Warning: Permanently added '10.128.1.21' (ECDSA) to the list of known hosts. 2021/02/20 09:50:13 fuzzer started 2021/02/20 09:50:13 dialing manager at 10.128.0.163:41437 2021/02/20 09:50:13 syscalls: 3542 2021/02/20 09:50:13 code coverage: enabled 2021/02/20 09:50:13 comparison tracing: enabled 2021/02/20 09:50:13 extra coverage: enabled 2021/02/20 09:50:13 setuid sandbox: enabled 2021/02/20 09:50:13 namespace sandbox: enabled 2021/02/20 09:50:13 Android sandbox: /sys/fs/selinux/policy does not exist 2021/02/20 09:50:13 fault injection: enabled 2021/02/20 09:50:13 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/02/20 09:50:13 net packet injection: enabled 2021/02/20 09:50:13 net device setup: enabled 2021/02/20 09:50:13 concurrency sanitizer: enabled 2021/02/20 09:50:13 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/02/20 09:50:13 USB emulation: enabled 2021/02/20 09:50:13 hci packet injection: enabled 2021/02/20 09:50:13 wifi device emulation: enabled 2021/02/20 09:50:13 802.15.4 emulation: enabled 2021/02/20 09:50:13 fetching corpus: 0, signal 0/54 (executing program) 2021/02/20 09:50:13 fetching corpus: 2, signal 98/98 (executing program) 2021/02/20 09:50:13 fetching corpus: 2, signal 98/98 (executing program) 2021/02/20 09:50:15 starting 6 fuzzer processes 09:50:15 executing program 0: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x1, 0x2, 0x0, "58a742", 0x0, "5bc788"}, "655c58d2"}}}}}, 0x0) 09:50:15 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0xf0ff7f, 0x0, 0x0) 09:50:16 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab0b, 0xffffffffffffffff) 09:50:16 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f00000033c0)=@framed={{0x18, 0x5}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff66}, 0x48) 09:50:16 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014000a0081"], 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 09:50:16 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x5c, 0x2, {{0x1, [], 0x0, [0x10]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) [ 33.351195][ T8396] IPVS: ftp: loaded support on port[0] = 21 [ 33.431478][ T8396] chnl_net:caif_netlink_parms(): no params data found [ 33.464473][ T8396] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.472361][ T8396] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.479716][ T8396] device bridge_slave_0 entered promiscuous mode [ 33.496361][ T8396] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.505995][ T8396] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.521127][ T8396] device bridge_slave_1 entered promiscuous mode [ 33.543878][ T8396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.554647][ T8396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.555975][ T8400] IPVS: ftp: loaded support on port[0] = 21 [ 33.572394][ T8396] team0: Port device team_slave_0 added [ 33.580587][ T8396] team0: Port device team_slave_1 added [ 33.604748][ T8396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.612031][ T8396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.638931][ T8396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.651721][ T8396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.658784][ T8396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.692040][ T8396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.713858][ T8396] device hsr_slave_0 entered promiscuous mode [ 33.721987][ T8396] device hsr_slave_1 entered promiscuous mode [ 33.739998][ T8402] IPVS: ftp: loaded support on port[0] = 21 [ 33.827278][ T8400] chnl_net:caif_netlink_parms(): no params data found [ 33.894489][ T8404] IPVS: ftp: loaded support on port[0] = 21 [ 33.919921][ T8402] chnl_net:caif_netlink_parms(): no params data found [ 33.952962][ T8400] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.971465][ T8400] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.985036][ T8400] device bridge_slave_0 entered promiscuous mode [ 34.013190][ T8400] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.026123][ T8400] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.034701][ T8400] device bridge_slave_1 entered promiscuous mode [ 34.053086][ T8402] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.062537][ T8402] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.070248][ T8402] device bridge_slave_0 entered promiscuous mode [ 34.079046][ T8402] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.086802][ T8402] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.094569][ T8402] device bridge_slave_1 entered promiscuous mode [ 34.105469][ T8400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.121445][ T8396] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.123926][ T8406] IPVS: ftp: loaded support on port[0] = 21 [ 34.144887][ T8400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.176855][ T8400] team0: Port device team_slave_0 added [ 34.184303][ T8402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.199948][ T8396] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.223558][ T8408] IPVS: ftp: loaded support on port[0] = 21 [ 34.233785][ T8400] team0: Port device team_slave_1 added [ 34.250076][ T8402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.266619][ T8396] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.277145][ T8396] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.298736][ T8404] chnl_net:caif_netlink_parms(): no params data found [ 34.325204][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.332428][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.359566][ T8400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.376802][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.383874][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.410454][ T8400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.422676][ T8402] team0: Port device team_slave_0 added [ 34.439493][ T8396] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.446619][ T8396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.453935][ T8396] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.461012][ T8396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.491197][ T8400] device hsr_slave_0 entered promiscuous mode [ 34.497898][ T8400] device hsr_slave_1 entered promiscuous mode [ 34.504699][ T8400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.512339][ T8400] Cannot create hsr debugfs directory [ 34.518377][ T8402] team0: Port device team_slave_1 added [ 34.530736][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.538832][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.578178][ T8402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.589021][ T8402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.616083][ T8402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.628075][ T8402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.635128][ T8402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.661462][ T8402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.708402][ T8404] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.715537][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.723647][ T8404] device bridge_slave_0 entered promiscuous mode [ 34.741726][ T8408] chnl_net:caif_netlink_parms(): no params data found [ 34.757227][ T8404] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.764892][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.772613][ T8404] device bridge_slave_1 entered promiscuous mode [ 34.786592][ T8402] device hsr_slave_0 entered promiscuous mode [ 34.793197][ T8402] device hsr_slave_1 entered promiscuous mode [ 34.800639][ T8402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.808205][ T8402] Cannot create hsr debugfs directory [ 34.835185][ T8404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.847225][ T8404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.881021][ T8406] chnl_net:caif_netlink_parms(): no params data found [ 34.907902][ T8404] team0: Port device team_slave_0 added [ 34.916641][ T8404] team0: Port device team_slave_1 added [ 34.924535][ T8408] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.932191][ T8408] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.940328][ T8408] device bridge_slave_0 entered promiscuous mode [ 34.949021][ T8408] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.956944][ T8408] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.964543][ T8408] device bridge_slave_1 entered promiscuous mode [ 34.999750][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.006712][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.033241][ T8404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.045952][ T8404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.053131][ T8404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.079269][ T8404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.095041][ T8408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.107246][ T8400] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.126197][ T8408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.147637][ T8406] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.155675][ T8406] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.163923][ T8406] device bridge_slave_0 entered promiscuous mode [ 35.171271][ T8400] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.181112][ T8404] device hsr_slave_0 entered promiscuous mode [ 35.189861][ T8404] device hsr_slave_1 entered promiscuous mode [ 35.196452][ T8404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.204262][ T8404] Cannot create hsr debugfs directory [ 35.214732][ T8406] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.222088][ T8406] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.230113][ T8406] device bridge_slave_1 entered promiscuous mode [ 35.236789][ T8400] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.245533][ T8400] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.260696][ T8408] team0: Port device team_slave_0 added [ 35.276993][ T8396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.289259][ T8402] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.303847][ T8402] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.316030][ T8408] team0: Port device team_slave_1 added [ 35.333835][ T8402] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.343571][ T8406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.356605][ T8406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.370208][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.377351][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.404071][ T8408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.404315][ T2050] Bluetooth: hci0: command 0x0409 tx timeout [ 35.421089][ T8402] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.442983][ T8396] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.454412][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.462062][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.474373][ T8406] team0: Port device team_slave_0 added [ 35.480454][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.487406][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.513803][ T8408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.536857][ T8408] device hsr_slave_0 entered promiscuous mode [ 35.544210][ T8408] device hsr_slave_1 entered promiscuous mode [ 35.551451][ T8408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.560247][ T55] Bluetooth: hci1: command 0x0409 tx timeout [ 35.563446][ T8408] Cannot create hsr debugfs directory [ 35.583772][ T8406] team0: Port device team_slave_1 added [ 35.593394][ T8404] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.606255][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.615137][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.624907][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.632109][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.660710][ T8404] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.669152][ T8404] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.678282][ T8404] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.692637][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.702463][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.711329][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.718694][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.726730][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.736083][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.744707][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 35.776579][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.788890][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.797874][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.806809][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.815356][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.823871][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.837503][ T8396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.848863][ T8396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.869818][ T8406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.876973][ T8406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.880855][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 35.905361][ T8406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.923387][ T8406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.930647][ T8406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.957158][ T8406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.969463][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.977567][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.986857][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.995617][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.003446][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.020051][ T8400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.028619][ T8396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.039216][ T5] Bluetooth: hci4: command 0x0409 tx timeout [ 36.042680][ T8402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.081226][ T8406] device hsr_slave_0 entered promiscuous mode [ 36.089001][ T8406] device hsr_slave_1 entered promiscuous mode [ 36.095874][ T8406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.103686][ T8406] Cannot create hsr debugfs directory [ 36.119155][ T8408] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.130951][ T8400] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.140816][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.151726][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.171460][ T8408] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.180715][ T8408] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 36.194529][ T8402] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.201492][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 36.207741][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.216477][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.225355][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.233856][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.242444][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.249498][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.257846][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.265668][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.273863][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.282804][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.291225][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.298448][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.306801][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.315830][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.325566][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.332737][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.340529][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.349079][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.357373][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.364952][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.385765][ T8404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.393870][ T8408] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 36.415772][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.423831][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.432085][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.441600][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.450443][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.458860][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.471647][ T8396] device veth0_vlan entered promiscuous mode [ 36.485890][ T8404] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.510558][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.521804][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.530842][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.540551][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.548837][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.557157][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.566067][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.574610][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.584473][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.592938][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.602213][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.611032][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.619559][ T3845] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.626651][ T3845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.634457][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.642963][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.651790][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.659945][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.667584][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.675954][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 