last executing test programs: 4m8.084132595s ago: executing program 1 (id=791): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000800)={[{@jqfmt_vfsv1}, {@nouid32}, {@jqfmt_vfsv0}, {@norecovery}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x546, &(0x7f0000000180)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbfs(0x0, 0x12, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) chdir(&(0x7f0000000700)='./file2\x00') 4m2.78999654s ago: executing program 1 (id=811): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x506a, 0x47019}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m2.256013514s ago: executing program 1 (id=814): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x4048, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0xfffffffffffffffd, 0x2) 4m0.977515622s ago: executing program 1 (id=821): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) syz_mount_image$iso9660(&(0x7f00000004c0), &(0x7f0000000440)='./file1\x00', 0x1004088, &(0x7f0000000ec0)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYRESHEX, @ANYRES16, @ANYBLOB="4dad321c5bb445e7666c772d50ccdcd979f2e2031660c7d62b07ec2915334ae578d7ee3056e9b90e84ec7d3f1e29256c6875d3cd420e435379656ba3063ba1ac62b2abb242c133a68eb664ee4a624c6993862e52a79d52a74f84c637bf476fc37e2a24aae6afe5b9b9021fa4b011703c9a46428afd68256b2c6bacb3288a02496b85146cbcd20569b2de0c66d336fbfc8fc8c64ad14390e99fcaa7cf59211ce4078bd5bee01d52f60e8a653d1ddb4da7a4d045b9a5f3f18f0558b96908dca40b826763655507628c6b1a7f9c4ce31f4b4b0ec9a4676121d02a5c5edc745395ff5cecc640b0b706b3", @ANYRESDEC=0x0, @ANYRES16, @ANYRESOCT, @ANYRESDEC, @ANYRES8=0x0], 0x0, 0x7cf, &(0x7f0000003380)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0) 3m59.93851711s ago: executing program 1 (id=824): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) close(r0) 3m57.672232025s ago: executing program 1 (id=832): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3m57.577399896s ago: executing program 32 (id=832): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4ea3, 0x0, @loopback}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3m49.360339431s ago: executing program 0 (id=860): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x24000000}, 0x40004) read$FUSE(r0, &(0x7f0000002a00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r1, 0x0, 0x1, 0x0) 3m48.419756017s ago: executing program 0 (id=862): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000b00000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/netlink\x00') preadv(r3, &(0x7f0000000ac0)=[{&(0x7f0000000100)=""/191, 0xbf}, {&(0x7f00000001c0)=""/125, 0x249}, {&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000740)=""/114, 0x72}, {&(0x7f0000000840)=""/180, 0xb4}], 0x5, 0x0, 0x0) 3m48.253419928s ago: executing program 0 (id=865): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001940), 0x101202, 0x0) write$FUSE_DIRENTPLUS(r3, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3m45.10236469s ago: executing program 0 (id=869): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$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") openat(0xffffffffffffff9c, 0x0, 0xa0242, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='sched_switch\x00'}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) 3m44.803191522s ago: executing program 0 (id=872): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x24000000}, 0x40004) read$FUSE(r0, &(0x7f0000002a00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) wait4(r1, 0x0, 0x1, 0x0) 3m43.136345203s ago: executing program 0 (id=879): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x2a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mm_page_alloc\x00', r0}, 0x10) unshare(0x66000080) 3m28.003687066s ago: executing program 33 (id=879): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x2a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='mm_page_alloc\x00', r0}, 0x10) unshare(0x66000080) 2m35.734718499s ago: executing program 2 (id=42): r0 = io_uring_setup(0x2b77, &(0x7f0000000200)={0x0, 0x1635, 0x2, 0xfffffffe, 0x331}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000041c0)={0x4}, 0x2) write(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m11.509689313s ago: executing program 2 (id=42): r0 = io_uring_setup(0x2b77, &(0x7f0000000200)={0x0, 0x1635, 0x2, 0xfffffffe, 0x331}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000041c0)={0x4}, 0x2) write(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m41.112414671s ago: executing program 2 (id=42): r0 = io_uring_setup(0x2b77, &(0x7f0000000200)={0x0, 0x1635, 0x2, 0xfffffffe, 0x331}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000041c0)={0x4}, 0x2) write(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m21.897897104s ago: executing program 2 (id=42): r0 = io_uring_setup(0x2b77, &(0x7f0000000200)={0x0, 0x1635, 0x2, 0xfffffffe, 0x331}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000041c0)={0x4}, 0x2) write(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m15.934725014s ago: executing program 6 (id=1712): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_bond\x00', 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 1m13.80789924s ago: executing program 6 (id=1721): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1}, 0x0, &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$HIDIOCSUSAGES(r0, 0x501c4814, &(0x7f00000003c0)={{0x1, 0x1, 0x1f, 0xffffff80, 0x1, 0x798d}, 0x25c, [0x2, 0x3, 0x3, 0xfffffffb, 0x7, 0xf, 0x3, 0x2c, 0x33, 0x170b3f56, 0xfff, 0x0, 0x0, 0x7ff, 0x6, 0x1, 0xb, 0x6, 0x4bae, 0x90000000, 0x6, 0x10, 0x9, 0x2, 0x5, 0xf8, 0xffffff0b, 0x8, 0xe5, 0x0, 0x8, 0xad, 0x8, 0x5b0d000, 0xf, 0x2, 0xffffffff, 0x3583, 0x6, 0xffffff40, 0x81, 0x100, 0x5, 0x2, 0x1, 0x5, 0x0, 0x8000008, 0xe6, 0x6b445f7e, 0x0, 0x4, 0x7, 0x7, 0x8, 0x2, 0x9, 0x5, 0x3, 0x16, 0x5, 0x0, 0x10001, 0x9, 0x2, 0x2, 0x1a4, 0x0, 0x8, 0x5, 0x1, 0x4, 0x4, 0x5, 0x81, 0x80, 0xd, 0x55c0, 0x9, 0x1000, 0x1, 0xfffffff9, 0x2, 0x1000000, 0xb0a5, 0xfffffe01, 0x1, 0x10001, 0xfffffff7, 0x5, 0x3, 0x2, 0x2, 0x0, 0x0, 0xa0, 0x9, 0x10000, 0x37d, 0x8000, 0x40, 0x7, 0x9, 0x600000, 0xb3, 0x3, 0x29, 0x8000, 0x0, 0xcba, 0x200, 0x100, 0x7039, 0x80000001, 0x3, 0x5, 0x15e2, 0x0, 0x3, 0x2, 0x6, 0xfffffc86, 0x400, 0x9, 0x6, 0xfffffffc, 0x1, 0x610, 0x7, 0x800, 0x200, 0x4, 0xffff, 0x8000, 0x2, 0x7, 0x6, 0x0, 0x3, 0x6, 0x2, 0x9, 0xabc, 0xa24, 0x9, 0xff, 0x2b, 0x81, 0x5, 0x5, 0x8, 0x8, 0x10001, 0x3ff, 0x0, 0x6, 0x9, 0x4, 0x4, 0x101, 0x9, 0x8, 0x0, 0x3, 0x5c, 0x2, 0x80, 0x7fffffff, 0x10000, 0xffffffff, 0x10000, 0x800, 0x6, 0x6f1, 0x1000, 0x2, 0x3d6, 0x5, 0x1, 0x80000001, 0xb22b, 0x1, 0x8, 0x2, 0xfffffff8, 0x80000001, 0x8, 0x1, 0xb, 0x2b22, 0x7, 0xe0e, 0x1000, 0x26c87bbc, 0x9, 0x5, 0x5, 0x80, 0x8, 0x8108, 0x8, 0x60, 0x9, 0x0, 0x6, 0x3a, 0x8, 0xe, 0x4, 0xf7de, 0x7ff, 0x7, 0xb, 0x9, 0x59d, 0x40, 0x7, 0xb6, 0xfffffff5, 0xfff, 0xb2bc, 0x4, 0xd01, 0x2, 0x3, 0x1, 0x9, 0x9, 0xa, 0x5, 0x2, 0x80, 0x2000, 0x10, 0x0, 0x4, 0x7fffffff, 0x5, 0xa0, 0x4, 0x8, 0x2, 0x9, 0x0, 0x5, 0x5, 0x80000000, 0x3, 0x9, 0x2, 0x0, 0x4, 0xffffffb1, 0xfffffe00, 0x46e3, 0x4, 0xc, 0x9, 0x0, 0x400, 0x8, 0x4, 0x5, 0x80000000, 0x1, 0x1, 0x4, 0x74761629, 0x3, 0x0, 0x2, 0x8, 0x0, 0x37004021, 0x45, 0x3fffc, 0x90, 0x9, 0x2, 0xfe, 0x1, 0x1, 0x3, 0x7f, 0x6, 0x5d8, 0xffffffff, 0x2, 0x8001, 0xffff229c, 0x3, 0x5, 0x0, 0x2, 0x8000, 0x6, 0x8000, 0x1, 0x7, 0x5, 0x5, 0x101, 0xa1, 0xfffffff8, 0x800, 0x8, 0x200, 0xfffffff9, 0x5da, 0x80000004, 0x1ff, 0x5, 0x4, 0xff, 0x7, 0x2, 0x6, 0x7, 0x8, 0x3, 0x8001, 0x7fff, 0x1, 0x1, 0xfff, 0x10000, 0x2, 0x1000, 0x8694, 0x6, 0x1000, 0x2, 0x2, 0x101, 0x1, 0x8, 0x558, 0x1, 0x7, 0xc, 0x9, 0x5, 0x400, 0x86, 0x6, 0x1, 0x7, 0x4, 0x4, 0x0, 0xac0, 0x6, 0x2, 0x6, 0x1, 0x3ff, 0x7fffffff, 0x4, 0x963, 0x5, 0xf82, 0xa, 0x58, 0x3, 0xee0a, 0xffffff91, 0xfffffffd, 0xc648, 0x100, 0x7, 0x1, 0x0, 0x81, 0x1ff, 0xfa, 0x6, 0x2eab, 0x8, 0x4, 0x4, 0x3, 0x5, 0x4, 0x1, 0xffffffff, 0x9, 0xffffffff, 0x80, 0x3, 0x7ae3, 0x20004000, 0xb, 0x6, 0xca9, 0x2, 0xffff, 0x5f1a7e43, 0x4, 0x8, 0x1, 0x7, 0x1000, 0x6, 0xac8, 0xe, 0x7a3b, 0x1, 0x4, 0x3, 0x4f79, 0x9, 0x9e7, 0x80000000, 0xa61, 0x52ea2442, 0x5, 0x8, 0x5, 0x9, 0x1, 0x1ff, 0xe, 0x0, 0x4, 0x80000001, 0xef, 0x4, 0x7, 0x81, 0xfffffbff, 0xa, 0x5, 0x8, 0x3, 0x1, 0x9, 0x0, 0x2, 0x9, 0x0, 0x8, 0x1, 0x4, 0x7, 0xc, 0x5, 0x4, 0x4000000, 0x5, 0x95, 0x8000, 0x0, 0x9, 0x1, 0x1000, 0xe, 0x2000, 0xad, 0xdcc, 0xfff, 0x0, 0x5, 0x818f, 0x4636, 0x9, 0x200, 0xfffeffff, 0x7fff, 0x8, 0x0, 0x6, 0xe, 0x4, 0x9, 0x9, 0x6, 0x4, 0x0, 0x40, 0x94d, 0x400, 0x2, 0x0, 0x80000000, 0x5, 0x8, 0x4, 0xb, 0x6, 0x8, 0x3, 0x3, 0x5fd1, 0x7ff, 0x5, 0x10000, 0x6, 0x8, 0x6, 0x1, 0x8, 0xa, 0x57, 0xc, 0x1452, 0x6, 0x200, 0x101, 0x80000000, 0x2, 0x8000, 0x5, 0x3, 0x7, 0x7fff, 0x15c, 0xf, 0xbd05, 0x81, 0x9, 0xfff, 0x4, 0x52208888, 0xada, 0xfffffffc, 0x4, 0xff, 0x80000, 0x3, 0x9, 0x8, 0x7, 0xde11, 0x9, 0x5, 0x6, 0x4, 0x4, 0x40, 0x0, 0x1, 0x4, 0x362, 0x0, 0x6, 0x7, 0x8, 0xffff, 0x9, 0xfffffff8, 0x7fff, 0xa86, 0x1, 0x1, 0xb, 0x2, 0x5, 0x8000, 0x101, 0x5, 0x2, 0x752, 0x1, 0x9, 0xd08, 0x2, 0xbc, 0xfff, 0x9, 0x1, 0x8000, 0x2, 0x9b5, 0x5, 0x5, 0x2, 0x8, 0xd, 0x0, 0x0, 0xf82, 0x6, 0x450e, 0x5, 0x1810, 0x0, 0x10, 0x8, 0xa18b, 0x433, 0x3, 0x5, 0x1, 0x5, 0xa, 0x3, 0x7, 0x8, 0x365, 0xcfa5, 0x8, 0xffff92e0, 0xfffffffb, 0x1d1e, 0x7, 0x2a1b, 0x4, 0x6, 0xdab3, 0x1, 0xacb0, 0x4, 0xb, 0x74, 0x0, 0x7a57, 0xe72, 0x9, 0x401, 0x6, 0x1, 0xf2f, 0x1, 0x9, 0x5, 0x4, 0xd, 0x9, 0x80000000, 0x4, 0x2, 0xfffffffe, 0x5, 0x8000, 0xfff, 0x968d, 0x4, 0x10001, 0xe, 0x7, 0x400, 0x8, 0x401, 0x2, 0x10001, 0x2, 0xfffffbff, 0x0, 0xfffffff7, 0x646cf171, 0x0, 0xa, 0x5, 0xa4, 0x4, 0x9, 0x0, 0x5, 0x5, 0x4, 0xa0c, 0x4, 0x3038, 0x7, 0x9, 0x6, 0x8, 0x7, 0x0, 0x4, 0x6c6, 0x102, 0x9, 0x2, 0x8000, 0x3, 0x8000, 0x2, 0x7, 0x7fff, 0x6, 0x50fc, 0x3f, 0x9, 0x7, 0x10000, 0x9, 0xffff, 0x4, 0x3cee91b7, 0x400, 0x7, 0x0, 0x6, 0x4847, 0xe, 0x8, 0x1, 0x4, 0x1, 0x363ace66, 0x5, 0x3, 0xc, 0x7, 0x8, 0x8, 0x9, 0xa7, 0x9, 0x6, 0x5c, 0x4, 0xffff0000, 0x8, 0x4, 0x9, 0x4, 0x7, 0xfffffffa, 0x8, 0x2, 0x9, 0x8000, 0x2, 0x10001, 0x5, 0xd, 0x0, 0x7, 0x7f, 0x2, 0xd7, 0x8, 0x848ac40, 0x400, 0xb49f, 0x0, 0xe, 0x7fffffff, 0x0, 0x5, 0x6f, 0x5b4f, 0xff, 0x6, 0x0, 0x796, 0xb, 0x3, 0x5, 0xaab4, 0x4, 0x80000000, 0x8, 0x8, 0x1, 0x6, 0x8, 0xa6, 0x400, 0x5, 0x7ff, 0x8, 0x8, 0x7fff, 0x7, 0x2, 0x5, 0x934, 0x6, 0x7, 0x9, 0x3, 0x9, 0x1, 0x7, 0xe6c, 0x3, 0x1, 0x9, 0x40, 0x0, 0x7, 0x405, 0x4, 0x1c2, 0xfffffff7, 0x7, 0x5, 0x4, 0x1, 0x0, 0xb, 0x8, 0x4, 0x8, 0x1000, 0x95, 0x9, 0x4, 0x4, 0x1ff, 0x9, 0x7fffffff, 0x4, 0x2f, 0x200, 0xfffffffd, 0xa, 0x0, 0x81, 0x9, 0x59, 0x2, 0x1, 0x4, 0x1, 0xfffffff5, 0x1ff, 0x5, 0x7fffffff, 0x477a, 0xb, 0x8, 0xeb90, 0x8265, 0x2, 0x10, 0x9855, 0x44cb39a0, 0x3227, 0xfffffffd, 0x1000, 0x0, 0x7f7, 0x9, 0xfffffffd, 0x8001, 0x0, 0x80000000, 0x1, 0x0, 0x6, 0xe, 0x4, 0x3, 0x8, 0x1f, 0xad, 0x80, 0xa, 0x0, 0x8001, 0x6, 0x4, 0x9, 0x800, 0x10000, 0x80000000, 0x4, 0x1000, 0x4, 0x10001, 0xe, 0x7, 0x70, 0x3, 0x500000, 0x7, 0xa76, 0x8, 0x4e0, 0x2, 0x8, 0x7, 0xffff33fd, 0x17bb, 0x8, 0x0, 0x5, 0x8, 0x7ff, 0xae99, 0xfffffffd, 0x9, 0x40, 0x6, 0x7, 0x43c5, 0x3, 0x0, 0x893a, 0x5, 0xffff7fff, 0x5, 0x8, 0x0, 0xfffffffe, 0x80000001, 0x917, 0x7, 0xffff, 0x6, 0xd, 0x2, 0x6, 0x3, 0xbdf, 0x7, 0x31461322, 0xf, 0xff, 0x7, 0x8, 0xbaf9, 0x7ff, 0x4, 0x5c35, 0x2, 0x7, 0x2, 0x3, 0x395, 0x1, 0x2, 0x9, 0x101, 0x81, 0xffffffff, 0x5, 0x9, 0x5, 0x3, 0x9, 0xff, 0x2, 0x8, 0xffffffca, 0x1, 0x9, 0x8, 0x4, 0xff, 0xd1, 0x7, 0x401, 0x80000001, 0xfff, 0x4, 0x0, 0x0, 0x5, 0x6, 0x7, 0x8, 0x7fff, 0x40, 0x80000001, 0x1, 0x4, 0x1, 0x553, 0x3fc, 0x6, 0x2, 0xe42c, 0x0, 0x6, 0x10001, 0x3, 0x1, 0x2, 0x7, 0xff, 0x4, 0x4, 0xfffffff9, 0x5292, 0x5, 0x6, 0x4e, 0x3, 0xf0, 0x8, 0xa0bb, 0xd56, 0x600000, 0x7f, 0x8, 0x5, 0xffff0001, 0x2, 0x5, 0x8, 0x10, 0x10000, 0x5, 0x80000000, 0x0, 0x361, 0x4, 0x3, 0x7, 0xe9ae, 0x5, 0x4, 0x7, 0x1, 0x7, 0x100, 0xe142, 0x1ff, 0x101, 0x1ff, 0x81, 0x6, 0x401000, 0xfffffff1, 0x9, 0x2, 0x1, 0x80, 0x4e8]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r4}, 0x18) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000001140)=ANY=[@ANYBLOB="1800000000000000000000000000fcff620120000000000095000000000000316132d9f3c903640e004411df83fd7df103c32bca1a109954b12c90f20e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) exit(0x0) fspick(0xffffffffffffffff, &(0x7f0000000e40)='./file1\x00', 0x1) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001ec0)={&(0x7f00000001c0)=ANY=[], &(0x7f0000001f00)=""/4096, 0x46, 0x1000, 0x3, 0x0, 0x0, @void, @value}, 0x28) 1m12.170492901s ago: executing program 6 (id=1723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="001300"}) 1m11.886159703s ago: executing program 6 (id=1730): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000800)={[{@test_dummy_encryption}, {@i_version}, {@test_dummy_encryption}, {@commit={'commit', 0x3d, 0x5}}, {@test_dummy_encryption}, {@commit={'commit', 0x3d, 0x8}}, {@max_batch_time}, {@data_err_ignore}], [{@fowner_lt}, {@hash}, {@hash}, {@appraise}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timerfd_create(0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x3b1092, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) 1m10.593520242s ago: executing program 6 (id=1733): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) sendmsg$sock(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x50) 1m9.688235217s ago: executing program 6 (id=1744): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/109, 0x6d}], 0x1, 0xa, 0x100) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x4, &(0x7f0000000080)="bd2e6caf3cf761c7be8ac2cd887d5c22646a658f1677f27010f1a004ee0133239a985e65a14fffb11c3f14ff38b7749045875efe82045049490f65bdb1cb0a230faa775c3b1076575a73458e468c95450132b15e6512883e5d0337306572ce4f05879deeb9b85f7bc6edc52ceae71ca2ccd32f7ef71dd167a252ba31877c5955f8becc516f7d2b8bb19ecfa2480dfb212134f0f8e6f6d2b73511177881702b43125f93eca3f0") r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='attr/keycreate\x00') ppoll(&(0x7f0000001240)=[{r3}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYRES32=0x0], 0xfe, 0x1222, &(0x7f00000024c0)="$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") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6a2, &(0x7f0000000100)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='./file0\x00', 0x100c31, 0x0, 0xfe, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") 1m8.847148354s ago: executing program 34 (id=1744): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_mr_cache\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/109, 0x6d}], 0x1, 0xa, 0x100) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x4, &(0x7f0000000080)="bd2e6caf3cf761c7be8ac2cd887d5c22646a658f1677f27010f1a004ee0133239a985e65a14fffb11c3f14ff38b7749045875efe82045049490f65bdb1cb0a230faa775c3b1076575a73458e468c95450132b15e6512883e5d0337306572ce4f05879deeb9b85f7bc6edc52ceae71ca2ccd32f7ef71dd167a252ba31877c5955f8becc516f7d2b8bb19ecfa2480dfb212134f0f8e6f6d2b73511177881702b43125f93eca3f0") r2 = gettid() r3 = syz_open_procfs(r2, &(0x7f0000000040)='attr/keycreate\x00') ppoll(&(0x7f0000001240)=[{r3}], 0x1, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYRES32=0x0], 0xfe, 0x1222, &(0x7f00000024c0)="$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") syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6a2, &(0x7f0000000100)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='./file0\x00', 0x100c31, 0x0, 0xfe, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x25, 0x4b6, &(0x7f0000000540)="$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") 49.215721099s ago: executing program 2 (id=42): r0 = io_uring_setup(0x2b77, &(0x7f0000000200)={0x0, 0x1635, 0x2, 0xfffffffe, 0x331}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000041c0)={0x4}, 0x2) write(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16.169107048s ago: executing program 2 (id=42): r0 = io_uring_setup(0x2b77, &(0x7f0000000200)={0x0, 0x1635, 0x2, 0xfffffffe, 0x331}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f00000041c0)={0x4}, 0x2) write(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 10.163117049s ago: executing program 3 (id=2074): timer_create(0x3, 0x0, &(0x7f0000000100)) r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) fstat(0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100010e, &(0x7f0000000040), 0x2, 0x457, &(0x7f0000000b40)="$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") 10.11880049s ago: executing program 3 (id=2075): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000001c80), &(0x7f0000001cc0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate(0xc, r4, &(0x7f0000001d80)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'encrypted\x00'}, 0x1f, 0xfffffffffffffff8) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg(0xffffffffffffffff, 0x0, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020660b, &(0x7f0000000000)={0x3000000, 0x10000002000003}) 9.436118424s ago: executing program 3 (id=2077): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="40260f000000ee"], 