last executing test programs: 8m21.036560355s ago: executing program 3 (id=4): unshare(0x26020480) syz_emit_ethernet(0x5e, &(0x7f00000004c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback, @mcast2}}}}}}, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) 8m20.933167237s ago: executing program 3 (id=6): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed002889fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 8m20.699068185s ago: executing program 3 (id=7): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000054) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40080000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x12}, 0x80) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 8m5.115160807s ago: executing program 32 (id=7): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4000054) socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40080000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x12}, 0x80) r3 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 5m56.570686088s ago: executing program 0 (id=648): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) recvmsg$unix(r1, &(0x7f0000000240)={&(0x7f0000000680), 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000700)=""/123, 0x7b}, {&(0x7f0000000780)=""/71, 0x47}, {&(0x7f0000000880)=""/78, 0x4e}, {0x0}], 0x4, &(0x7f0000000cc0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffff6eb, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0x52}]}, &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}}], {0x14}}, 0x7c}}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, 0x0, &(0x7f0000000500)) r6 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r6, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4ea4, 0x0, @local, 0x9}, 0x1c) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5m56.026693743s ago: executing program 0 (id=651): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000a00)={@local, @link_local, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x2, 0x24, 0x65, 0x0, 0x2, 0x21, 0x0, @private=0xa010102, @empty}, {{0x4e24, 0x4e20, 0x4, 0x1, 0x7, 0x0, 0x0, 0x6, 0x0, "a95f5f", 0x1, "5893f9"}}}}}}, 0x0) 5m55.355011563s ago: executing program 0 (id=657): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) 1m44.689996762s ago: executing program 6 (id=1297): mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1, &(0x7f00000000c0)=0x200, 0x4) bind$inet(r3, 0x0, 0x0) 1m41.74266982s ago: executing program 6 (id=1304): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20) sendmsg$inet(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000600)="9b359b1843", 0x5}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="98000000"], 0x98}, 0x4000000) 1m40.860391164s ago: executing program 6 (id=1305): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {0x20}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 1m40.678763502s ago: executing program 6 (id=1306): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x4, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x24, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) 1m39.115752815s ago: executing program 6 (id=1311): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000000000000000400000000001b23072a7054b2a30000100002000000000020000000"], 0x24, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socket$netlink(0x10, 0x3, 0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7", 0x14}], 0x1}}], 0x1, 0x0) socket$inet6(0xa, 0x805, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900049000000000000000e5ffff0800040000000000000000", 0x39}], 0x1) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1m23.990632508s ago: executing program 34 (id=1311): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000000000000000400000000001b23072a7054b2a30000100002000000000020000000"], 0x24, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) socket$netlink(0x10, 0x3, 0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f00000000c0)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000500)="8fc8bf70342c6d1600bae5de9614410848dd95e7", 0x14}], 0x1}}], 0x1, 0x0) socket$inet6(0xa, 0x805, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900049000000000000000e5ffff0800040000000000000000", 0x39}], 0x1) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1m12.209027943s ago: executing program 1 (id=1396): socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000a40)={[{@iocharset={'iocharset', 