010318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 482.196046][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.288344][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.378057][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 483.352856][ T1246] Bluetooth: hci5: Frame reassembly failed (-84) [ 483.488783][ T8330] loop2: detected capacity change from 0 to 16 [ 483.529097][ T8326] device bond0 entered promiscuous mode [ 483.539352][ T8326] device bond_slave_0 entered promiscuous mode [ 483.545658][ T8326] device bond_slave_1 entered promiscuous mode [ 483.589778][ T8330] erofs: (device loop2): mounted with root inode @ nid 36. [ 483.720941][ T8334] loop1: detected capacity change from 0 to 1024 [ 484.029634][ T26] audit: type=1800 audit(1728965250.114:202): pid=8330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1000" name="file1" dev="loop2" ino=86 res=0 errno=0 [ 484.234641][ T8334] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 484.689536][ T3872] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 485.094115][ T8347] netlink: 800 bytes leftover after parsing attributes in process `syz.3.1003'. [ 485.094142][ T8347] netlink: 1301 bytes leftover after parsing attributes in process `syz.3.1003'. [ 485.419544][ T3872] usb 3-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=f0.a0 [ 485.434962][ T3872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.497268][ T8356] loop1: detected capacity change from 0 to 2048 [ 485.504669][ T24] Bluetooth: hci5: command 0x1003 tx timeout [ 485.536224][ T3586] Bluetooth: hci5: sending frame failed (-49) [ 485.552915][ T3872] usb 3-1: config 0 descriptor?? [ 485.569524][ T8358] ubi: mtd0 is already attached to ubi0 [ 485.652690][ T3872] kl5kusb105 3-1:0.0: KL5KUSB105D / PalmConnect converter detected [ 485.940596][ T8356] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz.1.1004: casefold flag without casefold feature [ 486.095483][ T8356] EXT4-fs (loop1): get root inode failed [ 486.148164][ T8356] EXT4-fs (loop1): mount failed [ 486.188741][ T3872] usb 3-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0 [ 486.208950][ T3872] usb 3-1: USB disconnect, device number 18 [ 486.230886][ T3872] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0 [ 486.390149][ T3872] kl5kusb105 3-1:0.0: device disconnected [ 488.651557][ T3872] Bluetooth: hci5: command 0x1001 tx timeout [ 488.657644][ T3586] Bluetooth: hci5: sending frame failed (-49) [ 489.493575][ T8395] Unsupported ieee802154 address type: 0 [ 490.419263][ T8406] ubi: mtd0 is already attached to ubi0 [ 490.810806][ T4685] Bluetooth: hci5: command 0x1009 tx timeout [ 490.835880][ T8401] loop4: detected capacity change from 0 to 256 [ 491.258838][ T8401] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x84cb8d72, utbl_chksum : 0xe619d30d) [ 491.470826][ T8415] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 491.495301][ T8415] syz.2.1023[8415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.495439][ T8415] syz.2.1023[8415] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 491.536491][ T8415] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1023'. [ 492.361731][ T8421] loop2: detected capacity change from 0 to 128 [ 493.207062][ T8434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1029'. [ 494.309689][ T8441] loop2: detected capacity change from 0 to 32768 [ 494.421971][ T8431] chnl_net:caif_netlink_parms(): no params data found [ 494.458397][ T8441] (syz.2.1030,8441,1):ocfs2_read_virt_blocks:991 ERROR: Inode #18 contains a hole at offset 4096 [ 494.470097][ T8441] (syz.2.1030,8441,1):ocfs2_read_dir_block:511 ERROR: status = -5 [ 494.479008][ T8441] (syz.2.1030,8441,1):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 494.490732][ T8441] (syz.2.1030,8441,1):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 5, possibly corrupt fs? [ 494.490765][ T8441] (syz.2.1030,8441,1):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 494.493943][ T8436] loop1: detected capacity change from 0 to 4096 [ 494.503067][ T8441] (syz.2.1030,8441,1):ocfs2_initialize_super:2278 ERROR: status = -22 [ 494.503124][ T8441] (syz.2.1030,8441,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 494.705236][ T8436] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 494.743081][ T8422] loop4: detected capacity change from 0 to 40427 [ 494.856845][ T8422] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 494.887345][ T8448] loop2: detected capacity change from 0 to 128 [ 494.909363][ T8422] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 495.062509][ T8448] EXT4-fs (loop2): Test dummy encryption mode enabled [ 495.120101][ T8422] F2FS-fs (loop4): Found nat_bits in checkpoint [ 495.129293][ T8448] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 495.153727][ T8431] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.163606][ T8448] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038 (0x7fffffff) [ 495.520757][ T8461] loop1: detected capacity change from 0 to 1024 [ 495.908274][ T8431] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.988468][ T8422] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 496.058063][ T8431] device bridge_slave_0 entered promiscuous mode [ 496.240237][ T4685] Bluetooth: hci6: command 0x0409 tx timeout [ 496.334173][ T8431] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.368979][ T8431] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.427517][ T8431] device bridge_slave_1 entered promiscuous mode [ 496.430427][ T8466] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1035'. [ 496.735890][ T1246] hfsplus: b-tree write err: -5, ino 4 [ 497.863951][ T6366] Bluetooth: hci4: Frame reassembly failed (-84) [ 498.059067][ T8431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.093228][ T6366] Bluetooth: hci4: Frame reassembly failed (-84) [ 498.290940][ T154] device hsr_slave_0 left promiscuous mode [ 498.400444][ T154] device hsr_slave_1 left promiscuous mode [ 498.471310][ T4685] Bluetooth: hci6: command 0x041b tx timeout [ 498.478118][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.496418][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.713639][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.726979][ T8489] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 499.099725][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.176439][ T154] device bridge_slave_1 left promiscuous mode [ 499.236305][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.345330][ T154] device bridge_slave_0 left promiscuous mode [ 499.675606][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.775108][ T154] device veth1_macvtap left promiscuous mode [ 499.805117][ T154] device veth0_macvtap left promiscuous mode [ 499.829905][ T154] device veth1_vlan left promiscuous mode [ 499.899546][ T3872] Bluetooth: hci4: command 0x1003 tx timeout [ 499.915937][ T3583] Bluetooth: hci4: sending frame failed (-49) [ 500.028865][ T154] device veth0_vlan left promiscuous mode [ 500.744739][ T3872] Bluetooth: hci6: command 0x040f tx timeout [ 