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0xa8c, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) quotactl$Q_SETINFO(0xffffffff80000600, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000001440)=ANY=[@ANYBLOB="2003e7000000641013e08112de0b8ae44dbd85c78b40"], 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x0, 0x1, 0x5}}) 8.212918753s ago: executing program 3 (id=2083): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 3.694715854s ago: executing program 4 (id=2100): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x10000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x78, r3, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10}, @device_a, @device_b, @initial, {0x3, 0xc}, @value=@ver_80211n={0x0, 0x2, 0x3, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}}, 0x800, 0x2e, @random, @val, @val={0x2d, 0x1a, {0x2, 0x3, 0x1, 0x0, {0x3, 0xc03, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x300, 0x2, 0x12}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f3}]]}, 0x78}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008080) 3.604271004s ago: executing program 4 (id=2101): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x60, 0x1, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x648b}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffd2b}}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_TUPLE={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 3.538089845s ago: executing program 4 (id=2102): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 3.068226988s ago: executing program 3 (id=2108): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x2, 0x7, 'syz1\x00', &(0x7f0000000180)=['\x00', 'r\x0e\x81|\x0f\xa3\x8a\xb9\x8c\x94\x04\x17\v\rh\x10'], 0x11}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.667720588s ago: executing program 5 (id=2109): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x1, 0x0, 0x7ffc0001}]}) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) 1.646765168s ago: executing program 4 (id=2110): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000001c80), &(0x7f0000001cc0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate(0xc, r4, &(0x7f0000001d80)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'encrypted\x00'}, 0x1f, 0xfffffffffffffff8) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg(0xffffffffffffffff, 0x0, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020660b, &(0x7f0000000000)={0x3000000, 0x10000002000003}) 1.508235939s ago: executing program 5 (id=2111): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000000)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.507793869s ago: executing program 3 (id=2112): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={0x60, 0x1, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x9}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x648b}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xfffffd2b}}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}, @NFCTH_TUPLE={0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 659.569265ms ago: executing program 4 (id=2116): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000940)={{0x0, 0x2}, 'syz1\x00'}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f00000040c0)={0xd, {"a2e3ad21ed6b0af99cfbf4c007f70eb4d04fe7ff7fc6e5539b0872fc8b546a1b4d09940f08900c878f0e1ac6e7049b4cb4956c409b3c2a0867f3988f7ef319520100ffe8d178708c523c921b1b0f5a0a169b50d336cd3b78130daa61d8f809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca5b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b4124351601611c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb77ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f8fd777d443e88aaf000000000000c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e05130935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b3110b932a4d02da711b757fe43c06d21e35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc238a081ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed714887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee658e4cb5e930ed624806c43a006dc9336d07c2b8081c128ad2706f48261f7897084c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264d2700c838fa2c7b34252600c9654e502dcea39cb6bc3eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa70826ad01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 551.936705ms ago: executing program 7 (id=2117): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=@base={0xa, 0x16, 0xb4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x79}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 508.413866ms ago: executing program 5 (id=2118): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0xfe, 0x7fff0000}]}) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, 0x0, 0x0) 506.400896ms ago: executing program 5 (id=2119): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 424.813396ms ago: executing program 7 (id=2120): r0 = socket(0x840000000002, 0x3, 0xff) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) 402.909837ms ago: executing program 5 (id=2121): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, 0x1, 0x40000}}, 0x120) 256.336948ms ago: executing program 7 (id=2122): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x1, 0x4) recvmmsg(r0, &(0x7f00000016c0)=[{{&(0x7f0000000280)=@alg, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000140)=""/26, 0x1a}, {&(0x7f0000000300)=""/67, 0x43}, {&(0x7f00000004c0)=""/33, 0x21}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x4, &(0x7f0000000400)=""/78, 0x4e}, 0x9}, {{&(0x7f0000001500)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000001580)=""/203, 0xcb}], 0x1}, 0x2}], 0x2, 0x45833af92e4b39ff, 0x0) 256.184608ms ago: executing program 5 (id=2123): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_getevents(r3, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0) io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) 192.235968ms ago: executing program 7 (id=2124): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000640)={{0x7, 0x90}, {0x7fff, 0x1}, 0x1001, 0x6}) 109.740479ms ago: executing program 7 (id=2125): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r0, r1}, 0xc) 254.51µs ago: executing program 4 (id=2126): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000801, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1e7, &(0x7f00000001c0)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f0000001c80), &(0x7f0000001cc0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate(0xc, r4, &(0x7f0000001d80)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'encrypted\x00'}, 0x1f, 0xfffffffffffffff8) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) sendmsg(0xffffffffffffffff, 0x0, 0x80) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r5, 0xc020660b, &(0x7f0000000000)={0x3000000, 0x10000002000003}) 0s ago: executing program 7 (id=2127): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) kernel console output (not intermixed with test programs): 995064][ T8582] The task syz.4.1276 (8582) triggered the difference, watch for misbehavior. [ 316.181559][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 316.183952][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.219237][ T8315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.110876][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 317.113937][ T4158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 317.197827][ T8626] loop6: detected capacity change from 0 to 512 [ 317.248657][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 317.252690][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 317.255693][ T8626] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 317.258293][ T8626] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 317.277543][ T544] device hsr_slave_0 left promiscuous mode [ 317.297727][ T4167] udevd[4167]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 317.309694][ T8626] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 317.312196][ T8626] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 317.314525][ T8626] System zones: 0-1, 15-15, 18-18, 34-34 [ 317.316989][ T8626] EXT4-fs (loop6): orphan cleanup on readonly fs [ 317.318825][ T8626] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 317.341602][ T8626] EXT4-fs warning (device loop6): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 317.346062][ T8626] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 317.364798][ T4167] udevd[4167]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 317.375434][ T8626] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1284: bg 0: block 40: padding at end of block bitmap is not set [ 317.385887][ T544] device hsr_slave_1 left promiscuous mode [ 317.395586][ T8626] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 317.401882][ T8626] EXT4-fs (loop6): 1 truncate cleaned up [ 317.407432][ T8626] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 317.447674][ T4167] udevd[4167]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 317.455616][ T544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.457761][ T544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.587110][ T544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.589357][ T544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.600818][ T544] device bridge_slave_1 left promiscuous mode [ 317.602620][ T544] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.666770][ T544] device bridge_slave_0 left promiscuous mode [ 317.668851][ T544] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.788434][ T8661] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 318.240821][ T544] device veth1_macvtap left promiscuous mode [ 318.242598][ T544] device veth0_macvtap left promiscuous mode [ 318.244416][ T544] device veth1_vlan left promiscuous mode [ 318.246346][ T544] device veth0_vlan left promiscuous mode [ 319.537595][ T544] team0 (unregistering): Port device team_slave_1 removed [ 320.295521][ T544] team0 (unregistering): Port device team_slave_0 removed [ 320.313546][ T544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.383593][ T544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.668941][ T544] bond0 (unregistering): Released all slaves [ 321.587479][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 321.590211][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 321.596444][ T8315] device veth0_vlan entered promiscuous mode [ 321.662596][ T8315] device veth1_vlan entered promiscuous mode [ 321.805345][ T8315] device veth0_macvtap entered promiscuous mode [ 321.816834][ T8315] device veth1_macvtap entered promiscuous mode [ 321.861979][ T8709] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1314'. [ 321.880896][ T8718] netlink: 'syz.6.1316': attribute type 1 has an invalid length. [ 321.909505][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 321.912917][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 321.918391][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 321.939424][ T8721] loop5: detected capacity change from 0 to 16 [ 322.715358][ T8315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.718259][ T8315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.748569][ T4116] Bluetooth: hci4: command 0x0406 tx timeout [ 322.775237][ T8315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.778045][ T8315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.782312][ T8315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.784941][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 322.787825][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 322.791490][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 322.796645][ T8725] loop6: detected capacity change from 0 to 512 [ 322.798018][ T8721] erofs: (device loop5): mounted with root inode @ nid 36. [ 322.802540][ T4167] udevd[4167]: symlink '../../loop5' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:5' failed: Read-only file system [ 322.831449][ T8315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.834732][ T8315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.837369][ T8315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.840201][ T8315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.843243][ T8315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.846277][ T8315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.850135][ T8315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.855799][ T8315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.858557][ T8315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.862863][ T8315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.865302][ T8315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.888249][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 322.891302][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 322.898522][ T8725] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 322.904360][ T8725] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 322.976763][ T8725] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 322.979177][ T8725] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 322.982089][ T8725] System zones: 0-1, 15-15, 18-18, 34-34 [ 322.984430][ T8725] EXT4-fs (loop6): orphan cleanup on readonly fs [ 322.986218][ T8725] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 322.988712][ T8725] EXT4-fs warning (device loop6): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 322.996213][ T4167] udevd[4167]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 323.031548][ T8725] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 323.037055][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.039443][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.042459][ T8725] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1319: bg 0: block 40: padding at end of block bitmap is not set [ 323.055131][ T8725] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 323.073955][ T7537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.077068][ T7537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.085946][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 323.088971][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 323.112206][ T8725] EXT4-fs (loop6): 1 truncate cleaned up [ 323.114419][ T8725] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 323.231846][ T4030] udevd[4030]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 323.503496][ T8750] fscrypt (loop6, inode 16): Error -61 getting encryption context [ 326.808832][ T8792] loop6: detected capacity change from 0 to 512 [ 326.845868][ T8789] Invalid ELF header type: 3 != 1 [ 326.886842][ T8792] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 326.889599][ T8792] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 326.897452][ T4167] udevd[4167]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 326.979391][ T8792] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 326.983086][ T8792] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 326.985266][ T8792] System zones: 0-1, 15-15, 18-18, 34-34 [ 327.005060][ T8792] EXT4-fs (loop6): orphan cleanup on readonly fs [ 327.006950][ T8792] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 327.009522][ T8792] EXT4-fs warning (device loop6): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 327.039335][ T8792] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 327.055828][ T8792] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1337: bg 0: block 40: padding at end of block bitmap is not set [ 327.082699][ T8792] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 327.097867][ T8792] EXT4-fs (loop6): 1 truncate cleaned up [ 327.108574][ T8792] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 327.168111][ T4167] udevd[4167]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 329.894468][ T8833] loop5: detected capacity change from 0 to 4096 [ 329.954841][ T8833] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 329.963390][ T8840] loop6: detected capacity change from 0 to 512 [ 329.987053][ T8833] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,grpquota,init_itable,errors=remount-ro,nomblk_io_submit,. Quota mode: writeback. [ 330.026027][ T8840] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 330.028547][ T4167] udevd[4167]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 330.028929][ T8840] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 330.055521][ T4170] udevd[4170]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 330.083706][ T8840] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 330.085860][ T8840] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 330.087983][ T8840] System zones: 0-1, 15-15, 18-18, 34-34 [ 330.092410][ T8840] EXT4-fs (loop6): orphan cleanup on readonly fs [ 330.094245][ T8840] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0 [ 330.096883][ T8840] EXT4-fs warning (device loop6): ext4_enable_quotas:6432: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 330.103147][ T8840] EXT4-fs (loop6): Cannot turn on quotas: error -22 [ 330.105497][ T8840] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1355: bg 0: block 