0x3d, 'cp857'}}, {@fmask={'fmask', 0x3d, 0x68e7}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@fmask={'fmask', 0x3d, 0x5}}, {@umask={'umask', 0x3d, 0x7fffffffffffffff}}, {@gid}, {@dmask={'dmask', 0x3d, 0x1}}, {@errors_continue}, {}], [{@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@obj_role}, {@obj_role}, {@obj_type={'obj_type', 0x3d, '9p\x00'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0xa, 0x10001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {0x20}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 1m10.181026054s ago: executing program 1 (id=1401): syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x1) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x2, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x1000, r3}, 0x38) 1m8.911764309s ago: executing program 1 (id=1403): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000240)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x8, r2, 0xfffffffc}, 0x10) 1m7.088029666s ago: executing program 1 (id=1408): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) 1m6.908449644s ago: executing program 1 (id=1409): r0 = socket(0x1, 0x1, 0x0) write$binfmt_misc(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f00000004c0)="$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") socketpair(0x4, 0x80807, 0x11, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") 1m5.320302473s ago: executing program 1 (id=1414): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x1, 0x4) 50.225584631s ago: executing program 35 (id=1414): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x1, 0x4) 50.093718178s ago: executing program 7 (id=1352): syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x800000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fsync(0xffffffffffffffff) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x1) brk(0x689d80000003) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x2, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) tkill(r0, 0x19) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000540)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x6e3, 0x6, 0x6, 0x4, 0x8}}, 0x118) syz_socket_connect_nvme_tcp() bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 48.557060906s ago: executing program 7 (id=1448): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x152) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) 48.279204567s ago: executing program 7 (id=1449): setresuid(0x0, 0xee00, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)='1', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r2, r3}}}], 0x20, 0x40044}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r1, &(0x7f0000000500)=ANY=[], 0x78) splice(r0, 0x0, r4, 0x0, 0x39000, 0x0) 47.727844748s ago: executing program 7 (id=1450): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 46.854852625s ago: executing program 36 (id=1450): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) 16.711823948s ago: executing program 5 (id=1508): syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000200)='./file0\x00', 0x2800080, &(0x7f0000001280)=ANY=[], 0xff, 0x22f, &(0x7f0000000b00)="$eJzsmb9rFEEUx7+zu/crhICNhY2FB0Y0e7t7KkFIEcFeiD+7HGYNMZtc2Fv1LiAm2NhYWgi2/gMWFqks7OxstdCAYGE67QIjM/eyO9ncHa4xWPg+kMl33s6bfTOz+z24A8Mw/y3bX35+fnZ5+to5AOOoo0Lxb3Y2xjLGf3px/+zzmSsvX3989W514tFWfr5KwfuPA3g7ayNBTfellNK8XtetcFQVdYpdh4UzSkxQgDLmYeEGhUII3CZ9z9DtGokodO+0o4W7S1HoqcZXTaCapnl/B8DOpsACgCrVJ4zrnd76ciuKwngDgBYUKcm9+8TpmD8Uo/ZP1zdrYYb6NTqvW0+fbKq+S3HP2D8fFnzSTQjMkZ5GBa7rZltirP+Eg/R87EHrzwlVxyGXTcLOR7q5MfPbw9KPTe2PlPEX6tl3MGLkJvyWKB0u/V8JgWX1SMSdXnXU4JsPotpRLbBED2LRdJGPqFNMI8d3tt4fzPpqROTjQTMLYCPu9H6s9YsatGOjX5kjE9q4cvakxYexLLJn3EVmLlPOwDGZPyn3Po3MPxw4qX80kpW1Rqe3PrW00loMF8PVIGhe9M573oWgoY2o3x7wvd3U/6ran8aM+UtDvLIsyui2kiT2u0AS+2k/6LfGiz33pv1d51ja/yxMnurPoQ5RL3vIB52gP0v/F7sSk/aQchiGYRiGYRiGYRiGYRiGYQpyEkJ/C0o/VMkcgLz0UEoZXNWjfwUAAP//bpBKqw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00'}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)) ftruncate(0xffffffffffffffff, 0x5) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 14.875713633s ago: executing program 4 (id=1511): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0x2f0}]}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000600)="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", 0x1000}], 0x1, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES8=r1, @ANYRES8=r1], 