36.684075][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.706233][ T8400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.723224][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.731959][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 36.741847][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.750572][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.758728][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.765941][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.773929][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.782132][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.790541][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 36.799761][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.808489][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.820028][ T8402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.831820][ T8402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 36.843161][ T8406] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.857313][ T8406] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.868570][ T8406] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.879938][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.888137][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.898234][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 36.909450][ T8396] device veth1_vlan entered promiscuous mode [ 36.922965][ T8406] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.951771][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 36.959359][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 36.966887][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 36.975711][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 36.985169][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 36.993887][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.003332][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.016781][ T8400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.028854][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.037184][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.046087][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.054714][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.065232][ T8408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.085123][ T8404] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.092984][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.102609][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.124526][ T8402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.133833][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.143132][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.151548][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.161611][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.171547][ T8408] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.181170][ T8396] device veth0_macvtap entered promiscuous mode [ 37.200568][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.208563][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.217867][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.227004][ T2050] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.234051][ T2050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.242862][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.255102][ T8396] device veth1_macvtap entered promiscuous mode [ 37.271530][ T8396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.281718][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.289931][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.298434][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.309434][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.318774][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.327766][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 37.337390][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.347170][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.365451][ T8404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.376456][ T8396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.390441][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.397809][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.405810][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 37.414692][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.423682][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.432245][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.440844][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.458673][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 37.467179][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.476579][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 37.485436][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.488879][ T2050] Bluetooth: hci0: command 0x041b tx timeout [ 37.494279][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.507722][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.516140][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.524283][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.542375][ T8400] device veth0_vlan entered promiscuous mode [ 37.551696][ T8396] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.561555][ T8396] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.570654][ T8396] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.580961][ T8396] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.593879][ T8406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.603010][ T8408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.611407][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.620183][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.628329][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.637051][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.645808][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.648708][ T2050] Bluetooth: hci1: command 0x041b tx timeout [ 37.656260][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.669229][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.681316][ T8400] device veth1_vlan entered promiscuous mode [ 37.714449][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.723094][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.736733][ T8402] device veth0_vlan entered promiscuous mode [ 37.753029][ T8406] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.770290][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.780348][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.789168][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.796983][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.807814][ T8402] device veth1_vlan entered promiscuous mode [ 37.815482][ T2050] Bluetooth: hci2: command 0x041b tx timeout [ 37.829404][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.842598][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.845836][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.851837][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.859670][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.865755][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.881665][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.890575][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.900183][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.908667][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.917932][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.928035][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.936642][ T9103] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.943799][ T9103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.953279][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.961721][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.972748][ T8408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.982010][ T5] Bluetooth: hci3: command 0x041b tx timeout [ 37.993720][ T8404] device veth0_vlan entered promiscuous mode [ 38.009921][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.018024][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.027135][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.036011][ T9103] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.043121][ T9103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.058275][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.067053][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.075536][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.084216][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.093313][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.102195][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.111237][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.120026][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.133299][ T9103] Bluetooth: hci4: command 0x041b tx timeout [ 38.136789][ T8404] device veth1_vlan entered promiscuous mode [ 38.150236][ T8400] device veth0_macvtap entered promiscuous mode [ 38.165391][ T8406] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.191372][ T9731] dccp_v4_rcv: dropped packet with invalid checksum [ 38.200307][ T8406] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.208902][ T9731] dccp_v4_rcv: dropped packet with invalid checksum 09:50:21 executing program 0: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x1, 0x2, 0x0, "58a742", 0x0, "5bc788"}, "655c58d2"}}}}}, 0x0) [ 38.221464][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.230418][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.246802][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready 09:50:21 executing program 0: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x1, 0x2, 0x0, "58a742", 0x0, "5bc788"}, "655c58d2"}}}}}, 0x0) [ 38.269216][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.277589][ T9735] dccp_v4_rcv: dropped packet with invalid checksum [ 38.277846][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.285375][ T5] Bluetooth: hci5: command 0x041b tx timeout [ 38.318114][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.328712][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.336962][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.345846][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.354305][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.363733][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.372144][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.382593][ T9738] dccp_v4_rcv: dropped packet with invalid checksum [ 38.386271][ T8402] device veth0_macvtap entered promiscuous mode [ 38.410941][ T8400] device veth1_macvtap entered promiscuous mode 09:50:22 executing program 0: syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @broadcast, @val={@void}, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x21, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x1, 0x2, 0x0, "58a742", 0x0, "5bc788"}, "655c58d2"}}}}}, 0x0) [ 38.417982][ T8404] device veth0_macvtap entered promiscuous mode [ 38.434470][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.447973][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.457732][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.467590][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.477489][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.486353][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.500201][ T8402] device veth1_macvtap entered promiscuous mode [ 38.522558][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.531941][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.535664][ T9744] dccp_v4_rcv: dropped packet with invalid checksum [ 38.540822][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 09:50:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) mremap(&(0x7f0000105000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00005bc000/0x4000)=nil) [ 38.575480][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 38.586213][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.597573][ T8402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.606215][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 38.619134][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.631090][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 38.642254][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.654905][ T8400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.664691][ T8404] device veth1_macvtap entered promiscuous mode 09:50:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) mremap(&(0x7f0000105000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00005bc000/0x4000)=nil) [ 38.681706][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.691939][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.701707][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.713211][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.722598][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.736480][ T8402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 38.748371][ T8402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.766135][ T8402] batman_adv: batadv0: Interface activated: batadv_slave_1 09:50:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) mremap(&(0x7f0000105000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00005bc000/0x4000)=nil) [ 38.794862][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 38.805730][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.818294][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 38.831106][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.843429][ T8400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.864617][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 38.883416][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 09:50:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) mremap(&(0x7f0000105000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00005bc000/0x4000)=nil) [ 38.893813][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 38.905484][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.915884][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 38.929329][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.941480][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.963731][ T8406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.973369][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.983712][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.993467][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.010411][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.019619][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.034082][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.043123][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.052077][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.060909][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.068511][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.079804][ T8402] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.089633][ T8402] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.099754][ T8402] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.110633][ T8402] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.122568][ T8400] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.133250][ T8400] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.142547][ T8400] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.151643][ T8400] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.170224][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 39.181170][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.191430][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 39.201989][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.211846][ T8404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 39.222463][ T8404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.233396][ T8404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.257479][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.271236][ T4962] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.283311][ T8404] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.292142][ T8404] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.301347][ T8404] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.310628][ T8404] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.344184][ T8408] device veth0_vlan entered promiscuous mode [ 39.360451][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.369148][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.377714][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.387792][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.401836][ T8408] device veth1_vlan entered promiscuous mode [ 39.433937][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.443936][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.452561][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.461242][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.485412][ T8406] device veth0_vlan entered promiscuous mode [ 39.498499][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.507019][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.522385][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.553257][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.553385][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.567661][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.576234][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.585236][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.601918][ T8408] device veth0_macvtap entered promiscuous mode [ 39.613085][ T2050] Bluetooth: hci0: command 0x040f tx timeout [ 39.624626][ T8406] device