500.836586][ T8501] loop2: detected capacity change from 0 to 1764 [ 501.271718][ T1389] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.278016][ T1389] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.304729][ T154] team0 (unregistering): Port device team_slave_1 removed [ 501.322416][ T154] team0 (unregistering): Port device team_slave_0 removed [ 501.336381][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.355352][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.412684][ T8505] loop4: detected capacity change from 0 to 256 [ 501.459197][ T8505] exfat: Deprecated parameter 'utf8' [ 501.474619][ T154] bond0 (unregistering): Released all slaves [ 501.491019][ T8505] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 501.548530][ T8431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.616673][ T8505] loop_set_status: loop4 () has still dirty pages (nrpages=3) [ 501.668247][ T8431] team0: Port device team_slave_0 added [ 501.717604][ T8431] team0: Port device team_slave_1 added [ 501.851849][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.858811][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.012461][ T3616] Bluetooth: hci4: command 0x1001 tx timeout [ 502.018882][ T3583] Bluetooth: hci4: sending frame failed (-49) [ 502.038698][ T8431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.085739][ T8431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.101577][ T8431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.072642][ T3616] Bluetooth: hci6: command 0x0419 tx timeout [ 504.059438][ T3872] Bluetooth: hci4: command 0x1009 tx timeout [ 505.030694][ T8431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.552142][ T8431] device hsr_slave_0 entered promiscuous mode [ 509.598669][ T8431] device hsr_slave_1 entered promiscuous mode [ 509.675091][ T8526] xt_policy: output policy not valid in PREROUTING and INPUT [ 509.797729][ T8524] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1054'. [ 509.837547][ T8526] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1053'. [ 510.128814][ T8537] loop1: detected capacity change from 0 to 128 [ 510.209274][ T8537] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 510.450768][ T8431] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.706214][ T8431] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.049796][ T8431] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.309838][ T8431] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.355502][ T8542] loop2: detected capacity change from 0 to 2048 [ 511.439302][ T8530] chnl_net:caif_netlink_parms(): no params data found [ 511.490220][ T8521] chnl_net:caif_netlink_parms(): no params data found [ 511.739367][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 511.760776][ T8521] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.767889][ T8521] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.819426][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 511.830575][ T8521] device bridge_slave_0 entered promiscuous mode [ 511.871473][ T8521] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.878571][ T8521] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.926615][ T8521] device bridge_slave_1 entered promiscuous mode [ 511.949074][ T8554] loop1: detected capacity change from 0 to 8192 [ 512.007260][ T26] audit: type=1326 audit(1728965278.104:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8560 comm="syz.2.1059" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4b40acff9 code=0x0 [ 512.054188][ T8554] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 512.129677][ T8554] REISERFS (device loop1): using ordered data mode [ 512.136199][ T8554] reiserfs: using flush barriers [ 512.151717][ T8431] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 512.193425][ T8521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.218508][ T8530] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.227633][ T8530] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.259364][ T8554] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 512.262099][ T8530] device bridge_slave_0 entered promiscuous mode [ 512.275980][ T8554] REISERFS (device loop1): checking transaction log (loop1) [ 512.318102][ T8431] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 512.365579][ T8431] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 512.387144][ T8521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.417708][ T8530] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.426434][ T8530] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.444881][ T8530] device bridge_slave_1 entered promiscuous mode [ 512.464900][ T8431] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 512.488953][ T8554] REISERFS (device loop1): Using tea hash to sort names [ 512.501345][ T8554] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 512.595818][ T8521] team0: Port device team_slave_0 added [ 512.611269][ T8521] team0: Port device team_slave_1 added [ 512.712413][ T8530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.743810][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.768247][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 512.795407][ T8521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.815825][ T8530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 512.997284][ T8566] overlayfs: upper fs needs to support d_type. [ 513.003956][ T8566] overlayfs: upper fs does not support tmpfile. [ 513.022269][ T8566] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 513.464744][ T8530] team0: Port device team_slave_0 added [ 513.529628][ T8521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.537078][ T8521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.584639][ T8521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.634477][ T8530] team0: Port device team_slave_1 added [ 513.739301][ T8530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.746256][ T8530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.777356][ T8530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.806172][ T8569] netlink: 'syz.2.1061': attribute type 1 has an invalid length. [ 513.819290][ T1074] Bluetooth: hci1: command 0x041b tx timeout [ 513.856252][ T8521] device hsr_slave_0 entered promiscuous mode [ 513.872852][ T8521] device hsr_slave_1 entered promiscuous mode [ 513.880266][ T8521] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 513.887878][ T8521] Cannot create hsr debugfs directory [ 513.894604][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1061'. [ 513.903794][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 513.911030][ T8530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.917997][ T8530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.977707][ T8530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 514.055372][ T8431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.096530][ T3652] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.155820][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 514.204964][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 