40: padding at end of block bitmap is not set [ 330.109633][ T8840] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 330.120108][ T4167] udevd[4167]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 330.139179][ T8840] EXT4-fs (loop6): 1 truncate cleaned up [ 330.144935][ T8840] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,nouid32,jqfmt=vfsv0,norecovery,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 330.177626][ T544] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.223415][ T8848] raw_sendmsg: syz.5.1356 forgot to set AF_INET. Fix it! [ 330.330092][ T4167] udevd[4167]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 330.360201][ T544] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.949062][ T544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.101911][ T8854] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1358'. [ 331.132068][ T8858] loop5: detected capacity change from 0 to 16 [ 331.193160][ T8858] erofs: (device loop5): mounted with root inode @ nid 36. [ 331.265424][ T4167] udevd[4167]: symlink '../../loop5' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:5' failed: Read-only file system [ 331.276950][ T544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.051362][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 332.146665][ T4030] udevd[4030]: symlink '../../loop5' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:5' failed: Read-only file system [ 332.186600][ T8842] chnl_net:caif_netlink_parms(): no params data found [ 332.435438][ T8842] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.437605][ T8842] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.450147][ T8842] device bridge_slave_0 entered promiscuous mode [ 332.453617][ T8886] loop6: detected capacity change from 0 to 512 [ 332.464558][ T8842] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.470106][ T8842] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.473379][ T8842] device bridge_slave_1 entered promiscuous mode [ 332.519513][ T8886] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 332.529930][ T4167] udevd[4167]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 332.552546][ T8886] EXT4-fs error (device loop6): ext4_orphan_get:1427: comm syz.6.1368: bad orphan inode 16 [ 332.562278][ T8886] ext4_test_bit(bit=15, block=4) = 0 [ 332.568294][ T8886] EXT4-fs (loop6): 1 orphan inode deleted [ 332.574540][ T8886] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 332.615076][ T8842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.632628][ T8842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.695915][ T4167] udevd[4167]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 332.757134][ T8842] team0: Port device team_slave_0 added [ 332.761776][ T8842] team0: Port device team_slave_1 added [ 332.832627][ T8842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.841533][ T8842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.859451][ T8842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.871028][ T8842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.876567][ T8842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.894002][ T8842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.845584][ T8842] device hsr_slave_0 entered promiscuous mode [ 333.902733][ T8842] device hsr_slave_1 entered promiscuous mode [ 334.110464][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 336.661695][ T4082] Bluetooth: hci0: command 0x040f tx timeout [ 336.844944][ T8975] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 336.971888][ T8842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 336.972394][ T8983] loop6: detected capacity change from 0 to 512 [ 336.993563][ T8842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 337.018821][ T8989] loop5: detected capacity change from 0 to 512 [ 337.042531][ T8842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 337.062821][ T8983] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 337.096752][ T8983] EXT4-fs (loop6): 1 orphan inode deleted [ 337.098388][ T8983] EXT4-fs (loop6): 1 truncate cleaned up [ 337.099992][ T8983] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000004,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,jqfmt=vfsold,noload,data_err=ignore,init_itable,debug_want_extra_isize=0x0000000000000006. Quota mode: none. [ 337.122500][ T8989] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.1398: casefold flag without casefold feature [ 337.129874][ T8989] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1398: couldn't read orphan inode 15 (err -117) [ 337.171498][ T4167] udevd[4167]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 337.176613][ T8842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 337.183012][ T8989] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 337.220161][ T4030] udevd[4030]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 337.237680][ T4030] udevd[4030]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 337.245552][ T4167] udevd[4167]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 337.260953][ T4167] udevd[4167]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 338.137462][ T4030] udevd[4030]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 338.212495][ T9015] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1404'. [ 339.475039][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 339.587613][ T8842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.655071][ T544] device hsr_slave_0 left promiscuous mode [ 339.825596][ T544] device hsr_slave_1 left promiscuous mode [ 340.827070][ T9052] af_packet: tpacket_rcv: packet too big, clamped from 110 to 4294967286. macoff=82 [ 340.980740][ T9055] binder: BINDER_SET_CONTEXT_MGR already set [ 341.004227][ T544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.006258][ T544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.008963][ T9055] binder: 9054:9055 ioctl 40046207 0 returned -16 [ 341.012577][ T544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.014936][ T544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.041418][ T544] device bridge_slave_1 left promiscuous mode [ 341.043285][ T544] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.115255][ T544] device bridge_slave_0 left promiscuous mode [ 341.117106][ T544] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.715070][ T544] device veth1_macvtap left promiscuous mode [ 341.717474][ T544] device veth0_macvtap left promiscuous mode [ 341.722417][ T544] device veth1_vlan left promiscuous mode [ 341.724752][ T544] device veth0_vlan left promiscuous mode [ 342.879059][ T9073] loop6: detected capacity change from 0 to 736 [ 342.923123][ T4167] udevd[4167]: symlink '../../loop6' '/dev/disk/by-label/CDROM.tmp-b7:6' failed: Read-only file system [ 344.182033][ T544] team0 (unregistering): Port device team_slave_1 removed [ 344.206601][ T544] team0 (unregistering): Port device team_slave_0 removed [ 345.980145][ T544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.026251][ T544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.153142][ T544] bond0 (unregistering): Released all slaves [ 347.764142][ T8842] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.896792][ T8842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.899625][ T8842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.921386][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 347.923974][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 347.926426][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.929103][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.983832][ T4139] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.985810][ T4139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.004280][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.010087][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.028749][ T4139] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.030934][ T4139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.040201][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 348.043732][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 348.048240][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 348.060865][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 348.063846][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 348.067595][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 348.077441][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 348.081067][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 348.084108][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 348.087047][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 348.089951][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 348.099609][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 348.108904][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 348.927671][ T6772] Bluetooth: hci1: command 0x0406 tx timeout [ 349.039081][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 349.042096][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 349.823228][ T8842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.896409][ T9160] device batadv_slave_0 left promiscuous mode [ 349.949326][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.953091][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.980989][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.987635][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 350.083883][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 350.086741][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 350.101237][ T8842] device veth0_vlan entered promiscuous mode [ 350.116636][ T8842] device veth1_vlan entered promiscuous mode [ 350.260138][ T9173] udc-core: couldn't find an available UDC or it's busy [ 350.262441][ T9173] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 350.976081][ T8842] device veth0_macvtap entered promiscuous mode [ 350.998264][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 351.002275][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 351.009123][ T8842] device veth1_macvtap entered promiscuous mode [ 351.033195][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 351.037768][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 351.141442][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.160500][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.173059][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.192419][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.214635][ T8842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.519254][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 353.532740][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.613127][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.616078][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.618678][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.631267][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.634134][ T8842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.663520][ T8842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.744785][ T8842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.554426][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 354.557650][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.573437][ T8842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.576283][ T8842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.578548][ T8842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.590382][ T8842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.778086][ T7543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.795053][ T7543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.800857][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 354.884606][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.891346][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.781287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 359.959219][ T544] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.009368][ T544] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.082390][ T544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.128024][ T544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.810583][ T9357] netlink: 'syz.4.1507': attribute type 10 has an invalid length. [ 361.940018][ T9349] chnl_net:caif_netlink_parms(): no params data found [ 362.089011][ T9380] netlink: 'syz.6.1510': attribute type 2 has an invalid length. [ 362.299772][ T9349] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.303989][ T9349] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.306686][ T9349] device bridge_slave_0 entered promiscuous mode [ 362.326747][ T9349] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.330621][ T9349] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.353528][ T9349] device bridge_slave_1 entered promiscuous mode [ 362.440004][ T9349] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.453166][ T9349] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.548053][ T9414] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1523'. [ 362.565251][ T9349] team0: Port device team_slave_0 added [ 362.622174][ T9414] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1523'. [ 362.625987][ T9349] team0: Port device team_slave_1 added [ 362.684406][ T9420] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1523'. [ 362.687289][ T9414] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1523'. [ 362.706008][ T9349] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.708124][ T9349] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.733610][ T9349] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.782091][ T9349] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.784073][ T9349] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.844508][ T9349] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.027522][ T9349] device hsr_slave_0 entered promiscuous mode [ 363.050809][ T9349] device hsr_slave_1 entered promiscuous mode [ 363.091505][ T9349] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.093740][ T9349] Cannot create hsr debugfs directory [ 363.142911][ T9461] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1541'. [ 363.710650][ T4084] Bluetooth: hci0: command 0x0409 tx timeout [ 364.089461][ T9475] netlink: 'syz.5.1546': attribute type 2 has an invalid length. [ 364.091829][ T9475] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1546'. [ 364.320124][ T9493] netlink: 'syz.5.1552': attribute type 2 has an invalid length. [ 364.328701][ T9493] netlink: 'syz.5.1552': attribute type 5 has an invalid length. [ 364.669815][ T544] device hsr_slave_0 left promiscuous mode [ 364.701082][ T544] device hsr_slave_1 left promiscuous mode [ 364.760932][ T544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.763003][ T544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.765711][ T544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.768715][ T544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.778502][ T544] device bridge_slave_1 left promiscuous mode [ 364.780227][ T544] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.821677][ T544] device bridge_slave_0 left promiscuous mode [ 364.823654][ T544] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.954168][ T544] device veth1_macvtap left promiscuous mode [ 364.955884][ T544] device veth0_macvtap left promiscuous mode [ 364.957573][ T544] device veth1_vlan left promiscuous mode [ 364.959285][ T544] device veth0_vlan left promiscuous mode [ 365.274145][ T544] team0 (unregistering): Port device team_slave_1 removed [ 365.284303][ T544] team0 (unregistering): Port device team_slave_0 removed [ 365.296798][ T544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.337803][ T544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.526989][ T544] bond0 (unregistering): Released all slaves [ 365.790447][ T4116] Bluetooth: hci0: command 0x041b tx timeout [ 365.879501][ T9349] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 365.914361][ T9349] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 365.974028][ T9349] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 366.046082][ T9349] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 366.171129][ T9617] udc-core: couldn't find an available UDC or it's busy [ 366.173047][ T9617] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 366.313380][ T9349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.329809][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 366.340786][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 366.346295][ T9349] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.354990][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 366.363619][ T9630] loop6: detected capacity change from 0 to 1024 [ 366.367300][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.370198][ T4139] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.372200][ T4139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.391912][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 