veth1_vlan entered promiscuous mode [ 39.636363][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.646477][ T24] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.667155][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.668268][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.676086][ T24] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.690771][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.707086][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.715109][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.725847][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.733657][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 39.748146][ T2050] Bluetooth: hci1: command 0x040f tx timeout [ 39.758259][ T326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.766265][ T326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.777835][ T8408] device veth1_macvtap entered promiscuous mode [ 39.794797][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 39.806743][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.812241][ T326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.823538][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.825053][ T326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.831618][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 39.849285][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.859238][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 39.869692][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.880018][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 39.891394][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.894005][ T4962] Bluetooth: hci2: command 0x040f tx timeout [ 39.902022][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 39.917817][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.930398][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.939907][ T8406] device veth0_macvtap entered promiscuous mode [ 39.947370][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 39.958670][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.968768][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 39.979642][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.989889][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.000666][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.010899][ T8408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.021616][ T8408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.032724][ T8408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.041736][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.049926][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 40.058487][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.066764][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.074943][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.083783][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.092411][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.101003][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.110115][ T2050] Bluetooth: hci3: command 0x040f tx timeout [ 40.115775][ T8406] device veth1_macvtap entered promiscuous mode [ 40.139469][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.149243][ T9706] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 40.160339][ T8408] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.169565][ T8408] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.179289][ T8408] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.188391][ T8408] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.198216][ T9706] Bluetooth: hci4: command 0x040f tx timeout [ 40.224744][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.246696][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.260654][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 09:50:23 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0xf0ff7f, 0x0, 0x0) 09:50:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) mremap(&(0x7f0000105000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00005bc000/0x4000)=nil) [ 40.281110][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.291735][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.312540][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.331848][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.354205][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.368072][ T9706] Bluetooth: hci5: command 0x040f tx timeout [ 40.378182][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 40.390586][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.403677][ T8406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.431157][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.444703][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.467545][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.487611][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.508392][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.532419][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.555899][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.579023][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.591955][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.604613][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.616457][ T8406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 40.629734][ T8406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.641271][ T8406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.657773][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.667092][ T3845] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.690204][ T8406] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.700653][ T8406] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.717016][ T8406] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.729740][ T8406] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.795414][ T326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.811661][ T326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.845289][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.871331][ T326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.894891][ T326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.925121][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.941091][ T326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.972351][ T326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.986025][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.996568][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.005366][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 41.016375][ T2050] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 09:50:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f00000033c0)=@framed={{0x18, 0x5}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff66}, 0x48) 09:50:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab0b, 0xffffffffffffffff) 09:50:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) mremap(&(0x7f0000105000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00005bc000/0x4000)=nil) 09:50:25 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0xf0ff7f, 0x0, 0x0) 09:50:25 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x5c, 0x2, {{0x1, [], 0x0, [0x10]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) 09:50:25 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014000a0081"], 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 09:50:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab0b, 0xffffffffffffffff) 09:50:25 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x5c, 0x2, {{0x1, [], 0x0, [0x10]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) 09:50:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) mremap(&(0x7f0000105000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00005bc000/0x4000)=nil) 09:50:25 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014000a0081"], 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 09:50:25 executing program 1: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0xf0ff7f, 0x0, 0x0) 09:50:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f00000033c0)=@framed={{0x18, 0x5}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff66}, 0x48) 09:50:25 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014000a0081"], 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 09:50:25 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x5c, 0x2, {{0x1, [], 0x0, [0x10]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) 09:50:25 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab0b, 0xffffffffffffffff) 09:50:25 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f00000033c0)=@framed={{0x18, 0x5}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x1, 0xfb, &(0x7f0000000200)=""/251, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff66}, 0x48) 09:50:25 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014000a0081"], 