514.238408][ T8431] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.276287][ T8530] device hsr_slave_0 entered promiscuous mode [ 514.300089][ T8530] device hsr_slave_1 entered promiscuous mode [ 514.306656][ T8530] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 514.316756][ T8530] Cannot create hsr debugfs directory [ 514.335169][ T3652] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.378527][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 514.400054][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 514.412711][ T3670] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.419808][ T3670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.427938][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 514.465181][ T3652] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.575498][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 514.594916][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 514.699898][ T3808] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.706990][ T3808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.715881][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 514.724741][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 514.735506][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 514.744901][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 514.852759][ T3652] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.890719][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 514.921999][ T8431] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 514.933653][ T8431] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.995030][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 515.007239][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 515.016945][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 515.031922][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 515.050913][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 515.069488][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 515.108077][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 515.285059][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 515.312976][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 515.358559][ T8431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.367643][ T8583] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 515.386949][ T3652] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.391901][ T8583] overlayfs: missing 'lowerdir' [ 515.453689][ T3652] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.474712][ T8589] input: syz0 as /devices/virtual/input/input15 [ 515.484939][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 515.495397][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 515.563592][ T3652] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.577824][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 515.597641][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 515.607491][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 515.615300][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 515.625772][ T8431] device veth0_vlan entered promiscuous mode [ 515.672757][ T3652] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.701493][ T8574] chnl_net:caif_netlink_parms(): no params data found [ 515.815028][ T8431] device veth1_vlan entered promiscuous mode [ 515.905467][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 515.932205][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 515.942593][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 515.989449][ T3573] Bluetooth: hci0: command 0x040f tx timeout [ 516.699824][ T4685] Bluetooth: hci2: command 0x0409 tx timeout [ 516.727096][ T8574] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.736554][ T8574] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.756206][ T8608] loop2: detected capacity change from 0 to 64 [ 516.765958][ T8574] device bridge_slave_0 entered promiscuous mode [ 516.800717][ T8431] device veth0_macvtap entered promiscuous mode [ 516.807852][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 516.971688][ T8574] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.978816][ T8574] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.006738][ T8574] device bridge_slave_1 entered promiscuous mode [ 517.048963][ T8431] device veth1_macvtap entered promiscuous mode [ 517.115000][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.139589][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.159288][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.181329][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.200621][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.222758][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.232860][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.243521][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.253575][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.264565][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.275865][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.286744][ T8574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.319110][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 517.353501][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 517.376096][ T8574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.389661][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.389846][ T26] audit: type=1326 audit(1728965283.494:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b40acff9 code=0x7ffc0000 [ 517.409206][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.426472][ T26] audit: type=1326 audit(1728965283.524:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fe4b40acff9 code=0x7ffc0000 [ 517.444895][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.459507][ T26] audit: type=1326 audit(1728965283.524:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b40acff9 code=0x7ffc0000 [ 517.471894][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.495966][ T26] audit: type=1326 audit(1728965283.524:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe4b40acff9 code=0x7ffc0000 [ 517.501377][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.532365][ T26] audit: type=1326 audit(1728965283.524:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b40acff9 code=0x7ffc0000 [ 517.533242][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.566204][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.567977][ T26] audit: type=1326 audit(1728965283.524:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe4b40acff9 code=0x7ffc0000 [ 517.577136][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.609096][ T8431] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.611843][ T26] audit: type=1326 audit(1728965283.524:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b40acff9 code=0x7ffc0000 [ 517.619942][ T8431] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.654250][ T8431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.661860][ T26] audit: type=1326 