366.395290][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 366.398082][ T9630] EXT4-fs (loop6): Ignoring removed orlov option [ 366.398398][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.399939][ T9630] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 366.405268][ T4139] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.407343][ T4139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.409907][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 366.440106][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 366.449336][ T9257] udevd[9257]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 366.454715][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 366.462741][ T9630] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,orlov,min_batch_time=0x0000000000000001,nojournal_checksum,barrier,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,journal_ioprio=0x0000000000000001,barrier=0x0000000000000007,nombcache,. Quota mode: none. [ 366.482662][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 366.488969][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 366.493213][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 366.496613][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 366.506356][ T9349] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 366.509182][ T9349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 366.514160][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 366.525681][ T9257] udevd[9257]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 366.531737][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.539343][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 366.559774][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.570080][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 367.741226][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 367.743472][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 367.765718][ T9349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.866158][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 367.869326][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 367.908394][ T9678] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1617'. [ 367.920557][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 367.923563][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 367.928791][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 367.961001][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 367.972107][ T6477] Bluetooth: hci0: command 0x040f tx timeout [ 367.995703][ T9349] device veth0_vlan entered promiscuous mode [ 368.017216][ T9349] device veth1_vlan entered promiscuous mode [ 368.859039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 368.875712][ T9691] loop6: detected capacity change from 0 to 512 [ 368.940553][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 368.944004][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 368.975627][ T9691] EXT4-fs (loop6): Ignoring removed orlov option [ 368.978584][ T9349] device veth0_macvtap entered promiscuous mode [ 368.996715][ T9691] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.1620: casefold flag without casefold feature [ 369.006460][ T9349] device veth1_macvtap entered promiscuous mode [ 369.036341][ T9349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.039182][ T9349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.093522][ T9691] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.1620: couldn't read orphan inode 15 (err -117) [ 369.144889][ T9691] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,orlov,,errors=continue. Quota mode: writeback. [ 369.441795][ T9349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.558041][ T9349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.837172][ T9257] udevd[9257]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 369.871321][ T9349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.883500][ T9349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.886662][ T9349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.928796][ T9349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.940645][ T9349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.954469][ T9349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.970918][ T9349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.175806][ T9349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.046074][ T9716] loop5: detected capacity change from 0 to 164 [ 371.129819][ T6436] Bluetooth: hci0: command 0x0419 tx timeout [ 371.131623][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 371.134376][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 371.136986][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 371.142497][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 371.145677][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 371.148581][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 371.164181][ T9716] Unable to read rock-ridge attributes [ 371.173780][ T9349] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.176115][ T9349] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.178373][ T9349] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.186102][ T9257] udevd[9257]: symlink '../../loop5' '/dev/disk/by-label/CDROM.tmp-b7:5' failed: Read-only file system [ 371.194432][ T9716] Unable to read rock-ridge attributes [ 371.207318][ T9349] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.211474][ T9257] udevd[9257]: symlink '../../loop5' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:5' failed: Read-only file system [ 371.481974][ T4139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.484459][ T4139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.490999][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 371.547181][ T4139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.562903][ T4139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.569026][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 371.866489][ T9750] loop5: detected capacity change from 0 to 512 [ 371.868666][ T9754] loop6: detected capacity change from 0 to 512 [ 372.810607][ T9754] EXT4-fs (loop6): orphan cleanup on readonly fs [ 372.812508][ T9754] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 372.818145][ T9212] udevd[9212]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 372.824040][ T9754] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 372.837230][ T9754] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.1642: attempt to clear invalid blocks 2 len 1 [ 372.843671][ T9754] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1642: invalid indirect mapped block 1819239214 (level 0) [ 372.853499][ T9754] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1642: invalid indirect mapped block 1819239214 (level 1) [ 372.885388][ T9754] EXT4-fs (loop6): 1 truncate cleaned up [ 372.886981][ T9754] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,jqfmt=vfsv0,abort,bsddf,noquota,usrjquota=..,errors=continue. Quota mode: writeback. [ 372.901907][ T9257] udevd[9257]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 372.913860][ T9750] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 372.957308][ T9754] EXT4-fs (loop6): shut down requested (2) [ 373.007964][ T9212] udevd[9212]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 373.875965][ T9257] udevd[9257]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 373.984734][ T9212] udevd[9212]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 374.006423][ T9786] loop6: detected capacity change from 0 to 128 [ 374.227571][ T9796] loop5: detected capacity change from 0 to 2048 [ 374.246661][ T9796] EXT4-fs (loop5): Ignoring removed oldalloc option [ 374.284831][ T9257] udevd[9257]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 374.312676][ T9796] EXT4-fs (loop5): mounted filesystem without journal. Opts: oldalloc,grpjquota=,,errors=continue. Quota mode: none. [ 374.494806][ T9212] udevd[9212]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 374.760220][ T9831] loop5: detected capacity change from 0 to 256 [ 374.787839][ T9833] loop6: detected capacity change from 0 to 164 [ 375.044401][ T9212] udevd[9212]: symlink '../../loop6' '/dev/disk/by-label/CDROM.tmp-b7:6' failed: Read-only file system [ 375.199831][ T9838] loop6: detected capacity change from 0 to 512 [ 375.280488][ T9838] EXT4-fs error (device loop6): ext4_get_branch:178: inode #13: block 33619980: comm syz.6.1663: invalid block [ 375.343927][ T9838] EXT4-fs (loop6): Remounting filesystem read-only [ 375.366217][ T9838] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:476: comm syz.6.1663: Invalid block bitmap block 0 in block_group 0 [ 375.401917][ T9838] EXT4-fs (loop6): Remounting filesystem read-only [ 375.415812][ T9838] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 375.418636][ T9838] EXT4-fs (loop6): Remounting filesystem read-only [ 375.420534][ T9838] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.1663: attempt to clear invalid blocks 983261 len 1 [ 375.433089][ T9838] EXT4-fs (loop6): Remounting filesystem read-only [ 375.450673][ T9838] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1663: invalid indirect mapped block 2683928664 (level 0) [ 375.471531][ T9838] EXT4-fs (loop6): Remounting filesystem read-only [ 375.473374][ T9838] EXT4-fs error (device loop6): __ext4_get_inode_loc:4320: comm syz.6.1663: Invalid inode table block 0 in block_group 0 [ 375.485252][ T9212] udevd[9212]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 375.498874][ T9854] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1668'. [ 375.529488][ T9838] EXT4-fs (loop6): Remounting filesystem read-only [ 375.535110][ T9856] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1669'. [ 375.539826][ T9838] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 375.620751][ T9838] EXT4-fs (loop6): Remounting filesystem read-only [ 375.622619][ T9838] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 375.639816][ T9838] EXT4-fs (loop6): Remounting filesystem read-only [ 375.642037][ T9838] EXT4-fs error (device loop6): __ext4_get_inode_loc:4320: comm syz.6.1663: Invalid inode table block 0 in block_group 0 [ 375.646486][ T9838] EXT4-fs (loop6): Remounting filesystem read-only [ 375.648263][ T9838] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 375.663012][ T9838] EXT4-fs (loop6): Remounting filesystem read-only [ 375.664907][ T9838] EXT4-fs error (device loop6): ext4_truncate:4272: inode #13: comm syz.6.1663: mark_inode_dirty error [ 375.669902][ T9838] EXT4-fs (loop6): Remounting filesystem read-only [ 375.679147][ T9838] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 375.682104][ T9838] EXT4-fs (loop6): Remounting filesystem read-only [ 375.683885][ T9838] EXT4-fs error (device loop6): __ext4_get_inode_loc:4320: comm syz.6.1663: Invalid inode table block 0 in block_group 0 [ 375.687722][ T9838] EXT4-fs (loop6): Remounting filesystem read-only [ 375.689864][ T9838] EXT4-fs (loop6): 1 truncate cleaned up [ 375.741152][ T9838] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,nolazytime,journal_dev=0x0000000000007fff,errors=remount-ro,noblock_validity,. Quota mode: none. [ 375.783391][ T9257] udevd[9257]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 375.785742][ T9838] EXT4-fs error (device loop6): __ext4_get_inode_loc:4320: comm syz.6.1663: Invalid inode table block 0 in block_group 0 [ 375.826647][ T9838] EXT4-fs (loop6): Remounting filesystem read-only [ 375.828431][ T9838] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 375.849707][ T9838] EXT4-fs (loop6): Remounting filesystem read-only [ 375.941556][ T9877] loop5: detected capacity change from 0 to 8 [ 376.079085][ T9886] device syzkaller0 entered promiscuous mode [ 376.997437][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 376.999271][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.042185][ T4038] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 378.309648][ T544] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.361113][ T544] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.398502][ T544] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.447106][ T544] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.070646][ T4082] Bluetooth: hci5: command 0x0406 tx timeout [ 379.768599][ T9983] loop6: detected capacity change from 0 to 128 [ 379.781180][ T9983] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 379.788254][ T9983] EXT4-fs (loop6): can't mount with journal_checksum, fs mounted w/o journal [ 379.974298][ T9990] loop5: detected capacity change from 0 to 128 [ 380.771102][ T26] audit: type=1326 audit(381.726:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9975 comm="syz.4.1689" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa2b1fd28 code=0x7fc00000 [ 381.002836][ T9253] udevd[9253]: symlink '../../loop5' '/dev/disk/by-label/SYZKALLER.tmp-b7:5' failed: Read-only file system [ 381.052976][ T9253] udevd[9253]: symlink '../../loop5' '/dev/disk/by-uuid/1DE0-387E.tmp-b7:5' failed: Read-only file system [ 381.084507][T10001] udevd[10001]: symlink '../../loop5' '/dev/disk/by-label/SYZKALLER.tmp-b7:5' failed: Read-only file system [ 381.097200][T10001] udevd[10001]: symlink '../../loop5' '/dev/disk/by-uuid/1DE0-387E.tmp-b7:5' failed: Read-only file system [ 381.111948][ T9257] udevd[9257]: symlink '../../loop5' '/dev/disk/by-label/SYZKALLER.tmp-b7:5' failed: Read-only file system [ 381.115985][ T9257] udevd[9257]: symlink '../../loop5' '/dev/disk/by-uuid/1DE0-387E.tmp-b7:5' failed: Read-only file system [ 381.246379][T10016] loop5: detected capacity change from 0 to 2048 [ 381.882419][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1700'. [ 382.254941][T10016] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 382.275888][T10011] udevd[10011]: symlink '../../loop5' '/dev/disk/by-label/LinuxUDF.tmp-b7:5' failed: Read-only file system [ 382.314217][T10011] udevd[10011]: symlink '../../loop5' '/dev/disk/by-uuid/1234567812345678.tmp-b7:5' failed: Read-only file system [ 382.462466][T10011] udevd[10011]: symlink '../../loop5' '/dev/disk/by-label/LinuxUDF.tmp-b7:5' failed: Read-only file system [ 382.468585][ T4082] Bluetooth: hci0: command 0x0409 tx timeout [ 382.479212][ T9988] chnl_net:caif_netlink_parms(): no params data found [ 382.501702][T10011] udevd[10011]: symlink '../../loop5' '/dev/disk/by-uuid/1234567812345678.tmp-b7:5' failed: Read-only file system [ 382.708048][ T544] device hsr_slave_0 left promiscuous mode [ 382.761664][ T544] device hsr_slave_1 left promiscuous mode [ 382.941090][ T544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.943274][ T544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.946313][ T544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.948355][ T544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.717367][ T544] device bridge_slave_1 left promiscuous mode [ 383.722199][ T544] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.760153][T10057] loop5: detected capacity change from 0 to 8 [ 383.775049][ T544] device bridge_slave_0 left promiscuous mode [ 383.777195][ T544] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.811478][T10057] SQUASHFS error: zlib decompression failed, data probably corrupt [ 383.813794][T10057] SQUASHFS error: Failed to read block 0x4de: -5 [ 383.824516][T10057] SQUASHFS error: Failed to read block 0x4e2: -5 [ 383.826609][T10057] SQUASHFS error: Failed to read block 0x9ca: -5 [ 383.828388][T10057] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 383.830171][T10057] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 383.840577][T10057] SQUASHFS error: Failed to read block 0x535f2: -5 [ 383.846858][T10059] loop6: detected capacity change from 0 to 1024 [ 383.888544][T10059] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 383.890793][ T544] device veth1_macvtap left promiscuous mode [ 383.893429][ T544] device veth0_macvtap left promiscuous mode [ 383.895301][ T544] device veth1_vlan left promiscuous mode [ 383.897046][ T544] device veth0_vlan left promiscuous mode [ 384.028269][T10064] loop5: detected capacity change from 0 to 512 [ 384.400181][T10070] loop5: detected capacity change from 0 to 2048 [ 384.449377][T10070] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 384.452707][T10070] UDF-fs: Scanning with blocksize 512 failed [ 384.478269][T10070] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 384.520592][ T3607] Bluetooth: hci0: command 0x041b tx timeout [ 384.787579][ T544] team0 (unregistering): Port device team_slave_1 removed [ 384.817391][ T544] team0 (unregistering): Port device team_slave_0 removed [ 384.851438][ T544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.916172][ T544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.938417][T10089] loop5: detected capacity change from 0 to 16 [ 385.973588][T10089] erofs: (device loop5): mounted with root inode @ nid 36. [ 386.014963][T10011] udevd[10011]: symlink '../../loop5' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:5' failed: Read-only file system [ 386.063051][ T544] bond0 (unregistering): Released all slaves [ 387.732943][ T4082] Bluetooth: hci0: command 0x040f tx timeout [ 387.792934][ T9988] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.794965][ T9988] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.797797][ T9988] device bridge_slave_0 entered promiscuous mode [ 387.822234][T10112] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1725'. [ 387.824880][ T9988] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.826812][ T9988] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.829814][ T9988] device bridge_slave_1 entered promiscuous mode [ 387.930218][ T9988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.948492][ T9988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.013038][ T9988] team0: Port device team_slave_0 added [ 388.023003][ T9988] team0: Port device team_slave_1 added [ 388.098172][T10126] overlayfs: failed to clone lowerpath [ 388.104933][ T9988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.110731][ T9988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.116179][T10127] loop6: detected capacity change from 0 to 1024 [ 388.130603][ T9988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.161953][ T9988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.163881][ T9988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.188096][ T9988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.220806][T10011] udevd[10011]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 388.227893][T10127] EXT4-fs (loop6): Test dummy encryption mode enabled [ 388.239420][T10127] EXT4-fs (loop6): Test dummy encryption mode enabled [ 388.247354][T10127] EXT4-fs (loop6): Test dummy encryption mode enabled [ 388.254208][T10127] EXT4-fs (loop6): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 388.472037][ T9988] device hsr_slave_0 entered promiscuous mode [ 389.270810][ T9988] device hsr_slave_1 entered promiscuous mode [ 389.791083][ T4086] Bluetooth: hci0: command 0x0419 tx timeout [ 389.972925][T10164] overlayfs: failed to clone lowerpath [ 390.624409][T10172] ODEBUG: Out of memory. ODEBUG disabled [ 391.311585][T10178] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1745'. [ 392.321979][T10204] overlayfs: failed to clone lowerpath [ 392.419631][T10208] loop5: detected capacity change from 0 to 512 [ 392.533617][T10011] udevd[10011]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 392.557420][T10208] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 392.673692][T10011] udevd[10011]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 393.512055][T10225] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 393.514698][T10225] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 393.704012][T10231] fuse: Bad value for 'fd' [ 393.791554][T10233] loop5: detected capacity change from 0 to 128 [ 393.821544][ T9988] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 393.959035][T10196] chnl_net:caif_netlink_parms(): no params data found [ 393.993933][ T9988] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 395.153053][ T4144] attempt to access beyond end of device [ 395.153053][ T4144] loop5: rw=1, want=1041, limit=128 [ 395.558065][ T3607] Bluetooth: hci2: command 0x0409 tx timeout [ 395.573789][ T9988] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 395.630815][ T9988] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 395.876253][T10279] overlayfs: overlapping lowerdir path [ 396.028088][T10196] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.031907][T10196] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.046583][T10196] device bridge_slave_0 entered promiscuous mode [ 396.079090][T10285] loop5: detected capacity change from 0 to 1024 [ 396.089241][T10196] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.100954][T10196] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.121228][T10196] device bridge_slave_1 entered promiscuous mode [ 396.153074][T10011] udevd[10011]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 396.168538][T10285] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 396.205188][T10285] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 396.215873][T10011] udevd[10011]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 396.236243][T10285] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 396.245070][T10196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.258435][T10285] EXT4-fs (loop5): This should not happen!! Data will be lost [ 396.258435][T10285] [ 396.271827][T10285] EXT4-fs (loop5): Total free blocks count 0 [ 396.277243][T10285] EXT4-fs (loop5): Free/Dirty block details [ 396.283288][T10196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.289171][T10285] EXT4-fs (loop5): free_blocks=68451041280 [ 396.296909][T10285] EXT4-fs (loop5): dirty_blocks=16 [ 396.298878][ T9988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.304434][T10285] EXT4-fs (loop5): Block reservation details [ 396.314044][T10285] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 396.344143][T10196] team0: Port device team_slave_0 added [ 396.384956][T10196] team0: Port device team_slave_1 added [ 396.413939][ T9988] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.456629][ T9988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 396.459607][ T9988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 396.500084][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 396.503502][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 396.529413][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 396.536302][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 396.549613][ T4620] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.551585][ T4620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.573520][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 396.576353][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 396.578936][ T4620] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.580936][ T4620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.583472][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 396.586474][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 396.589399][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 396.599893][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 396.611253][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 396.614214][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 396.617047][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 396.619827][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 396.623550][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 396.626348][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 396.629157][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 396.631805][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 397.338819][ T26] audit: type=1326 audit(398.286:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a11dd28 code=0x7ffc0000 [ 397.345233][ T26] audit: type=1326 audit(398.286:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a11dd28 code=0x7ffc0000 [ 397.353171][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 397.376436][ T26] audit: type=1326 audit(398.326:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff8a11dd28 code=0x7ffc0000 [ 397.388184][ T26] audit: type=1326 audit(398.326:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff8a11dd5c code=0x7ffc0000 [ 397.389067][T10196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.398927][ T26] audit: type=1326 audit(398.326:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff8a11c3f0 code=0x7ffc0000 [ 397.405915][ T26] audit: type=1326 audit(398.336:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff8a11ddcc code=0x7ffc0000 [ 397.412562][ T26] audit: type=1326 audit(398.336:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff8a11c254 code=0x7ffc0000 [ 397.412807][T10196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.418577][ T26] audit: type=1326 audit(398.336:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff8a11c62c code=0x7ffc0000 [ 397.438243][T10196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.450647][T10307] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 397.453232][T10307] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 397.477284][T10196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.479409][T10196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.489208][ T26] audit: type=1326 audit(398.336:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a11dd28 code=0x7ffc0000 [ 397.537902][T10196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.567735][ T26] audit: type=1326 audit(398.336:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10309 comm="syz.3.1770" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8a11dd28 code=0x7ffc0000 [ 397.630625][ T6772] Bluetooth: hci2: command 0x041b tx timeout [ 397.762475][T10196] device hsr_slave_0 entered promiscuous mode [ 397.841042][T10196] device hsr_slave_1 entered promiscuous mode [ 398.570557][T10196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 398.573071][T10196] Cannot create hsr debugfs directory [ 398.588587][T10338] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.591156][T10338] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.622913][T10343] device bridge_slave_1 left promiscuous mode [ 398.626451][T10343] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.665354][T10343] device bridge_slave_0 left promiscuous mode [ 398.667153][T10343] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.798045][T10357] loop5: detected capacity change from 0 to 256 [ 398.879393][T10357] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 398.920625][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 398.922990][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 398.965978][ T9988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.144715][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 399.147608][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 399.254197][T10379] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1783'. [ 399.256825][T10379] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 399.270706][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 399.310247][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 400.017075][ T3606] Bluetooth: hci2: command 0x040f tx timeout [ 400.036287][ T9988] device veth0_vlan entered promiscuous mode [ 400.064906][ T9988] device veth1_vlan entered promiscuous mode [ 400.125269][T10392] mmap: syz.3.1785 (10392) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 400.130778][ T9988] device veth0_macvtap entered promiscuous mode [ 400.181563][ T9988] device veth1_macvtap entered promiscuous mode [ 400.202523][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 400.205199][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 400.208006][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 400.218110][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 400.251442][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 400.275142][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 400.278063][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 400.284630][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 400.287374][T10196] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 401.566284][T10196] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 403.066896][ T6436] Bluetooth: hci2: command 0x0419 tx timeout [ 403.440851][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.454407][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.457229][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.869549][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.248857][ T9988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.264732][T10196] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 404.360261][T10196] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 404.413347][T10435] overlayfs: failed to clone lowerpath [ 404.464058][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 404.467261][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 404.474283][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.477180][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.479739][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.489600][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.500455][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.503454][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.217607][T10437] serio: Serial port ptm0 [ 405.226712][ T9988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.242780][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 405.246034][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 405.263335][ T9988] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.265802][ T9988] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.277989][ T9988] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.281050][ T9988] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.428786][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.432933][T10196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.435173][T10473] netlink: 'syz.4.1805': attribute type 6 has an invalid length. [ 406.454379][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.473468][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 406.533007][ T7537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.535495][ T7537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.542324][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 406.570126][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 406.575658][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 406.607586][T10196] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.616519][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 406.619323][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 406.622373][ T4620] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.624384][ T4620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.626984][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 406.667137][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 406.672442][ T153] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 406.676756][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.678664][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.413272][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 407.416151][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 407.419041][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 407.436446][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 407.439471][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 407.445667][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 407.448548][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 407.461872][T10481] overlayfs: failed to clone lowerpath [ 407.494945][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 407.497658][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 407.540657][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 407.561549][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 407.680463][T10196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 408.567783][T10503] udc-core: couldn't find an available UDC or it's busy [ 408.569703][T10503] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 408.634833][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 408.637354][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 408.651149][T10196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.811456][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 408.814523][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 409.551695][T10196] device veth0_vlan entered promiscuous mode [ 409.558920][T10196] device veth1_vlan entered promiscuous mode [ 409.628307][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 409.632321][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 409.635113][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 409.637799][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 409.642622][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 409.674465][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 409.677513][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 409.684261][T10196] device veth0_macvtap entered promiscuous mode [ 409.689886][T10196] device veth1_macvtap entered promiscuous mode [ 409.702920][T10196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.706035][T10196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.708778][T10196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.713569][T10196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.715165][T10525] overlayfs: failed to clone lowerpath [ 409.716495][T10196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.720967][T10196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.723811][ T4082] Bluetooth: hci3: command 