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 09:50:25 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014000a0081"], 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 09:50:25 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x5c, 0x2, {{0x1, [], 0x0, [0x10]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) 09:50:25 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x5c, 0x2, {{0x1, [], 0x0, [0x10]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) 09:50:25 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014000a0081"], 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 09:50:25 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x5c, 0x2, {{0x1, [], 0x0, [0x10]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) [ 41.718539][ T9706] Bluetooth: hci0: command 0x0419 tx timeout 09:50:25 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014000a0081"], 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 09:50:25 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0xf0ff7f, 0x0, 0x0) 09:50:25 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x5c, 0x2, {{0x1, [], 0x0, [0x10]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) 09:50:25 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x5c, 0x2, {{0x1, [], 0x0, [0x10]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) [ 41.808153][ T2050] Bluetooth: hci1: command 0x0419 tx timeout 09:50:25 executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014000a0081"], 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 09:50:25 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0xf0ff7f, 0x0, 0x0) 09:50:25 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x5c, 0x2, {{0x1, [], 0x0, [0x10]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) 09:50:25 executing program 1: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010001fff000005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e0000001800028014000a0081"], 0x48}}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 09:50:25 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x5c, 0x2, {{0x1, [], 0x0, [0x10]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) 09:50:25 executing program 5: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x5c, 0x2, {{0x1, [], 0x0, [0x10]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) 09:50:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab0b, 0xffffffffffffffff) [ 41.957848][ T9706] Bluetooth: hci2: command 0x0419 tx timeout 09:50:25 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0xf0ff7f, 0x0, 0x0) 09:50:25 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb, 0x1, 'mqprio\x00'}, {0x5c, 0x2, {{0x1, [], 0x0, [0x10]}, [@TCA_MQPRIO_MIN_RATE64={0x4}]}}}]}, 0x8c}}, 0x0) 09:50:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) mremap(&(0x7f0000105000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00005bc000/0x4000)=nil) 09:50:25 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) 09:50:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab0b, 0xffffffffffffffff) 09:50:25 executing program 5: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x40000}, 0xffffffffffffffff, 0x7fffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@phonet={0x23, 0x1, 0x9c, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=[{0x68, 0x10e, 0x101, "d8ea1e44b83451b39c145de1fa18c279b6420e1049540c6d3fb3a79f5c9e99ff3664ba59c7f392ed247a90e46ccd3d53e71cb7c01b9f4fe3253f5c0582e21d665e7a09df57e8f686cd609feda5540208e3"}, {0x78, 0x0, 0x52, "9f2ae5574e3d29eca564f95e6090459013b67e2adc5214ebf20c9e063ce33b3679007d396c905f48669d4ea71417c5f1ab922a83387b70157ce78092d3aca8d283db2402cf13d7500481e2c10106e3f0a013fd01eff4d41ab6c1f9fa6ead5e8490910353bfed73"}, {0x10}], 0xf0}, 0x4800) creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000380)='fuse\x00', 0x3000, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000500)='./file1\x00', 0x0, 0x110) creat(&(0x7f0000000000)='./file1\x00', 0x60) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7523a2ee58", @ANYRESDEC=0xee00, @ANYBLOB=',']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 09:50:25 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000000100000c000000ce0000000f000000010000000000000000000000000000000020000020000000d7f4485fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x2008001, &(0x7f0000000880)=ANY=[]) 09:50:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) mremap(&(0x7f0000105000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00005bc000/0x4000)=nil) [ 42.119914][ T9706] Bluetooth: hci3: command 0x0419 tx timeout 09:50:25 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000480)={0x1, 0x0, 0x0, '('}) 09:50:25 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab0b, 0xffffffffffffffff) [ 42.195427][ T9979] overlayfs: overlapping lowerdir path [ 42.231517][ C1] hrtimer: interrupt took 49966 ns 09:50:25 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) mremap(&(0x7f0000105000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00005bc000/0x4000)=nil) [ 42.252760][ T9986] loop3: detected capacity change from 4 to 0 [ 42.287907][ T9706] Bluetooth: hci4: command 0x0419 tx timeout 09:50:25 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000480)={0x1, 0x0, 0x0, '('}) [ 42.303720][ T9992] tmpfs: Unknown parameter 'u#¢îX00000000000000060928' [ 42.323321][ T9986] loop3: detected capacity change from 4 to 0 [ 42.348797][ T9992] overlayfs: 'file0' not a directory 09:50:26 executing program 5: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x40000}, 0xffffffffffffffff, 0x7fffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@phonet={0x23, 0x1, 0x9c, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=[{0x68, 0x10e, 0x101, "d8ea1e44b83451b39c145de1fa18c279b6420e1049540c6d3fb3a79f5c9e99ff3664ba59c7f392ed247a90e46ccd3d53e71cb7c01b9f4fe3253f5c0582e21d665e7a09df57e8f686cd609feda5540208e3"}, {0x78, 0x0, 0x52, "9f2ae5574e3d29eca564f95e6090459013b67e2adc5214ebf20c9e063ce33b3679007d396c905f48669d4ea71417c5f1ab922a83387b70157ce78092d3aca8d283db2402cf13d7500481e2c10106e3f0a013fd01eff4d41ab6c1f9fa6ead5e8490910353bfed73"}, {0x10}], 0xf0}, 0x4800) creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000380)='fuse\x00', 0x3000, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000500)='./file1\x00', 0x0, 0x110) creat(&(0x7f0000000000)='./file1\x00', 0x60) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7523a2ee58", @ANYRESDEC=0xee00, @ANYBLOB=',']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') [ 42.372831][ T9992] overlayfs: filesystem on './bus' not supported as upperdir [ 42.378089][T10001] tmpfs: Unknown parameter 'u#¢îX00000000000000060928' 09:50:26 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x40000}, 0xffffffffffffffff, 0x7fffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@phonet={0x23, 0x1, 0x9c, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=[{0x68, 0x10e, 0x101, "d8ea1e44b83451b39c145de1fa18c279b6420e1049540c6d3fb3a79f5c9e99ff3664ba59c7f392ed247a90e46ccd3d53e71cb7c01b9f4fe3253f5c0582e21d665e7a09df57e8f686cd609feda5540208e3"}, {0x78, 0x0, 0x52, "9f2ae5574e3d29eca564f95e6090459013b67e2adc5214ebf20c9e063ce33b3679007d396c905f48669d4ea71417c5f1ab922a83387b70157ce78092d3aca8d283db2402cf13d7500481e2c10106e3f0a013fd01eff4d41ab6c1f9fa6ead5e8490910353bfed73"}, {0x10}], 0xf0}, 0x4800) creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000380)='fuse\x00', 0x3000, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000500)='./file1\x00', 0x0, 0x110) creat(&(0x7f0000000000)='./file1\x00', 0x60) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7523a2ee58", @ANYRESDEC=0xee00, @ANYBLOB=',']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 09:50:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000000100000c000000ce0000000f000000010000000000000000000000000000000020000020000000d7f4485fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x2008001, &(0x7f0000000880)=ANY=[]) [ 42.437756][ T9706] Bluetooth: hci5: command 0x0419 tx timeout 09:50:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) 09:50:26 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x40000}, 0xffffffffffffffff, 0x7fffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@phonet={0x23, 0x1, 0x9c, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=[{0x68, 0x10e, 0x101, "d8ea1e44b83451b39c145de1fa18c279b6420e1049540c6d3fb3a79f5c9e99ff3664ba59c7f392ed247a90e46ccd3d53e71cb7c01b9f4fe3253f5c0582e21d665e7a09df57e8f686cd609feda5540208e3"}, {0x78, 0x0, 0x52, "9f2ae5574e3d29eca564f95e6090459013b67e2adc5214ebf20c9e063ce33b3679007d396c905f48669d4ea71417c5f1ab922a83387b70157ce78092d3aca8d283db2402cf13d7500481e2c10106e3f0a013fd01eff4d41ab6c1f9fa6ead5e8490910353bfed73"}, {0x10}], 0xf0}, 0x4800) creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000380)='fuse\x00', 0x3000, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000500)='./file1\x00', 0x0, 0x110) creat(&(0x7f0000000000)='./file1\x00', 