audit(1728965283.524:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fe4b40acff9 code=0x7ffc0000 [ 517.661893][ T26] audit: type=1326 audit(1728965283.524:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4b40acff9 code=0x7ffc0000 [ 517.661931][ T26] audit: type=1326 audit(1728965283.524:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8628 comm="syz.2.1068" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe4b40acff9 code=0x7ffc0000 [ 517.858148][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 517.870787][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 517.892225][ T8431] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.909217][ T8431] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.929496][ T8431] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.938739][ T8431] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.968283][ T8574] team0: Port device team_slave_0 added [ 517.977873][ T8574] team0: Port device team_slave_1 added [ 517.983672][ T3618] Bluetooth: hci1: command 0x0419 tx timeout [ 518.024042][ T8574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.038143][ T8574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.083610][ T8574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.207017][ T8574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.220588][ T8574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.334249][ T8574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.379125][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 518.581931][ T8574] device hsr_slave_0 entered promiscuous mode [ 518.621707][ T8574] device hsr_slave_1 entered promiscuous mode [ 518.628484][ T8574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.636822][ T8574] Cannot create hsr debugfs directory [ 518.762272][ T8650] loop2: detected capacity change from 0 to 1024 [ 518.779654][ T4685] Bluetooth: hci2: command 0x041b tx timeout [ 518.898123][ T3631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.918560][ T3631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.937224][ T3728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.981003][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 518.990367][ T3728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.009493][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 519.936669][ T8657] loop2: detected capacity change from 0 to 1024 [ 520.025083][ T8530] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 520.093752][ T8530] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 520.129974][ T8530] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 520.167069][ T8530] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 520.260938][ T8574] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.291121][ T8521] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 520.339364][ T8521] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 520.348658][ T8521] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 520.859869][ T24] Bluetooth: hci2: command 0x040f tx timeout [ 520.860973][ T8574] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.984362][ T8530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.999561][ T8521] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 521.037931][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 521.048710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 521.102104][ T8530] 8021q: adding VLAN 0 to HW filter on device team0 [ 521.162402][ T8668] loop0: detected capacity change from 0 to 40427 [ 521.202001][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 521.243393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 521.253869][ T8668] F2FS-fs (loop0): invalid crc value [ 521.300429][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.307531][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 521.349138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 521.354184][ T8668] F2FS-fs (loop0): Found nat_bits in checkpoint [ 521.377073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 521.385544][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.392609][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.400323][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 521.407592][ T8668] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 521.409077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 521.428485][ T8668] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 521.871481][ T8530] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 521.958109][ T8530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 522.969693][ T3872] Bluetooth: hci2: command 0x0419 tx timeout [ 522.982230][ T8574] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.009464][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 523.023736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 523.038541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 523.110873][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 523.222412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 523.252630][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 523.285564][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 523.312914][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 523.338386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 523.368264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 523.401861][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 523.822400][ T8574] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.905703][ T8521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.961062][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 523.976971][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 524.016061][ T8521] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.077838][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 524.100236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 524.148066][ T8716] loop0: detected capacity change from 0 to 1024 [ 524.164417][ T8530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.184068][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 524.198987][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 524.225967][ T6367] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.233101][ T6367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 524.340611][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 524.411874][ T8574] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 524.444380][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 524.455598][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 524.474393][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.481502][ T6366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.883724][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 525.255184][ T8574] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 525.397407][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 525.575511][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 525.752912][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 525.944945][ T8574] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 526.136811][ T8574] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 526.256120][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 526.270368][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 526.273704][ T8750] loop0: detected capacity change from 0 to 256 [ 526.289440][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 526.298065][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 526.319924][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 526.338479][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 526.354943][ T6366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 526.358254][ T8750] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 526.393156][ T8521] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 526.409965][ T8521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 526.477664][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 526.496934][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 526.609361][ T8680] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 526.630419][ T3652] device hsr_slave_0 left promiscuous mode [ 526.646052][ T3652] device hsr_slave_1 left promiscuous mode [ 526.653386][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.669266][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.708237][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.757845][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.828186][ T3652] device bridge_slave_1 left promiscuous mode [ 526.849448][ T8680] usb 3-1: Using ep0 maxpacket: 32 [ 526.906118][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.008727][ T3652] device bridge_slave_0 left promiscuous mode [ 527.073456][ T3652] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.254530][ T8680] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 16 [ 527.301205][ T8680] usb 3-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 527.359493][ T8680] usb 3-1: config 1 interface 0 has no altsetting 0 [ 527.464848][ T3652] device hsr_slave_0 left promiscuous mode [ 527.472789][ T3652] device hsr_slave_1 left promiscuous mode [ 527.489569][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.497138][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.574156][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.587341][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.630040][ T3652] device bridge_slave_1 left promiscuous mode [ 527.646492][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.667220][ T3652] device bridge_slave_0 left promiscuous mode [ 527.689426][ T3652] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.747691][ T3652] device hsr_slave_0 left promiscuous mode [ 527.759633][ T3652] device hsr_slave_1 left promiscuous mode [ 527.794013][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.809781][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.832341][ T8776] loop0: detected capacity change from 0 to 32768 [ 527.840349][ T8680] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 527.840912][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.849509][ T8680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.849533][ T8680] usb 3-1: Product: syz [ 527.849547][ T8680] usb 3-1: Manufacturer: syz [ 527.849562][ T8680] usb 3-1: SerialNumber: syz [ 527.879520][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.881925][ T8748] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 527.894559][ T3652] device bridge_slave_1 left promiscuous mode [ 527.909805][ T3652] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.927679][ T8748] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 527.940595][ T3652] device bridge_slave_0 left promiscuous mode [ 527.947707][ T3652] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.983252][ T3652] device veth1_macvtap left promiscuous mode [ 527.989651][ T3652] device veth0_macvtap left promiscuous mode [ 527.995878][ T3652] device veth1_vlan left promiscuous mode [ 528.000188][ T8776] XFS (loop0): Mounting V5 Filesystem [ 528.003942][ T3652] device veth0_vlan left promiscuous mode [ 528.020518][ T3652] device veth1_macvtap left promiscuous mode [ 528.029489][ T3652] device veth0_macvtap left promiscuous mode [ 528.035555][ T3652] device veth1_vlan left promiscuous mode [ 528.041751][ T3652] device veth0_vlan left promiscuous mode [ 528.063024][ T3652] device veth1_macvtap left promiscuous mode [ 528.066876][ T8776] XFS (loop0): Ending clean mount [ 528.069044][ T3652] device veth0_macvtap left promiscuous mode [ 528.077124][ T8776] XFS (loop0): Quotacheck needed: Please wait. [ 528.094626][ T3652] device veth1_vlan left promiscuous mode [ 528.100580][ T3652] device veth0_vlan left promiscuous mode [ 528.170727][ T8776] XFS (loop0): Quotacheck: Done. [ 528.530634][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 528.530743][ T26] audit: type=1800 audit(1728965294.594:217): pid=8796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1084" name="file2" dev="loop0" ino=9287 res=0 errno=0 [ 529.022955][ T8431] XFS (loop0): Unmounting Filesystem [ 529.121054][ T3652] team0 (unregistering): Port device team_slave_1 removed [ 529.167793][ T3652] team0 (unregistering): Port device team_slave_0 removed [ 529.191710][ T3652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.209088][ T3652] device bond_slave_1 left promiscuous mode [ 529.226332][ T3652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.237693][ T3652] device bond_slave_0 left promiscuous mode [ 529.341918][ T3652] bond0 (unregistering): Released all slaves [ 529.910681][ T3652] team0 (unregistering): Port device team_slave_1 removed [ 529.936700][ T3652] team0 (unregistering): Port device team_slave_0 removed [ 529.979778][ T3652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.006164][ T3652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.086106][ T3652] bond0 (unregistering): Released all slaves [ 530.199218][ T3652] team0 (unregistering): Port device team_slave_1 removed [ 530.212942][ T3652] team0 (unregistering): Port device team_slave_0 removed [ 530.227214][ T3652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 530.243338][ T3652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 530.314788][ T3652] bond0 (unregistering): Released all slaves [ 530.363275][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 530.371729][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 530.381601][ T8530] device veth0_vlan entered promiscuous mode [ 530.393206][ T8741] netlink: 'syz.2.1082': attribute type 4 has an invalid length. [ 530.432626][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 530.453621][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 530.478397][ T8530] device veth1_vlan entered promiscuous mode [ 530.519325][ T8680] usb 3-1: USB disconnect, device number 19 [ 530.534922][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 530.549672][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 530.586768][ T8521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.612621][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 