0x38}, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000240)=0xfffff800) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x152) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x63, 0x62, 0x32, 0x30, 0x65, 0x32, 0x31, 0x35, 0x37, 0x37, 0x30, 0x61, 0x61, 0x38, 0x39, 0x36]}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e94937920fcba13ce0af61beaa44d66a6535daf1bc35fb3af1e9197d71d26589d077c88184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r6, 0xffffffffffffffff) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 14.477579063s ago: executing program 5 (id=1513): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) syz_usb_connect(0x0, 0x6b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703440001a53011240606040508000400050006000100050924030506030501f909240702020005cbad0924030601010303df092403010303030605f7"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) syz_open_procfs(r2, 0x0) setitimer(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000080)={[{@orlov}, {@usrjquota}]}, 0x3, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x1) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./bus\x00', 0x0, 0x1c10, 0x0) r3 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000080)=0x3f) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xe7c) lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r5, &(0x7f0000000540), 0xfffffdd8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 13.142919927s ago: executing program 4 (id=1514): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000000000000000400000000001b23072a7054b2a300001000020000000000200000000000"], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x0) 10.61894666s ago: executing program 5 (id=1516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0xfffffffe, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x8000, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x40000000, 0x0, 0xfffff800}, {0x3}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x8, 0x0, 0x3}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x8000000}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0xce4d, 0x0, 0x8000}, {0x0, 0x8000, 0x0, 0xe}, {0x3, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x1, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x2}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5, 0x1}, {}, {0x1}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 10.609798248s ago: executing program 2 (id=1517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_aout(r4, &(0x7f0000000940)=ANY=[], 0x120) fcntl$lock(r4, 0x24, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000000c0)={0xf, 0x3, 0x7, 0x200}, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000d4c444f60010"], 0x14}}, 0x20008080) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = syz_io_uring_setup(0x2e06, &(0x7f00000002c0)={0x0, 0x2669, 0x40, 0x3, 0x217}, 0x0, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, 0x0, 0x0) ioctl$KDGKBDIACR(r5, 0x4b4a, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800004c29617d7b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r10, r8}, 0x14) syz_emit_ethernet(0x66, &(0x7f0000000700)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @tipc_packet={0x7, 0x6, "d17670", 0x2c, 0x6, 0x0, @remote, @rand_addr=' \x01\x00', {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x1, 0x0, 0xb, 0x3, 0x2, 0xf6a, 0x0, 0x0, 0x4, 0x4, 0x1, 0x400, 0xf9db, 0x1, 0x4e23, 0x4e23}, 0x1, 0x1}, 0x0, 0x1}, 0x3}}}}}}}}, 0x0) socket(0x10, 0x3, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x42242, 0x73) socket$packet(0x11, 0x3, 0x300) 9.066592555s ago: executing program 4 (id=1518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000001073012d0000000000950000000000000052594c316f8f62d8a9821ee237a765f2c94a82db47f7bdf5a46928f2a055bb76c7aa7bb369"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xf}, 0x94) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x10) ioctl$USBDEVFS_REAPURB(r3, 0x4008550c, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='1'], 0x31) 8.047790865s ago: executing program 4 (id=1519): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) 8.01957733s ago: executing program 4 (id=1520): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x21, 0x0, &(0x7f0000000580)) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x1800840, &(0x7f0000000100)={[{@numtail}, {@fat=@debug}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@shortname_mixed}, {@fat=@check_strict}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@shortname_winnt}, {@fat=@nfs}, {@shortname_win95}, {@uni_xlateno}, {@utf8no}, {@shortname_lower}, {@fat=@tz_utc}]}, 