0x60) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7523a2ee58", @ANYRESDEC=0xee00, @ANYBLOB=',']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 09:50:26 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000480)={0x1, 0x0, 0x0, '('}) [ 42.543758][T10007] overlayfs: overlapping lowerdir path [ 42.574883][T10011] overlayfs: overlapping lowerdir path [ 42.585478][T10013] loop3: detected capacity change from 4 to 0 09:50:26 executing program 2: set_mempolicy(0x1, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000480)={0x1, 0x0, 0x0, '('}) [ 42.641787][T10021] tmpfs: Unknown parameter 'u#¢îX00000000000000060928' [ 42.662745][T10022] overlayfs: overlapping lowerdir path [ 42.673477][T10024] tmpfs: Unknown parameter 'u#¢îX00000000000000060928' 09:50:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000000100000c000000ce0000000f000000010000000000000000000000000000000020000020000000d7f4485fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x2008001, &(0x7f0000000880)=ANY=[]) 09:50:26 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x40000}, 0xffffffffffffffff, 0x7fffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@phonet={0x23, 0x1, 0x9c, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=[{0x68, 0x10e, 0x101, "d8ea1e44b83451b39c145de1fa18c279b6420e1049540c6d3fb3a79f5c9e99ff3664ba59c7f392ed247a90e46ccd3d53e71cb7c01b9f4fe3253f5c0582e21d665e7a09df57e8f686cd609feda5540208e3"}, {0x78, 0x0, 0x52, "9f2ae5574e3d29eca564f95e6090459013b67e2adc5214ebf20c9e063ce33b3679007d396c905f48669d4ea71417c5f1ab922a83387b70157ce78092d3aca8d283db2402cf13d7500481e2c10106e3f0a013fd01eff4d41ab6c1f9fa6ead5e8490910353bfed73"}, {0x10}], 0xf0}, 0x4800) creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000380)='fuse\x00', 0x3000, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000500)='./file1\x00', 0x0, 0x110) creat(&(0x7f0000000000)='./file1\x00', 0x60) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7523a2ee58", @ANYRESDEC=0xee00, @ANYBLOB=',']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 09:50:26 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x40000}, 0xffffffffffffffff, 0x7fffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@phonet={0x23, 0x1, 0x9c, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=[{0x68, 0x10e, 0x101, "d8ea1e44b83451b39c145de1fa18c279b6420e1049540c6d3fb3a79f5c9e99ff3664ba59c7f392ed247a90e46ccd3d53e71cb7c01b9f4fe3253f5c0582e21d665e7a09df57e8f686cd609feda5540208e3"}, {0x78, 0x0, 0x52, "9f2ae5574e3d29eca564f95e6090459013b67e2adc5214ebf20c9e063ce33b3679007d396c905f48669d4ea71417c5f1ab922a83387b70157ce78092d3aca8d283db2402cf13d7500481e2c10106e3f0a013fd01eff4d41ab6c1f9fa6ead5e8490910353bfed73"}, {0x10}], 0xf0}, 0x4800) creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000380)='fuse\x00', 0x3000, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000500)='./file1\x00', 0x0, 0x110) creat(&(0x7f0000000000)='./file1\x00', 0x60) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7523a2ee58", @ANYRESDEC=0xee00, @ANYBLOB=',']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 09:50:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) [ 42.768114][T10022] tmpfs: Unknown parameter 'u#¢îX00000000000000060928' 09:50:26 executing program 5: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x40000}, 0xffffffffffffffff, 0x7fffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@phonet={0x23, 0x1, 0x9c, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=[{0x68, 0x10e, 0x101, "d8ea1e44b83451b39c145de1fa18c279b6420e1049540c6d3fb3a79f5c9e99ff3664ba59c7f392ed247a90e46ccd3d53e71cb7c01b9f4fe3253f5c0582e21d665e7a09df57e8f686cd609feda5540208e3"}, {0x78, 0x0, 0x52, "9f2ae5574e3d29eca564f95e6090459013b67e2adc5214ebf20c9e063ce33b3679007d396c905f48669d4ea71417c5f1ab922a83387b70157ce78092d3aca8d283db2402cf13d7500481e2c10106e3f0a013fd01eff4d41ab6c1f9fa6ead5e8490910353bfed73"}, {0x10}], 0xf0}, 0x4800) creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000380)='fuse\x00', 0x3000, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000500)='./file1\x00', 0x0, 0x110) creat(&(0x7f0000000000)='./file1\x00', 0x60) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7523a2ee58", @ANYRESDEC=0xee00, @ANYBLOB=',']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') [ 42.842938][T10030] loop3: detected capacity change from 4 to 0 09:50:26 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) [ 42.910445][T10035] overlayfs: overlapping lowerdir path 09:50:26 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f00000001c0)="20000000000100000c000000ce0000000f000000010000000000000000000000000000000020000020000000d7f4485fd7f4655f0100ffff53ef", 0x3a, 0x400}], 0x2008001, &(0x7f0000000880)=ANY=[]) [ 43.002917][T10043] overlayfs: overlapping lowerdir path [ 43.019590][T10035] tmpfs: Unknown parameter 'u#¢îX00000000000000060928' [ 43.031519][T10042] overlayfs: overlapping lowerdir path [ 43.065525][T10043] tmpfs: Unknown parameter 'u#¢îX00000000000000060928' [ 43.094468][T10047] loop3: detected capacity change from 4 to 0 09:50:26 executing program 1: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x40000}, 0xffffffffffffffff, 0x7fffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@phonet={0x23, 0x1, 0x9c, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=[{0x68, 0x10e, 0x101, "d8ea1e44b83451b39c145de1fa18c279b6420e1049540c6d3fb3a79f5c9e99ff3664ba59c7f392ed247a90e46ccd3d53e71cb7c01b9f4fe3253f5c0582e21d665e7a09df57e8f686cd609feda5540208e3"}, {0x78, 0x0, 0x52, "9f2ae5574e3d29eca564f95e6090459013b67e2adc5214ebf20c9e063ce33b3679007d396c905f48669d4ea71417c5f1ab922a83387b70157ce78092d3aca8d283db2402cf13d7500481e2c10106e3f0a013fd01eff4d41ab6c1f9fa6ead5e8490910353bfed73"}, {0x10}], 0xf0}, 0x4800) creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000380)='fuse\x00', 0x3000, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000500)='./file1\x00', 0x0, 0x110) creat(&(0x7f0000000000)='./file1\x00', 0x60) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7523a2ee58", @ANYRESDEC=0xee00, @ANYBLOB=',']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') [ 43.113769][T10042] tmpfs: Unknown parameter 'u#¢îX00000000000000060928' 09:50:26 executing program 5: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x40000}, 0xffffffffffffffff, 0x7fffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@phonet={0x23, 0x1, 0x9c, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=[{0x68, 0x10e, 0x101, "d8ea1e44b83451b39c145de1fa18c279b6420e1049540c6d3fb3a79f5c9e99ff3664ba59c7f392ed247a90e46ccd3d53e71cb7c01b9f4fe3253f5c0582e21d665e7a09df57e8f686cd609feda5540208e3"}, {0x78, 0x0, 0x52, "9f2ae5574e3d29eca564f95e6090459013b67e2adc5214ebf20c9e063ce33b3679007d396c905f48669d4ea71417c5f1ab922a83387b70157ce78092d3aca8d283db2402cf13d7500481e2c10106e3f0a013fd01eff4d41ab6c1f9fa6ead5e8490910353bfed73"}, {0x10}], 0xf0}, 0x4800) creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000380)='fuse\x00', 0x3000, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000500)='./file1\x00', 0x0, 0x110) creat(&(0x7f0000000000)='./file1\x00', 0x60) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7523a2ee58", @ANYRESDEC=0xee00, @ANYBLOB=',']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 09:50:26 executing program 0: perf_event_open(&(0x7f0000000580)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000600)={0x0, 0x70, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x40000}, 0xffffffffffffffff, 0x7fffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0']) mkdir(&(0x7f00000002c0)='./file1\x00', 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000480)=@phonet={0x23, 0x1, 0x9c, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000b80)=[{0x68, 0x10e, 0x101, "d8ea1e44b83451b39c145de1fa18c279b6420e1049540c6d3fb3a79f5c9e99ff3664ba59c7f392ed247a90e46ccd3d53e71cb7c01b9f4fe3253f5c0582e21d665e7a09df57e8f686cd609feda5540208e3"}, {0x78, 0x0, 0x52, "9f2ae5574e3d29eca564f95e6090459013b67e2adc5214ebf20c9e063ce33b3679007d396c905f48669d4ea71417c5f1ab922a83387b70157ce78092d3aca8d283db2402cf13d7500481e2c10106e3f0a013fd01eff4d41ab6c1f9fa6ead5e8490910353bfed73"}, {0x10}], 0xf0}, 0x4800) creat(&(0x7f0000000340)='./bus/file0\x00', 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000380)='fuse\x00', 0x3000, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB]) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f0000000500)='./file1\x00', 0x0, 0x110) creat(&(0x7f0000000000)='./file1\x00', 0x60) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a1, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0']) syz_mount_image$tmpfs(&(0x7f0000000180)='tmpfs\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="7523a2ee58", @ANYRESDEC=0xee00, @ANYBLOB=',']) chdir(&(0x7f00000001c0)='./bus\x00') rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000440)='./file0\x00') 09:50:26 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) 09:50:26 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) [ 