530.621938][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 530.633019][ T8530] device veth0_macvtap entered promiscuous mode [ 530.644210][ T8530] device veth1_macvtap entered promiscuous mode [ 530.707587][ T8574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.115943][ T8574] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.124091][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 531.133654][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 531.142155][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 531.151470][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 531.160644][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 531.168472][ T3728] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 531.193150][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.215398][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.230440][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.249328][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.269817][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 531.294857][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.319973][ T8530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 531.331765][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.343286][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.354752][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.365594][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.375734][ T8530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 531.388744][ T8530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 531.406340][ T8530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 531.437592][ T8817] xt_SECMARK: invalid mode: 0 [ 532.071926][ T4685] Bluetooth: hci2: command 0x0411 tx timeout [ 532.113591][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 532.133027][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 532.151900][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 532.183499][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 532.194598][ T26] audit: type=1326 audit(1728965298.294:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8821 comm="syz.0.1091" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb722255ff9 code=0x0 [ 532.218409][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 532.227901][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 532.236402][ T3631] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.243504][ T3631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.251495][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 532.260159][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 532.268436][ T3631] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.275493][ T3631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.283379][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 532.292153][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 532.302650][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 532.311718][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 532.320195][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 532.330119][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 532.338433][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 532.346477][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 532.357298][ T8530] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.366692][ T8530] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.378266][ T8530] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.387487][ T8530] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.407674][ T8574] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 532.420377][ T8574] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 532.436080][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 532.444480][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 532.453608][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 532.462085][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 532.470530][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 532.497902][ T8521] device veth0_vlan entered promiscuous mode [ 532.521045][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 532.545236][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 532.568196][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 532.590424][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 532.632730][ T8521] device veth1_vlan entered promiscuous mode [ 532.704696][ T8521] device veth0_macvtap entered promiscuous mode [ 532.726229][ T8521] device veth1_macvtap entered promiscuous mode [ 532.756415][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 532.773647][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 532.785020][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 532.810054][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 532.819901][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 532.828791][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 532.872113][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.894685][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.916156][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.937580][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.958502][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.982215][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.999278][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.027885][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.061522][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.084265][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 533.089804][ T3728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.101776][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 533.111844][ T3728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.169845][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.191747][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.219379][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.247122][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.273353][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.320908][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.363585][ T8521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.399279][ T8521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.410547][ T8521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.418882][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 533.437208][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 533.540005][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 533.541836][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 533.546260][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 533.787190][ T3670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.787306][ T3670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.815680][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 534.136323][ T8574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.146691][ T8521] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.228001][ T8521] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.247136][ T8521] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.264526][ T8521] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.375879][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 534.392493][ T3670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 534.586430][ T8574] device veth0_vlan entered promiscuous mode [ 534.837967][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 534.898748][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 536.100591][ T8574] device veth1_vlan entered promiscuous mode [ 536.109308][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 536.120037][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 536.206502][ T8574] device veth0_macvtap entered promiscuous mode [ 536.216417][ T8574] device veth1_macvtap entered promiscuous mode [ 536.226707][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 536.238368][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 536.278914][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 536.325872][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 536.791781][ T8860] loop2: detected capacity change from 0 to 1024 [ 536.844200][ T3808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.880710][ T8574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.891940][ T3808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.904902][ T8860] EXT4-fs (loop2): Mount option "nojournal_checksum" incompatible with ext2 [ 536.910398][ T8574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.931974][ T8574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.953383][ T8574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.963241][ T8574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.973661][ T8574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.985897][ T8574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 536.996498][ T8574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.006604][ T8574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.017335][ T8574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.065646][ T8574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.401548][ T8866] loop0: detected capacity change from 0 to 1024 [ 537.542854][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 537.551023][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 537.560803][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 537.580608][ T8574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.621467][ T8574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.641218][ T8574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.661420][ T8574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.694288][ T8574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.715544][ T8574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.733930][ T8574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.743834][ T8866] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 537.763482][ T8574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.776514][ T8574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.787513][ T8574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.801396][ T8574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.807953][ T8863] EXT4-fs warning (device loop0): ext4_empty_dir:3154: inode #2: comm syz.0.1100: directory missing '..' [ 537.861527][ T6367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.974325][ T8574] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.995761][ T6367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.163569][ T8574] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.399271][ T8872] [ 538.401623][ T8872] ====================================================== [ 538.403433][ T8574] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.408627][ T8872] WARNING: possible circular locking dependency detected [ 538.408637][ T8872] 5.15.167-syzkaller #0 Not tainted [ 538.417745][ T8574] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.424266][ T8872] ------------------------------------------------------ [ 538.424274][ T8872] syz.2.1099/8872 is trying to acquire lock: [ 538.424284][ T8872] ffff88802a264170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2aa/0x370 [ 538.424337][ T8872] [ 538.424337][ T8872] but task is already holding lock: [ 538.442192][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 538.445143][ T8872] ffff88802a262bd8 [ 538.454856][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 538.461472][ T8872] (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x1a0/0x6e0 [ 538.461516][ T8872] [ 538.461516][ T8872] which lock already depends on the new lock. [ 538.461516][ T8872] [ 538.461522][ T8872] [ 538.461522][ T8872] the existing dependency chain (in reverse order) is: [ 538.461528][ T8872] [ 538.461528][ T8872] -> #3 (&sbi->s_writepages_rwsem){++++}-{0:0}: [ 538.461553][ T8872] lock_acquire+0x1db/0x4f0 [ 538.461569][ T8872] percpu_down_read+0x46/0x1b0 [ 538.473393][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 538.476856][ T8872] ext4_writepages+0x1f6/0x3d10 [ 538.548896][ T8872] do_writepages+0x481/0x730 [ 538.553992][ T8872] filemap_fdatawrite_wbc+0x1d6/0x230 [ 538.559863][ T8872] filemap_write_and_wait_range+0x19e/0x280 [ 538.566253][ T8872] __iomap_dio_rw+0x897/0x1f40 [ 538.571517][ T8872] iomap_dio_rw+0x38/0x80 [ 538.576363][ T8872] ext4_file_read_iter+0x530/0x6c0 [ 538.581972][ T8872] generic_file_splice_read+0x4ad/0x790 [ 538.588015][ T8872] splice_direct_to_actor+0x448/0xc10 [ 538.593906][ T8872] do_splice_direct+0x285/0x3d0 [ 538.599257][ T8872] do_sendfile+0x622/0x1000 [ 538.604260][ T8872] __se_sys_sendfile64+0x178/0x1e0 [ 538.609875][ T8872] do_syscall_64+0x3b/0xb0 [ 538.614806][ T8872] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 538.621203][ T8872] [ 538.621203][ T8872] -> #2 (&sb->s_type->i_mutex_key#9){++++}-{3:3}: [ 538.629805][ T8872] lock_acquire+0x1db/0x4f0 [ 538.634827][ T8872] down_read+0x45/0x2e0 [ 538.639493][ T8872] ext4_bmap+0x4b/0x410 [ 538.644148][ T8872] bmap+0xa1/0xd0 [ 538.648277][ T8872] jbd2_journal_flush+0x7a2/0xc90 [ 538.653801][ T8872] ext4_ioctl+0x3249/0x5b80 [ 538.658802][ T8872] __se_sys_ioctl+0xf1/0x160 [ 538.663889][ T8872] do_syscall_64+0x3b/0xb0 [ 538.668804][ T8872] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 538.675192][ T8872] [ 538.675192][ T8872] -> #1 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 538.683934][ T8872] lock_acquire+0x1db/0x4f0 [ 538.688933][ T8872] __mutex_lock_common+0x1da/0x25a0 [ 538.694629][ T8872] mutex_lock_io_nested+0x45/0x60 [ 538.700153][ T8872] jbd2_journal_flush+0x290/0xc90 [ 538.705677][ T8872] ext4_ioctl+0x3249/0x5b80 [ 538.710683][ T8872] __se_sys_ioctl+0xf1/0x160 [ 538.715788][ T8872] do_syscall_64+0x3b/0xb0 [ 538.720704][ T8872] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 538.727098][ T8872] [ 538.727098][ T8872] -> #0 (&journal->j_barrier){+.+.