0x1, 0x360, &(0x7f0000000900)="$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") r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000300)={@rand_addr=0x64010101, 0x1, 0x0, 0x40, 0x0, [{@broadcast}, {}, {@initdev}, {}]}}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) socket$inet_udp(0x2, 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0) 7.065073911s ago: executing program 5 (id=1521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b0000080039503230"], 0x15) r2 = dup(r1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 6.980964896s ago: executing program 2 (id=1522): socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0x2f0}]}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, 0x0, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000600)="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", 0x1000}], 0x1, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES8=r1, @ANYRES8=r1], 0x38}, 0x0) sched_setscheduler(r1, 0x5, &(0x7f0000000240)=0xfffff800) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x152) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r6 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x63, 0x62, 0x32, 0x30, 0x65, 0x32, 0x31, 0x35, 0x37, 0x37, 0x30, 0x61, 0x61, 0x38, 0x39, 0x36]}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e94937920fcba13ce0af61beaa44d66a6535daf1bc35fb3af1e9197d71d26589d077c88184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r6, 0xffffffffffffffff) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 5.699722679s ago: executing program 2 (id=1523): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000080)={[], [{@appraise_type}]}, 0x3, 0x5fa, &(0x7f0000000c40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0xa) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r3 = socket(0x2d, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xa}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x8810) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x1) 5.25180995s ago: executing program 5 (id=1524): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000404e040c12000000000001090224000100005000090400fefd0300000009210400080122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x8, {[@global=@item_012={0x1, 0x1, 0x3, "a4"}, @local=@item_4={0x3, 0x2, 0xa, "fb898121"}, @global=@item_012={0x0, 0x1, 0xa}]}}, 0x0}, 0x0) 3.184401243s ago: executing program 8 (id=1445): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0xffffffffffffff90, &(0x7f0000000140)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffa, {0x0, 0x0, 0x0, r5, {0x3, 0xd}, {0xfff3}, {0xb, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20040004) 2.48416246s ago: executing program 2 (id=1525): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x16, 0x4, 0x8, 0x4}, 0x50) 2.407994326s ago: executing program 4 (id=1526): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff30, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000001000000000000000400000000001b23072a7054b2a300001000020000000000200000000000"], 0x24, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x0) 2.397417005s ago: executing program 2 (id=1527): syz_mount_image$erofs(&(0x7f0000001240), &(0x7f0000000200)='./file0\x00', 0x2800080, &(0x7f0000001280)=ANY=[], 0xff, 0x22f, &(0x7f0000000b00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'gre0\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000000c0)) ftruncate(0xffffffffffffffff, 0x5) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) 1.779764055s ago: executing program 5 (id=1528): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$SNDCTL_MIDI_INFO(0xffffffffffffffff, 0xc074510c, &(0x7f0000000180)={"ad1702e20a205718ebc5a7171ddf6e47d8e465b2dcfd17982d5863d5acae", 0x3, 0x95, 0x6, [0x7, 0x801, 0x1000, 0x8, 0x2, 0x40, 0x9, 0x5b96, 0xfffeffff, 0x7, 0x183, 0x6, 0x4, 0x200, 0xfffffffe, 0x0, 0xa0, 0x1000]}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000dc0)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x100400000000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x4d, 0x1}, 0x7) 1.332696226s ago: executing program 2 (id=1529): r0 = socket(0x1, 0x1, 