43.402864][T10058] overlayfs: overlapping lowerdir path [ 43.433060][T10062] overlayfs: overlapping lowerdir path 09:50:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) [ 43.452806][T10064] overlayfs: overlapping lowerdir path [ 43.495261][T10062] tmpfs: Unknown parameter 'u#¢îX00000000000000060928' [ 43.511694][T10058] tmpfs: Unknown parameter 'u#¢îX00000000000000060928' 09:50:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) [ 43.562208][T10064] tmpfs: Unknown parameter 'u#¢îX00000000000000060928' 09:50:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) 09:50:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) 09:50:27 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) 09:50:27 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) 09:50:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) 09:50:27 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) 09:50:27 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) 09:50:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) 09:50:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) 09:50:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) 09:50:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) 09:50:28 executing program 5: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) 09:50:28 executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) 09:50:28 executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) 09:50:28 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) 09:50:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) [ 45.392138][T10125] ================================================================== [ 45.400265][T10125] BUG: KCSAN: data-race in __ext4_handle_dirty_metadata / jbd2_journal_commit_transaction [ 45.410466][T10125] [ 45.412794][T10125] write to 0xffff88810383f000 of 8 bytes by task 4841 on cpu 1: [ 45.420596][T10125] jbd2_journal_commit_transaction+0x238/0x32b0 [ 45.426914][T10125] kjournald2+0x263/0x480 [ 45.431521][T10125] kthread+0x20b/0x230 [ 45.435602][T10125] ret_from_fork+0x1f/0x30 [ 45.440031][T10125] 09:50:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x101}, 0x0) r0 = getpid() mkdir(&(0x7f0000000240)='./file0\x00', 0x0) chdir(&(0x7f0000000040)='./bus\x00') sched_setattr(r0, &(0x7f0000000040)={0x38, 0x2, 0x0, 0x0, 0x7}, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x1cb242, 0x0) ftruncate(r1, 0x200009) sendfile(r1, r1, 0x0, 0x80001d00c0d3) r2 = open(&(0x7f0000000100)='./file1\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x80001d00c0d3) [ 45.442357][T10125] read to 0xffff88810383f000 of 8 bytes by task 10125 on cpu 0: [ 45.450106][T10125] __ext4_handle_dirty_metadata+0x118/0x5a0 [ 45.456291][T10125] ext4_mb_mark_diskspace_used+0x8e9/0xc50 [ 45.462100][T10125] ext4_mb_new_blocks+0xa56/0x1170 [ 45.470397][T10125] ext4_ext_map_blocks+0x146f/0x1fd0 [ 45.476123][T10125] ext4_map_blocks+0x726/0xff0 [ 45.481109][T10125] mpage_map_one_extent+0x10d/0x3a0 [ 45.486342][T10125] ext4_writepages+0xa51/0x1e70 [ 45.491209][T10125] do_writepages+0x7b/0x150 [ 45.496099][T10125] __filemap_fdatawrite_range+0x19d/0x1d0 [ 45.501834][T10125] file_write_and_wait_range+0x9f/0x120 [ 45.507644][T10125] ext4_sync_file+0x105/0x6e0 [ 45.512432][T10125] vfs_fsync_range+0x107/0x120 [ 45.521735][T10125] ext4_buffered_write_iter+0x38f/0x3e0 [ 45.527300][T10125] ext4_file_write_iter+0x47a/0x1060 [ 45.532621][T10125] do_iter_readv_writev+0x2cb/0x360 [ 45.537937][T10125] do_iter_write+0x112/0x4c0 [ 45.542532][T10125] vfs_iter_write+0x4c/0x70 [ 45.547037][T10125] iter_file_splice_write+0x41a/0x770 [ 45.552427][T10125] direct_splice_actor+0x80/0xa0 [ 45.557475][T10125] splice_direct_to_actor+0x345/0x650 [ 45.563042][T10125] do_splice_direct+0xf5/0x170 [ 45.567815][T10125] do_sendfile+0x5e0/0xcf0 [ 45.572248][T10125] __x64_sys_sendfile64+0xf2/0x130 [ 45.577356][T10125] do_syscall_64+0x39/0x80 [ 45.581794][T10125] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 45.587692][T10125] [ 45.590355][T10125] Reported by Kernel Concurrency Sanitizer on: [ 45.596838][T10125] CPU: 0 PID: 10125 Comm: syz-executor.1 Not tainted 5.11.0-syzkaller #0 [ 45.605299][T10125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.615480][T10125] ================================================================== [ 45.623876][T10125] Kernel panic - not syncing: panic_on_warn set ... [ 45.630436][T10125] CPU: 0 PID: 10125 Comm: syz-executor.1 Not tainted 5.11.0-syzkaller #0 [ 45.638914][T10125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 45.649161][T10125] Call Trace: [ 45.652428][T10125] dump_stack+0x116/0x15d [ 45.656971][T10125] panic+0x1e7/0x5fa [ 45.660892][T10125] ? vprintk_emit+0x2e2/0x360 [ 45.665590][T10125] kcsan_report+0x67b/0x680 [ 45.670268][T10125] ? kcsan_setup_watchpoint+0x472/0x4d0 [ 45.676318][T10125] ? __ext4_handle_dirty_metadata+0x118/0x5a0 [ 45.682411][T10125] ? ext4_mb_mark_diskspace_used+0x8e9/0xc50 [ 45.688447][T10125] ? ext4_mb_new_blocks+0xa56/0x1170 [ 45.693839][T10125] ? ext4_ext_map_blocks+0x146f/0x1fd0 [ 45.699510][T10125] ? ext4_map_blocks+0x726/0xff0 [ 45.704431][T10125] ? mpage_map_one_extent+0x10d/0x3a0 [ 45.710206][T10125] ? ext4_writepages+0xa51/0x1e70 [ 45.715461][T10125] ? do_writepages+0x7b/0x150 [ 45.720167][T10125] ? __filemap_fdatawrite_range+0x19d/0x1d0 [ 45.726075][T10125] ? file_write_and_wait_range+0x9f/0x120 [ 45.733008][T10125] ? ext4_sync_file+0x105/0x6e0 [ 45.737850][T10125] ? vfs_fsync_range+0x107/0x120 [ 45.743008][T10125] ? ext4_buffered_write_iter+0x38f/0x3e0 [ 45.748715][T10125] ? ext4_file_write_iter+0x47a/0x1060 [ 45.754269][T10125] ? do_iter_readv_writev+0x2cb/0x360 [ 45.759624][T10125] ? do_iter_write+0x112/0x4c0 [ 45.764427][T10125] ? vfs_iter_write+0x4c/0x70 [ 45.769131][T10125] ? iter_file_splice_write+0x41a/0x770 [ 45.774681][T10125] ? direct_splice_actor+0x80/0xa0 [ 45.779776][T10125] ? splice_direct_to_actor+0x345/0x650 [ 45.785410][T10125] ? do_splice_direct+0xf5/0x170 [ 45.790357][T10125] ? do_sendfile+0x5e0/0xcf0 [ 45.795021][T10125] ? __x64_sys_sendfile64+0xf2/0x130 [ 45.800290][T10125] ? do_syscall_64+0x39/0x80 [ 45.804881][T10125] ? entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 45.810968][T10125] ? __jbd2_journal_temp_unlink_buffer+0x1d0/0x290 [ 45.817649][T10125] kcsan_setup_watchpoint+0x472/0x4d0 [ 45.823173][T10125] __ext4_handle_dirty_metadata+0x118/0x5a0 [ 45.829432][T10125] ? __rcu_read_unlock+0x5c/0x250 [ 45.834596][T10125] ext4_mb_mark_diskspace_used+0x8e9/0xc50 [ 45.840403][T10125] ext4_mb_new_blocks+0xa56/0x1170 [ 45.845521][T10125] ext4_ext_map_blocks+0x146f/0x1fd0 [ 45.850814][T10125] ? ext4_es_lookup_extent+0x221/0x500 [ 45.856259][T10125] ext4_map_blocks+0x726/0xff0 [ 45.861029][T10125] ? ext4_alloc_io_end_vec+0x2e/0xd0 [ 45.866302][T10125] mpage_map_one_extent+0x10d/0x3a0 [ 45.871527][T10125] ext4_writepages+0xa51/0x1e70 [ 45.876582][T10125] ? jbd2_journal_stop+0x5cb/0x6d0 [ 45.882203][T10125] ? jbd2_journal_stop+0x5cb/0x6d0 [ 45.887313][T10125] ? ext4_readpage+0x180/0x180 [ 45.892111][T10125] do_writepages+0x7b/0x150 [ 45.896728][T10125] ? _raw_spin_unlock+0x22/0x40 [ 45.901879][T10125] __filemap_fdatawrite_range+0x19d/0x1d0 [ 45.907858][T10125] file_write_and_wait_range+0x9f/0x120 [ 45.913528][T10125] ext4_sync_file+0x105/0x6e0 [ 45.918436][T10125] ? tsan.module_ctor+0x10/0x10 [ 45.923380][T10125] vfs_fsync_range+0x107/0x120 [ 45.928138][T10125] ext4_buffered_write_iter+0x38f/0x3e0 [ 45.933683][T10125] ext4_file_write_iter+0x47a/0x1060 [ 45.939002][T10125] do_iter_readv_writev+0x2cb/0x360 [ 45.944210][T10125] do_iter_write+0x112/0x4c0 [ 45.948805][T10125] ? kmalloc_array+0x2d/0x40 [ 45.953408][T10125] vfs_iter_write+0x4c/0x70 [ 45.957893][T10125] iter_file_splice_write+0x41a/0x770 [ 45.963267][T10125] ? splice_from_pipe+0xc0/0xc0 [ 45.968168][T10125] direct_splice_actor+0x80/0xa0 [ 45.973123][T10125] splice_direct_to_actor+0x345/0x650 [ 45.978514][T10125] ? do_splice_direct+0x170/0x170 [ 45.983560][T10125] do_splice_direct+0xf5/0x170 [ 45.988344][T10125] do_sendfile+0x5e0/0xcf0 [ 45.992786][T10125] __x64_sys_sendfile64+0xf2/0x130 [ 45.997904][T10125] do_syscall_64+0x39/0x80 [ 46.002338][T10125] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 46.008260][T10125] RIP: 0033:0x466019 [ 46.012154][T10125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 46.031864][T10125] RSP: 002b:00007f92e28f9188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 46.040284][T10125] RAX: ffffffffffffffda RBX: 000000000056c008 RCX: 0000000000466019 [ 46.048579][T10125] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 46.056642][T10125] RBP: 00000000004bd067 R08: 0000000000000000 R09: 0000000000000000 [ 46.064685][T10125] R10: 000080001d00c0d3 R11: 0000000000000246 R12: 000000000056c008 [ 46.072641][T10125] R13: 00007ffcadc9452f R14: 00007f92e28f9300 R15: 0000000000022000 [ 46.081129][T10125] Kernel Offset: disabled [ 46.085470][T10125] Rebooting in 86400 seconds..