0x2016 tx timeout [ 409.725178][T10196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.728650][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 409.731893][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 409.734653][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 409.737900][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 409.743859][T10196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.746680][T10196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.749618][T10196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.753482][T10196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.756614][T10196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.759881][T10196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.776977][T10196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.780237][T10196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.789815][T10196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.803915][T10196] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.806377][T10196] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.808693][T10196] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.816341][T10196] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.862207][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 409.865202][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 409.965865][ T4144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.968567][ T4144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.974117][ T4144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 410.005042][T10536] loop5: detected capacity change from 0 to 128 [ 410.072694][T10537] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 410.230691][ T4144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.236531][ T4144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.727918][T10536] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue. Quota mode: none. [ 410.742996][ T333] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.749880][T10530] udevd[10530]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system [ 410.758815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 410.859886][ T333] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.868636][T10535] udevd[10535]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system [ 410.959678][ T333] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.129806][ T333] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.487388][T10611] loop7: detected capacity change from 0 to 1024 [ 412.521377][T10614] overlayfs: failed to clone lowerpath [ 412.523193][T10611] EXT4-fs (loop7): Ignoring removed nobh option [ 412.524880][T10611] EXT4-fs (loop7): Ignoring removed bh option [ 412.526648][T10611] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 412.654212][T10535] udevd[10535]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 412.725001][T10611] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,nodelalloc,nobh,data_err=ignore,grpquota,max_dir_size_kb=0x00000000004007b1,barrier,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 412.748510][T10535] udevd[10535]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 413.408915][T10611] udc-core: couldn't find an available UDC or it's busy [ 413.429923][T10611] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 413.837475][T10651] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 413.901096][T10651] loop5: detected capacity change from 0 to 256 [ 414.551017][T10651] exfat: Bad value for 'uid' [ 414.678306][ T333] device hsr_slave_0 left promiscuous mode [ 414.682086][T10659] overlayfs: conflicting lowerdir path [ 415.388882][ T333] device hsr_slave_1 left promiscuous mode [ 415.470576][ T4116] Bluetooth: hci0: command 0x0409 tx timeout [ 415.510547][ T333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.512776][ T333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.532328][ T333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.534538][ T333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.545622][ T333] device bridge_slave_1 left promiscuous mode [ 415.547399][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.690169][ T333] device bridge_slave_0 left promiscuous mode [ 415.693786][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.051056][ T333] device veth1_macvtap left promiscuous mode [ 416.053211][ T333] device veth0_macvtap left promiscuous mode [ 416.056486][ T333] device veth1_vlan left promiscuous mode [ 416.058624][ T333] device veth0_vlan left promiscuous mode [ 416.822842][T10701] overlayfs: conflicting lowerdir path [ 416.881031][T10707] udc-core: couldn't find an available UDC or it's busy [ 416.887996][T10707] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 417.086823][ T333] team0 (unregistering): Port device team_slave_1 removed [ 417.097575][ T333] team0 (unregistering): Port device team_slave_0 removed [ 417.105992][ T333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.553104][ T4116] Bluetooth: hci0: command 0x041b tx timeout [ 417.758052][T10718] loop7: detected capacity change from 0 to 512 [ 417.879580][T10718] EXT4-fs (loop7): Ignoring removed bh option [ 417.882796][ T333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.926159][T10535] udevd[10535]: symlink '../../loop7' '/dev/disk/by-label/\x86\x5b.tmp-b7:7' failed: Read-only file system [ 417.944031][T10718] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 417.946970][T10718] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 2)! [ 417.949733][T10718] EXT4-fs (loop7): group descriptors corrupted! [ 417.985655][T10731] loop5: detected capacity change from 0 to 128 [ 418.081997][T10535] udevd[10535]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system [ 418.112060][ T333] bond0 (unregistering): Released all slaves [ 418.121222][T10731] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,nodelalloc,,errors=continue. Quota mode: none. [ 418.174772][T10545] udevd[10545]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system [ 418.233393][T10744] overlayfs: conflicting lowerdir path [ 418.615984][T10626] chnl_net:caif_netlink_parms(): no params data found [ 419.429682][T10761] loop7: detected capacity change from 0 to 8 [ 419.653271][ T25] Bluetooth: hci0: command 0x040f tx timeout [ 419.757261][T10768] netlink: 'syz.4.1873': attribute type 83 has an invalid length. [ 420.453262][T10626] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.455283][T10626] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.478943][T10626] device bridge_slave_0 entered promiscuous mode [ 420.514621][T10626] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.516180][T10776] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 420.530507][T10626] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.533596][T10626] device bridge_slave_1 entered promiscuous mode [ 420.618905][T10626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.742945][T10626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.770235][T10788] loop7: detected capacity change from 0 to 1024 [ 420.841265][T10626] team0: Port device team_slave_0 added [ 421.029748][T10795] No such timeout policy "syz0" [ 421.599062][T10626] team0: Port device team_slave_1 added [ 421.638261][ T4116] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 421.640646][ T4116] Bluetooth: hci3: Injecting HCI hardware error event [ 421.642919][ T4046] Bluetooth: hci3: hardware error 0x00 [ 421.710516][ T4116] Bluetooth: hci0: command 0x0419 tx timeout [ 421.765636][T10535] udevd[10535]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system [ 421.769863][T10535] udevd[10535]: symlink '../../loop7' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:7' failed: Read-only file system [ 421.838186][T10535] udevd[10535]: symlink '../../loop7' '/dev/disk/by-label/untitled.tmp-b7:7' failed: Read-only file system [ 421.853179][T10535] udevd[10535]: symlink '../../loop7' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:7' failed: Read-only file system [ 422.625141][T10626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.627097][T10626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.637342][T10626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.654423][T10626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.656302][T10626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.659070][T10811] loop5: detected capacity change from 0 to 256 [ 422.748262][T10626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.865451][T10819] udc-core: couldn't find an available UDC or it's busy [ 422.867693][T10819] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 422.922440][T10626] device hsr_slave_0 entered promiscuous mode [ 422.943471][T10626] device hsr_slave_1 entered promiscuous mode [ 423.050917][T10825] loop5: detected capacity change from 0 to 128 [ 423.142960][T10535] udevd[10535]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system [ 423.159593][T10825] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 423.225599][T10825] fscrypt (loop5, inode 12): Direct key flag not allowed with different contents and filenames modes [ 423.238172][T10535] udevd[10535]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system [ 426.167539][T10878] bridge0: port 3(gretap0) entered blocking state [ 426.167832][T10878] bridge0: port 3(gretap0) entered disabled state [ 426.182034][T10878] device gretap0 entered promiscuous mode [ 428.136452][T10626] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 428.232390][T10626] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 429.217893][T10626] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 429.252887][T10908] hub 9-0:1.0: USB hub found [ 429.254751][T10908] hub 9-0:1.0: 8 ports detected [ 429.535827][T10626] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 431.328024][T10924] loop5: detected capacity change from 0 to 512 [ 431.434403][T10535] udevd[10535]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 431.464755][T10626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.490844][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 431.493657][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 431.500170][T10626] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.516149][T10935] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1917'. [ 431.518556][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 431.521268][T10930] input: syz1 as /devices/virtual/input/input8 [ 431.525188][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 431.528872][T10924] EXT4-fs (loop5): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 431.534206][ T7516] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.536252][ T7516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.571225][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 431.600183][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 431.619976][T10535] udevd[10535]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 431.623186][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 431.623719][ T7516] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.627554][ T7516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.651111][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 431.667286][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 431.704208][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 431.709342][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 431.723745][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 431.743979][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 431.767956][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 431.784796][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 431.803641][T10626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 431.825688][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 431.846303][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 431.849001][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 431.879630][T10949] loop5: detected capacity change from 0 to 1024 [ 431.886316][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 432.011205][T10949] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 432.013228][T10949] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 432.084692][T10949] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,nolazytime,debug_want_extra_isize=0x0000000000000080,dioread_nolock,nogrpid,noload,nomblk_io_submit,,errors=continue. Quota mode: none. [ 432.843266][T10535] udevd[10535]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 433.045177][T10535] udevd[10535]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 433.049512][T10626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.195612][T10978] No such timeout policy "syz0" [ 433.650553][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 433.652912][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 433.788055][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 433.797887][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 433.811815][T10988] udc-core: couldn't find an available UDC or it's busy [ 433.813779][T10988] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 433.862666][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 433.865634][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 433.868530][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 433.885734][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 433.901371][T10626] device veth0_vlan entered promiscuous mode [ 433.921055][T10626] device veth1_vlan entered promiscuous mode [ 433.992453][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 433.995412][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 434.032625][T10626] device veth0_macvtap entered promiscuous mode [ 434.049021][T10626] device veth1_macvtap entered promiscuous mode [ 434.101465][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.109285][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.115608][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.122630][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.125285][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.128327][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.139361][T10626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.157633][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 434.170877][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 434.178393][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 434.191376][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 434.308155][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.314467][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.335227][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.363690][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.366475][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.369287][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.380744][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.383564][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.191789][T10626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.201404][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 435.204500][ T4139] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 435.235022][T10626] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.237480][T10626] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.239833][T10626] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.259080][T10626] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.299412][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.320519][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.361878][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 436.390552][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.393630][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.398498][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 436.457647][T11047] loop5: detected capacity change from 0 to 2048 [ 436.507809][T11059] loop7: detected capacity change from 0 to 164 [ 436.586364][T11059] Unable to read rock-ridge attributes [ 436.595746][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1952'. [ 436.602197][T10535] udevd[10535]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 436.626988][T10545] udevd[10545]: symlink '../../loop7' '/dev/disk/by-label/CDROM.tmp-b7:7' failed: Read-only file system [ 436.633839][T10545] udevd[10545]: symlink '../../loop7' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:7' failed: Read-only file system [ 436.649787][T11047] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 436.673881][T10535] udevd[10535]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 437.519739][T11075] loop7: detected capacity change from 0 to 8 [ 438.273206][ T2057] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.275652][ T2057] ieee802154 phy1 wpan1: encryption failed: -22 [ 438.668761][T11102] overlayfs: missing 'lowerdir' [ 438.818084][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 438.818096][ T26] audit: type=1326 audit(439.766:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.5.1965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab371d28 code=0x7ffc0000 [ 438.833213][ T26] audit: type=1326 audit(439.776:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.5.1965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffab371d28 code=0x7ffc0000 [ 438.858686][ T26] audit: type=1326 audit(439.776:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.5.1965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab371d28 code=0x7ffc0000 [ 438.890715][ T26] audit: type=1326 audit(439.776:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.5.1965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=25 compat=0 ip=0xffffab371d28 code=0x7ffc0000 [ 438.923450][ T26] audit: type=1326 audit(439.776:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.5.1965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab371d28 code=0x7ffc0000 [ 438.942316][ T26] audit: type=1326 audit(439.786:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.5.1965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=25 compat=0 ip=0xffffab371d28 code=0x7ffc0000 [ 438.955376][ T26] audit: type=1326 audit(439.786:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.5.1965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab371d28 code=0x7ffc0000 [ 438.982800][ T26] audit: type=1326 audit(439.786:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.5.1965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=25 compat=0 ip=0xffffab371d28 code=0x7ffc0000 [ 439.889067][ T26] audit: type=1326 audit(439.786:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11115 comm="syz.5.1965" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab371d28 code=0x7ffc0000 [ 440.077167][T11142] loop7: detected capacity change from 0 to 512 [ 440.122642][T11143] loop5: detected capacity change from 0 to 128 [ 440.239926][T11149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1972'. [ 440.333525][ T4620] attempt to access beyond end of device [ 440.333525][ T4620] loop5: rw=1, want=929, limit=128 [ 440.425406][T11164] overlayfs: missing 'lowerdir' [ 440.508034][T11172] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1977'. [ 440.520963][T11168] loop7: detected capacity change from 0 to 2048 [ 440.530906][T11172] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 440.565497][T11176] netlink: 'syz.3.1978': attribute type 1 has an invalid length. [ 440.592824][T11176] netlink: 'syz.3.1978': attribute type 2 has an invalid length. [ 440.608967][T10535] udevd[10535]: symlink '../../loop7' '/dev/disk/by-label/syzkaller.tmp-b7:7' failed: Read-only file system [ 440.636196][T11168] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none. [ 440.724133][ T153] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 440.743369][ T153] EXT4-fs (loop7): Remounting filesystem read-only [ 440.875417][T11199] loop7: detected capacity change from 0 to 16 [ 440.918546][T11199] erofs: (device loop7): mounted with root inode @ nid 36. [ 441.145909][T11206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1987'. [ 441.261985][T10535] udevd[10535]: symlink '../../loop7' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:7' failed: Read-only file system [ 441.320552][T11206] device hsr_slave_1 left promiscuous mode [ 441.404290][T11213] overlayfs: missing 'lowerdir' [ 442.212956][T11258] overlayfs: unrecognized mount option "/" or missing value [ 444.514544][T11315] chnl_net:caif_netlink_parms(): no params data found [ 444.710466][T11315] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.712565][T11315] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.715280][T11315] device bridge_slave_0 entered promiscuous mode [ 444.719849][T11315] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.723569][T11315] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.726254][T11315] device bridge_slave_1 entered promiscuous mode [ 444.763003][T11315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.767860][T11315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.815512][T11315] team0: Port device team_slave_0 added [ 444.819919][T11315] team0: Port device team_slave_1 added [ 444.842059][T11315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.844138][T11315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.860058][T11315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.865575][T11315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.867498][T11315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.883958][T11315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.962285][T11315] device hsr_slave_0 entered promiscuous mode [ 445.000729][T11315] device hsr_slave_1 entered promiscuous mode [ 445.070647][T11315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.073082][T11315] Cannot create hsr debugfs directory [ 445.557610][ T333] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.628866][ T333] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.726534][ T333] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.785569][T11342] loop5: detected capacity change from 0 to 512 [ 445.807798][T11342] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 445.818989][T11342] EXT4-fs (loop5): invalid journal inode [ 445.836567][T11342] EXT4-fs (loop5): can't get journal size [ 445.842241][ T333] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.872961][T11342] EXT4-fs (loop5): 1 truncate cleaned up [ 445.874535][T11342] EXT4-fs (loop5): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none. [ 445.923044][T11342] EXT4-fs warning (device loop5): verify_group_input:147: Cannot add at group 186 (only 1 groups) [ 445.941239][T10545] udevd[10545]: symlink '../../loop5' '/dev/disk/by-label/\x86\x5b.tmp-b7:5' failed: Read-only file system [ 445.997736][T11352] overlayfs: unrecognized mount option "/" or missing value [ 446.152423][T11315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 446.204567][T11346] chnl_net:caif_netlink_parms(): no params data found [ 446.366260][ T3606] Bluetooth: hci0: command 0x0409 tx timeout [ 446.498965][T11369] loop5: detected capacity change from 0 to 512 [ 446.527297][T11315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 446.628658][T11369] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nouid32,minixdf,,errors=continue. Quota mode: writeback. [ 446.639863][T10535] udevd[10535]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system [ 446.671999][T11315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 446.713511][T11315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 446.887231][T11397] overlayfs: failed to clone lowerpath [ 446.931652][T11400] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2034'. [ 446.934312][T11400] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2034'. [ 446.937308][T11346] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.939921][T11346] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.946069][T11346] device bridge_slave_0 entered promiscuous mode [ 446.971747][T11346] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.973996][T11346] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.977617][T11346] device bridge_slave_1 entered promiscuous mode [ 446.977956][T11402] loop5: detected capacity change from 0 to 16 [ 447.035454][T11346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.057175][T11346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.074138][T11402] erofs: (device loop5): mounted with root inode @ nid 36. [ 447.134163][T11315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.253103][T11346] team0: Port device team_slave_0 added [ 447.256720][T11346] team0: Port device team_slave_1 added [ 447.303480][T10545] udevd[10545]: symlink '../../loop5' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:5' failed: Read-only file system [ 447.341375][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 447.346680][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 447.361876][T11346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.363811][T11346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.396296][T11346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.425735][T11315] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.448786][T11346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.454645][T11346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.456898][T11416] loop7: detected capacity change from 0 to 128 [ 447.497223][T11416] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 447.520786][T11346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.527848][T11416] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 447.578114][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 447.583606][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 447.586450][ T7537] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.588399][ T7537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.637970][T11427] overlayfs: failed to clone lowerpath [ 447.643677][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 447.646357][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 447.649339][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 447.656739][ T7537] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.658763][ T7537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.663096][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 447.753353][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 447.756758][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 447.776258][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 447.781422][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 447.792218][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 447.795078][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 447.800599][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 447.803462][ T7537] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 447.979261][T11315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 447.989611][T11315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 448.001008][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 448.003534][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 448.025154][ T3606] Bluetooth: hci3: command 0x0409 tx timeout [ 448.054274][T11346] device hsr_slave_0 entered promiscuous mode [ 448.111549][T11346] device hsr_slave_1 entered promiscuous mode [ 448.142102][T11346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.144766][T11346] Cannot create hsr debugfs directory [ 448.337212][T11462] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2052'. [ 448.379784][T11464] overlayfs: failed to clone lowerpath [ 448.413166][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 448.415343][ T544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 448.438620][T11315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.459338][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 448.606969][ T333] device hsr_slave_0 left promiscuous mode [ 448.738676][ T333] device hsr_slave_1 left promiscuous mode [ 448.842015][ T333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.844922][ T333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.855501][ T333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.857641][ T333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.891660][ T333] device bridge_slave_1 left promiscuous mode [ 448.893687][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.973857][ T333] device bridge_slave_0 left promiscuous mode [ 448.975950][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.140651][ T333] device veth1_macvtap left promiscuous mode [ 449.142776][ T333] device veth0_macvtap left promiscuous mode [ 449.144707][ T333] device veth1_vlan left promiscuous mode [ 449.146505][ T333] device veth0_vlan left promiscuous mode [ 449.358503][T11508] loop5: detected capacity change from 0 to 128 [ 449.827694][ T333] team0 (unregistering): Port device team_slave_1 removed [ 449.855514][ T333] team0 (unregistering): Port device team_slave_0 removed [ 449.867351][ T333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.955161][ T333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 450.040413][ T6772] Bluetooth: hci3: command 0x041b tx timeout [ 450.217343][ T333] bond0 (unregistering): Released all slaves [ 450.496712][T11492] netlink: 666 bytes leftover after parsing attributes in process `syz.7.2062'. [ 450.510478][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 450.789706][T11550] loop5: detected capacity change from 0 to 512 [ 450.802932][T11315] device veth0_vlan entered promiscuous mode [ 450.847588][T11315] device veth1_vlan entered promiscuous mode [ 450.882497][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 450.886411][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 450.890234][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 450.900722][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 450.907526][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 450.928968][T10535] udevd[10535]: symlink '../../loop5' '/dev/disk/by-label/\x86\x5b.tmp-b7:5' failed: Read-only file system [ 451.676171][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 451.701341][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 451.711935][ T7516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 451.726359][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 451.729290][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 451.774079][T11315] device veth0_macvtap entered promiscuous mode [ 451.778983][T11315] device veth1_macvtap entered promiscuous mode [ 451.855154][T11569] loop7: detected capacity change from 0 to 16 [ 451.863572][T11315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.866398][T11315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.869054][T11315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.902759][T11315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.905503][T11315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.908278][T11315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.924472][T11315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.935038][T11569] erofs: (device loop7): mounted with root inode @ nid 36. [ 451.939749][T10535] udevd[10535]: symlink '../../loop7' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:7' failed: Read-only file system [ 451.945023][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 451.947858][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 451.951624][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 451.962122][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 451.974240][T11315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.977242][T11315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.979861][T11315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.026456][T11315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.029150][T11315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.052828][T11315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.055508][T11315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.058213][T11315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.065859][T10535] udevd[10535]: symlink '../../loop7' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:7' failed: Read-only file system [ 452.323866][T11315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.357193][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 452.361122][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 452.378021][T11315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.392994][T11315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.404126][T11315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.417091][T11315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.606662][ T3606] Bluetooth: hci3: command 0x040f tx timeout [ 452.612610][ T4083] Bluetooth: hci0: command 0x0419 tx timeout [ 452.638599][T11346] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 452.713017][T11346] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 452.770995][T11346] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 452.825780][ T4620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.834849][ T4620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.841462][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 452.853612][T11346] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 452.969339][ T7516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.980078][ T7516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.032736][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 453.284381][T11599] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 453.378622][T11346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.458072][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 453.461236][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 453.490875][T11346] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.530993][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 