}-{3:3}: [ 538.735061][ T8872] validate_chain+0x1649/0x5930 [ 538.740415][ T8872] __lock_acquire+0x1295/0x1ff0 [ 538.745767][ T8872] lock_acquire+0x1db/0x4f0 [ 538.750770][ T8872] __mutex_lock_common+0x1da/0x25a0 [ 538.756486][ T8872] mutex_lock_nested+0x17/0x20 [ 538.761746][ T8872] jbd2_journal_lock_updates+0x2aa/0x370 [ 538.767878][ T8872] ext4_change_inode_journal_flag+0x1a8/0x6e0 [ 538.774459][ T8872] ext4_fileattr_set+0xdf4/0x1750 [ 538.779996][ T8872] vfs_fileattr_set+0x8f3/0xd30 [ 538.785349][ T8872] do_vfs_ioctl+0x1d85/0x2b70 [ 538.790542][ T8872] __se_sys_ioctl+0x81/0x160 [ 538.795655][ T8872] do_syscall_64+0x3b/0xb0 [ 538.800570][ T8872] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 538.806986][ T8872] [ 538.806986][ T8872] other info that might help us debug this: [ 538.806986][ T8872] [ 538.817192][ T8872] Chain exists of: [ 538.817192][ T8872] &journal->j_barrier --> &sb->s_type->i_mutex_key#9 --> &sbi->s_writepages_rwsem [ 538.817192][ T8872] [ 538.832302][ T8872] Possible unsafe locking scenario: [ 538.832302][ T8872] [ 538.839742][ T8872] CPU0 CPU1 [ 538.845079][ T8872] ---- ---- [ 538.850421][ T8872] lock(&sbi->s_writepages_rwsem); [ 538.855612][ T8872] lock(&sb->s_type->i_mutex_key#9); [ 538.863483][ T8872] lock(&sbi->s_writepages_rwsem); [ 538.871617][ T8872] lock(&journal->j_barrier); [ 538.876373][ T8872] [ 538.876373][ T8872] *** DEADLOCK *** [ 538.876373][ T8872] [ 538.884486][ T8872] 4 locks held by syz.2.1099/8872: [ 538.889569][ T8872] #0: ffff88802a260460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write_file+0x5a/0x1f0 [ 538.899249][ T8872] #1: ffff888073db0de8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: vfs_fileattr_set+0x135/0xd30 [ 538.909920][ T8872] #2: ffff888073db0f88 (mapping.invalidate_lock){++++}-{3:3}, at: ext4_change_inode_journal_flag+0x115/0x6e0 [ 538.921577][ T8872] #3: ffff88802a262bd8 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_change_inode_journal_flag+0x1a0/0x6e0 [ 538.933293][ T8872] [ 538.933293][ T8872] stack backtrace: [ 538.939156][ T8872] CPU: 0 PID: 8872 Comm: syz.2.1099 Not tainted 5.15.167-syzkaller #0 [ 538.947299][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 538.957340][ T8872] Call Trace: [ 538.960609][ T8872] [ 538.963522][ T8872] dump_stack_lvl+0x1e3/0x2d0 [ 538.968175][ T8872] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 538.973786][ T8872] ? print_circular_bug+0x12b/0x1a0 [ 538.978968][ T8872] check_noncircular+0x2f8/0x3b0 [ 538.983893][ T8872] ? add_chain_block+0x850/0x850 [ 538.988856][ T8872] ? lockdep_lock+0x11f/0x2a0 [ 538.993536][ T8872] ? validate_chain+0x112/0x5930 [ 538.998456][ T8872] validate_chain+0x1649/0x5930 [ 539.003297][ T8872] ? reacquire_held_locks+0x660/0x660 [ 539.008649][ T8872] ? lockdep_unlock+0x166/0x300 [ 539.013489][ T8872] ? lockdep_lock+0x2a0/0x2a0 [ 539.018148][ T8872] ? lockdep_unlock+0x166/0x300 [ 539.022974][ T8872] ? reacquire_held_locks+0x660/0x660 [ 539.028325][ T8872] ? validate_chain+0x13bd/0x5930 [ 539.033328][ T8872] ? mark_lock+0x98/0x340 [ 539.037638][ T8872] ? mark_lock+0x98/0x340 [ 539.041948][ T8872] __lock_acquire+0x1295/0x1ff0 [ 539.046795][ T8872] lock_acquire+0x1db/0x4f0 [ 539.051289][ T8872] ? jbd2_journal_lock_updates+0x2aa/0x370 [ 539.057103][ T8872] ? read_lock_is_recursive+0x10/0x10 [ 539.062470][ T8872] ? __might_sleep+0xc0/0xc0 [ 539.067047][ T8872] ? print_irqtrace_events+0x210/0x210 [ 539.072500][ T8872] ? lockdep_hardirqs_off+0x70/0x100 [ 539.077768][ T8872] ? do_raw_spin_unlock+0x137/0x8b0 [ 539.082948][ T8872] __mutex_lock_common+0x1da/0x25a0 [ 539.088139][ T8872] ? jbd2_journal_lock_updates+0x2aa/0x370 [ 539.093929][ T8872] ? jbd2_journal_lock_updates+0x2aa/0x370 [ 539.099712][ T8872] ? jbd2_journal_lock_updates+0x299/0x370 [ 539.105498][ T8872] ? jbd2_journal_wait_updates+0x268/0x2d0 [ 539.111309][ T8872] ? mutex_lock_io_nested+0x60/0x60 [ 539.116505][ T8872] ? do_raw_read_unlock+0x70/0x70 [ 539.121506][ T8872] ? rcu_sync_func+0xaa/0x210 [ 539.126158][ T8872] mutex_lock_nested+0x17/0x20 [ 539.130901][ T8872] jbd2_journal_lock_updates+0x2aa/0x370 [ 539.136535][ T8872] ? jbd2_journal_wait_updates+0x2d0/0x2d0 [ 539.142321][ T8872] ? cpumask_next+0xc3/0xf0 [ 539.146805][ T8872] ? percpu_down_write+0x1ea/0x2d0 [ 539.151904][ T8872] ext4_change_inode_journal_flag+0x1a8/0x6e0 [ 539.157969][ T8872] ext4_fileattr_set+0xdf4/0x1750 [ 539.163076][ T8872] ? mark_lock+0x98/0x340 [ 539.167389][ T8872] ? ext4_fileattr_get+0x200/0x200 [ 539.172480][ T8872] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 539.178096][ T8872] ? lockdep_hardirqs_on+0x94/0x130 [ 539.183283][ T8872] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 539.188891][ T8872] ? memset+0x1f/0x40 [ 539.192848][ T8872] ? fileattr_fill_flags+0x1d0/0x300 [ 539.198110][ T8872] ? fscrypt_prepare_setflags+0x5d/0x220 [ 539.203716][ T8872] vfs_fileattr_set+0x8f3/0xd30 [ 539.208545][ T8872] ? copy_fsxattr_to_user+0x3a0/0x3a0 [ 539.213899][ T8872] do_vfs_ioctl+0x1d85/0x2b70 [ 539.218555][ T8872] ? __x64_compat_sys_ioctl+0x80/0x80 [ 539.223918][ T8872] ? __lock_acquire+0x1ff0/0x1ff0 [ 539.228917][ T8872] ? slab_free_freelist_hook+0xdd/0x160 [ 539.234442][ T8872] ? tomoyo_path_number_perm+0x648/0x810 [ 539.240055][ T8872] ? kfree+0xf1/0x270 [ 539.244014][ T8872] ? tomoyo_path_number_perm+0x6ab/0x810 [ 539.249636][ T8872] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 539.255103][ T8872] ? __fget_files+0x413/0x480 [ 539.259756][ T8872] ? bpf_lsm_file_ioctl+0x5/0x10 [ 539.264670][ T8872] ? security_file_ioctl+0x7d/0xa0 [ 539.269770][ T8872] __se_sys_ioctl+0x81/0x160 [ 539.274358][ T8872] do_syscall_64+0x3b/0xb0 [ 539.278749][ T8872] ? clear_bhb_loop+0x15/0x70 [ 539.283400][ T8872] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 539.289276][ T8872] RIP: 0033:0x7fe4b40acff9 [ 539.293687][ T8872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.313284][ T8872] RSP: 002b:00007fe4b24e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 539.321671][ T8872] RAX: ffffffffffffffda RBX: 00007fe4b4265130 RCX: 00007fe4b40acff9 [ 539.329623][ T8872] RDX: 0000000020000380 RSI: 0000000040086602 RDI: 0000000000000007 [ 539.337586][ T8872] RBP: 00007fe4b411f296 R08: 0000000000000000 R09: 0000000000000000 [ 539.345532][ T8872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.353502][ T8872] R13: 0000000000000000 R14: 00007fe4b4265130 R15: 00007fffc8899c98 [ 539.361458][ T8872] [ 539.415623][ T8574] ieee80211 phy55: Selected rate control algorithm 'minstrel_ht' [ 539.434141][ T6367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.434932][ T8574] ieee80211 phy56: Selected rate control algorithm 'minstrel_ht' [ 539.445978][ T6367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.462899][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 539.471528][ T3808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.480324][ T3808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.487717][ T3808] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 539.765825][ T8874] loop4: detected capacity change from 0 to 2048