453.534038][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 453.539170][ T4620] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.542634][ T4620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.565058][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 453.570123][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 453.579635][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 453.590070][ T4620] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.592165][ T4620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.763723][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 453.788979][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 453.882855][T11623] netlink: 'syz.4.2094': attribute type 32 has an invalid length. [ 453.885247][T11623] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2094'. [ 454.615110][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 454.623310][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 454.647100][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 454.690817][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 454.700477][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 454.703487][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 454.706309][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 454.708875][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 454.716297][T11629] loop5: detected capacity change from 0 to 16 [ 454.729214][T11346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 454.741159][T11346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 454.744181][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 454.747082][ T1724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 455.026740][T11629] erofs: (device loop5): mounted with root inode @ nid 36. [ 455.250137][T10535] udevd[10535]: symlink '../../loop5' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:5' failed: Read-only file system [ 456.318447][T11654] devtmpfs: Unknown parameter 'nr_ble' [ 456.396149][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 456.398398][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 456.440952][T11346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.494994][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 456.498130][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 456.552950][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 456.555779][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 456.567159][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 456.583859][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 456.606821][T11346] device veth0_vlan entered promiscuous mode [ 456.635986][T11346] device veth1_vlan entered promiscuous mode [ 456.727134][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 456.775700][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 456.791220][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 456.799380][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 457.655729][T11346] device veth0_macvtap entered promiscuous mode [ 457.662287][T11346] device veth1_macvtap entered promiscuous mode [ 458.253518][ T26] audit: type=1326 audit(459.206:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11682 comm="syz.5.2109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab371d28 code=0x7ffc0000 [ 458.269669][ T26] audit: type=1326 audit(459.216:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11682 comm="syz.5.2109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab371d28 code=0x7ffc0000 [ 458.326668][ T26] audit: type=1326 audit(459.216:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11682 comm="syz.5.2109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffab371d28 code=0x7ffc0000 [ 458.336041][T11685] loop4: detected capacity change from 0 to 16 [ 458.373451][ T26] audit: type=1326 audit(459.216:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11682 comm="syz.5.2109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab371d28 code=0x7ffc0000 [ 458.382117][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 458.385307][ T4620] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 458.426936][T11685] erofs: (device loop4): mounted with root inode @ nid 36. [ 458.444740][ T26] audit: type=1326 audit(459.216:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11682 comm="syz.5.2109" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffab371d28 code=0x7ffc0000 [ 458.468363][T11346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.480538][T11346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.483196][T11346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.496933][T11346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.505287][T11346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.518574][T11346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.528721][T11346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 458.554693][T11346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.586156][T11346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.621461][T11346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.624294][T11346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.626870][T11346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.629529][T11346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.632342][T11346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.635033][T11346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.637643][T11346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.645587][T11346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.648197][T11346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.772493][T11346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.788853][T11346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.801547][ T7543] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 458.819492][ T7543] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 458.825921][ T7543] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 458.848442][ T7543] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 459.109193][T11346] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.112600][T11346] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.114895][T11346] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.123550][T11346] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.366023][T11710] input: syz1 as /devices/virtual/input/input10 [ 459.447410][ T4620] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.447469][ T4620] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.482928][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 459.508663][ T7543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.508713][ T7543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.510960][ T7543] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 459.897135][T11740] loop4: detected capacity change from 0 to 16 [ 460.025529][T11740] erofs: (device loop4): mounted with root inode @ nid 36. [ 460.195729][T11605] ================================================================== [ 460.198389][T11605] BUG: KASAN: use-after-free in __mutex_lock_common+0xbb4/0x2154 [ 460.200552][T11605] Read of size 8 at addr ffff0000cd624060 by task khidpd_05c25886/11605 [ 460.202877][T11605] [ 460.203520][T11605] CPU: 0 PID: 11605 Comm: khidpd_05c25886 Not tainted 5.15.178-syzkaller #0 [ 460.206000][T11605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 460.208746][T11605] Call trace: [ 460.209634][T11605] dump_backtrace+0x0/0x530 [ 460.210919][T11605] show_stack+0x2c/0x3c [ 460.212055][T11605] dump_stack_lvl+0x108/0x170 [ 460.213321][T11605] print_address_description+0x7c/0x3f0 [ 460.214896][T11605] kasan_report+0x174/0x1e4 [ 460.216126][T11605] __asan_report_load8_noabort+0x44/0x50 [ 460.217621][T11605] __mutex_lock_common+0xbb4/0x2154 [ 460.219083][T11605] mutex_lock_nested+0xa4/0xf8 [ 460.220396][T11605] l2cap_unregister_user+0x74/0x190 [ 460.221983][T11605] hidp_session_thread+0x474/0x528 [ 460.223434][T11605] kthread+0x37c/0x45c [ 460.224570][T11605] ret_from_fork+0x10/0x20 [ 460.225812][T11605] [ 460.226453][T11605] Allocated by task 11346: [ 460.227611][T11605] ____kasan_kmalloc+0xbc/0xfc [ 460.228858][T11605] __kasan_kmalloc+0x10/0x1c [ 460.230087][T11605] __kmalloc+0x29c/0x4c8 [ 460.231244][T11605] hci_alloc_dev_priv+0x30/0x18b0 [ 460.232580][T11605] vhci_create_device+0xf8/0x568 [ 460.233959][T11605] vhci_write+0x318/0x3b8 [ 460.235153][T11605] vfs_write+0x884/0xb44 [ 460.236337][T11605] ksys_write+0x15c/0x26c [ 460.237534][T11605] __arm64_sys_write+0x7c/0x90 [ 460.238852][T11605] invoke_syscall+0x98/0x2b8 [ 460.240100][T11605] el0_svc_common+0x138/0x258 [ 460.241450][T11605] do_el0_svc+0x58/0x14c [ 460.242596][T11605] el0_svc+0x7c/0x1f0 [ 460.243739][T11605] el0t_64_sync_handler+0x84/0xe4 [ 460.245159][T11605] el0t_64_sync+0x1a0/0x1a4 [ 460.246405][T11605] [ 460.247039][T11605] Freed by task 11346: [ 460.248161][T11605] kasan_set_track+0x4c/0x84 [ 460.249488][T11605] kasan_set_free_info+0x28/0x4c [ 460.250864][T11605] ____kasan_slab_free+0x118/0x164 [ 460.252262][T11605] __kasan_slab_free+0x18/0x28 [ 460.253656][T11605] slab_free_freelist_hook+0x128/0x1ec [ 460.255253][T11605] kfree+0x178/0x410 [ 460.256415][T11605] hci_release_dev+0x1004/0x116c [ 460.257928][T11605] bt_host_release+0x70/0x88 [ 460.259187][T11605] device_release+0x8c/0x1ac [ 460.260480][T11605] kobject_put+0x2c4/0x438 [ 460.261732][T11605] put_device+0x28/0x40 [ 460.262941][T11605] hci_free_dev+0x24/0x34 [ 460.264176][T11605] vhci_release+0x7c/0xc4 [ 460.265339][T11605] __fput+0x1c4/0x800 [ 460.266427][T11605] ____fput+0x20/0x30 [ 460.267501][T11605] task_work_run+0x130/0x1e4 [ 460.268790][T11605] do_exit+0x670/0x20bc [ 460.269908][T11605] do_group_exit+0x110/0x268 [ 460.271180][T11605] __wake_up_parent+0x0/0x60 [ 460.272488][T11605] invoke_syscall+0x98/0x2b8 [ 460.273743][T11605] el0_svc_common+0x138/0x258 [ 460.275020][T11605] do_el0_svc+0x58/0x14c [ 460.276144][T11605] el0_svc+0x7c/0x1f0 [ 460.277219][T11605] el0t_64_sync_handler+0x84/0xe4 [ 460.278608][T11605] el0t_64_sync+0x1a0/0x1a4 [ 460.279800][T11605] [ 460.280410][T11605] Last potentially related work creation: [ 460.281996][T11605] kasan_save_stack+0x38/0x68 [ 460.283250][T11605] kasan_record_aux_stack+0xd4/0x11c [ 460.284654][T11605] insert_work+0x64/0x394 [ 460.285815][T11605] __queue_work+0xb84/0x114c [ 460.287056][T11605] queue_work_on+0xc4/0x17c [ 460.288294][T11605] hci_cmd_timeout+0x1d0/0x204 [ 460.289561][T11605] process_one_work+0x790/0x11b8 [ 460.290880][T11605] worker_thread+0x910/0x1034 [ 460.292116][T11605] kthread+0x37c/0x45c [ 460.293234][T11605] ret_from_fork+0x10/0x20 [ 460.294403][T11605] [ 460.295029][T11605] Second to last potentially related work creation: [ 460.296828][T11605] kasan_save_stack+0x38/0x68 [ 460.298126][T11605] kasan_record_aux_stack+0xd4/0x11c [ 460.299547][T11605] insert_work+0x64/0x394 [ 460.300700][T11605] __queue_work+0xb84/0x114c [ 460.301955][T11605] delayed_work_timer_fn+0x74/0x90 [ 460.303381][T11605] call_timer_fn+0x19c/0x8f0 [ 460.304604][T11605] __run_timers+0x584/0x718 [ 460.305810][T11605] run_timer_softirq+0x7c/0x114 [ 460.307123][T11605] handle_softirqs+0x384/0xdbc [ 460.308445][T11605] __irq_exit_rcu+0x268/0x4d8 [ 460.309724][T11605] irq_exit+0x14/0x88 [ 460.310823][T11605] handle_domain_irq+0xf4/0x178 [ 460.312137][T11605] gic_handle_irq+0x78/0x1c8 [ 460.313334][T11605] [ 460.314019][T11605] The buggy address belongs to the object at ffff0000cd624000 [ 460.314019][T11605] which belongs to the cache kmalloc-8k of size 8192 [ 460.317869][T11605] The buggy address is located 96 bytes inside of [ 460.317869][T11605] 8192-byte region [ffff0000cd624000, ffff0000cd626000) [ 460.321766][T11605] The buggy address belongs to the page: [ 460.323368][T11605] page:00000000a6f9c2f9 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d620 [ 460.326146][T11605] head:00000000a6f9c2f9 order:3 compound_mapcount:0 compound_pincount:0 [ 460.328527][T11605] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 460.330837][T11605] raw: 05ffc00000010200 0000000000000000 0000000100000001 ffff0000c0002c00 [ 460.333260][T11605] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 460.335655][T11605] page dumped because: kasan: bad access detected [ 460.337400][T11605] [ 460.338036][T11605] Memory state around the buggy address: [ 460.339590][T11605] ffff0000cd623f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 460.341802][T11605] ffff0000cd623f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 460.343977][T11605] >ffff0000cd624000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 460.346191][T11605] ^ [ 460.348127][T11605] ffff0000cd624080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 460.350292][T11605] ffff0000cd624100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 460.352514][T11605] ================================================================== [ 460.354702][T11605] Disabling lock debugging due to kernel taint SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 461.444279][ T333] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.495120][ T333] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.565137][ T333] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.661474][ T333] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.851664][ T333] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.890205][ T333] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.935303][ T333] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.990961][ T333] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.175380][ T333] device hsr_slave_0 left promiscuous mode [ 464.220798][ T333] device hsr_slave_1 left promiscuous mode [ 464.320623][ T333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.322894][ T333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.325481][ T333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.327546][ T333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.329925][ T333] device bridge_slave_1 left promiscuous mode [ 464.333438][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.371244][ T333] device bridge_slave_0 left promiscuous mode [ 464.373142][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.414203][ T333] device hsr_slave_0 left promiscuous mode [ 464.460497][ T333] device hsr_slave_1 left promiscuous mode [ 464.550657][ T333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.553029][ T333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.558401][ T333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.560926][ T333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.563420][ T333] device bridge_slave_1 left promiscuous mode [ 464.565155][ T333] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.611170][ T333] device bridge_slave_0 left promiscuous mode [ 464.613039][ T333] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.751783][ T333] device veth1_macvtap left promiscuous mode [ 464.753555][ T333] device veth0_macvtap left promiscuous mode [ 464.755168][ T333] device veth1_vlan left promiscuous mode [ 464.757079][ T333] device veth0_vlan left promiscuous mode [ 464.830528][ T333] device veth1_macvtap left promiscuous mode [ 464.832190][ T333] device veth0_macvtap left promiscuous mode [ 464.833785][ T333] device veth1_vlan left promiscuous mode [ 464.835559][ T333] device veth0_vlan left promiscuous mode [ 465.053424][ T333] team0 (unregistering): Port device team_slave_1 removed [ 465.059435][ T333] team0 (unregistering): Port device team_slave_0 removed [ 465.066439][ T333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.116015][ T333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.248412][ T333] bond0 (unregistering): Released all slaves [ 465.399022][ T333] team0 (unregistering): Port device team_slave_1 removed [ 465.407494][ T333] team0 (unregistering): Port device team_slave_0 removed [ 465.413385][ T333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.446463][ T333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.547685][ T333] bond0 (unregistering): Released all slaves [ 468.777996][ T1724] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.825532][ T1724] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.866762][ T1724] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.915214][ T1724] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.064863][ T1724] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.067824][ T1724] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 469.124566][ T1724] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.127465][ T1724] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 469.175695][ T1724] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.178551][ T1724] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 469.228285][ T1724] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.231175][ T1724] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0