0x0) write$binfmt_misc(r0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f00000004c0)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpq5rp3Hj1KX+fKRNZrzj7Hw9O/bsjDcBDKyx7EcSsTkifouIkUb2xgJjjV/Xrpyb+evKuZkk6vU3/kzyclevnJspi5bP29TI1OtFfl2b4154O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TVbfzcX+5jh6ZMNY49Vt66keH6zftjSlk2ofK0JXKhGRNddQ3v9HohIblvaNxMuf9rVywJqq1+v1dp/PhfN14B6WRL9rAPRH+UGfXf+W2x0aetwVLh+OeP9gI/5rxdbYU420KDPUcn3bS2MRceT8319mW6zNPAQAwA2+OxwRz7Ub/6XxYFO5/xVrKKMR8f+IuC8i7o+IrRHxQERe9qGIeLjL47eukNw8/kkv3VZgK5SN/14o1raWxn//1PP4C6OVIrclj38oOXq8NreneE12x9C6LD+5zDG+f+nXzzvtax7/ZVt2/HIs2JBeqrZM0M1OL06vMuwllz+J2F5tiT+XRLmMk0TEtojY3tVfvn6FcfyZr3d0KnXr+JfRg3Wm+lcRTzfa/3y0xF9KOq5PTh48MLV/Yn3U5vZMlGfFzX7+5cLrnY6/qvh7IGv/ja3nf24p/tFkfcTCmbMn8vXahWhdIb6lC79/1vGa5nbP/+HkzTw9XDz24fTi4unJiOHk1Zsfn7r+3CJfbY5/96528af5e1wZ7SMRkZ3EOyPi0Yh4rKj74xHxRETsWib+H1988t3u419mVr6Hsvhnb9X+0dz+3ScqJ374tvv4S1n778tTu4tHVvL+t9IKrua1AwAAgP+KNP8OfJKOL6XTdHy88R3+rbExrc0vLD57dP6DU7ON78qPxlBaznSNNM2HThZzw2V+qiW/t5g3/qKyIc+Pz8zXZvsdPAy4TR36f+aPSr9rB6w592vB4NL/YXDp/zC49H8YXPo/DK52/f/jPtQDuPN8/sPg0v9hcOn/MLj0fxhIHe+NT1d1y7/EPZ+ItPtnVaOvdU66+McQd0+iutZ1Xtd2V7/fmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHrj3wAAAP//TonqKA==") socketpair(0x4, 0x80807, 0x11, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) socket$inet6(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$eJzs3c9vFFUcAPDvzG5LKWgX40GMCTUeIDFsW0BB4gE8Gg8mkqAnXPuDNCxgaE0sIbHcTLyowZMnT2qiR6+GGPXkweiJ/8CQEFP4A2pmdras7W5LYcuQ9vNJZve9eSzvO02++9503nQC2LFGs5c0Yn9EfJ5EjBT704gYzEtDEYutf3dv6dpktiWxvPzOv0kkEXF36dpk+/9Kivc92Us1/2T89UvEM5W1/c4tXL3QaDanrxT1sfmLH47NLVw9PHuxcX76/PSlI6+OH5147diJV47d/9DQox3rwvH0sz/ffOO7G+e+/uPHEy98msSp2Fu0dR5Hv4zG6MrPpFM1It7rd2clqRTH0+04AQB48qQdc7j9MRKVvNQyEvXZUoMDAAAA+uKTiFgGAAAAtrnE+T8AAABsc+11AHeXrk22t3JXJACPy53TEVFr5X/7/v5WSzUW8/ehGIiI4XtJx51Brfu9a33ofzQifvjq+IFsiy26Dx/obvF6RDzXbfxP8vyvFX90Y3X+pxEx3of+R1fV5T88Pt3yv3VesHH+n+pD//IfAAAAAAAA+ufm6daF/LXX/9OV9T/R5fpfpcu1u4ex8fW/9HYfugG6uHM64vWOZ/vc68j/Qq1S1J7K1wMMJDOzzenxiHg6Ig7FwK6sPrFOH9/+dPLvXm2d6/+yLeu/vRawiON2ddf/PzPVmG88yjEDLXeuRzxf7Zb/ycr4n/RY//v2A/bx29mfZ3q1bZz/wFZZ/ibiYNfx//4T3ZL1n883ls8HxtqzgrXOvvjr9736l/9Qnmz8H14//2tJ5/M65zbfx/jw4fO92h52/j+YnMmfKjpY7Pu4MT9/ZSJiMHlr7f4jm48ZtqN2PrTzJcv/Qy91P/9fb/6fJdn7xbdEGhGN4j2rf7Cqz13nfv+iVzzGfyhPlv9Tmxr/N1/48t2lM736f7Dx/1g+ph8q9vj9H6zvQRO07DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgSZJGxN5I0vpKOU3r9Yg9EfFsDKfNy3PzL89c/ujSVNYWUYuBdGa2OT0eESOtepLVJ/Ly/fqRVfWjEbEvIm6M7M7r9cnLzamyDx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAVeyJibyRpPSLSvJym9Xqr7Z+RsqMDAAAA+qZWdgAAAADAlnP+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj2nfg5q0kIhZP7s63zGDRNlBqZMBWS8sOAChNpewAgNJUyw4AKI1zfCDZoH2oZ4sZBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBOcnD/zVtJRCye3J1vmcGibaDUyICtlpYdAFCaStkBAKWplh0AUBrn+ECyQftQzxYzCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdZG7h6oVGszl9RWHdQjUinoAwFBQeU6HsbyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2s/8CAAD//yT3/f8=") openat$tun(0xffffffffffffff9c, 0x0, 0x60004, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 1.323050215s ago: executing program 8 (id=1530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) 0s ago: executing program 8 (id=1531): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1000}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000300)=ANY=[], 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x4}) socket$tipc(0x1e, 0x3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000900)={0x10, 0x0, &(0x7f0000000740)=[@clear_death], 0x50, 0x0, &(0x7f0000000800)="8af1dee72f525df1eb061c923daa0cc770f21981497440d9c03b4442d8be854c8f86c7f55047d9f9397deae3d6a24da1caf3924da307346a7db012a607bfe81f4383a2bee3c1315624b908b15425e3f8"}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r8, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x4e20, @empty}}) kernel console output (not intermixed with test programs): , BSSID 5e:2b:70:c0:91:9f [ 206.918422][ T6382] BTRFS info (device loop0): using free space tree [ 207.093497][ T6382] BTRFS error (device loop0): open_ctree failed: -12 [ 207.144866][ T5622] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (5622) [ 209.485530][ T4281] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 209.494337][ T4281] Bluetooth: hci5: Injecting HCI hardware error event [ 209.502721][ T4281] Bluetooth: hci5: hardware error 0x00 [ 209.674922][ T6475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.603'. [ 210.579605][ T6493] loop5: detected capacity change from 0 to 512 [ 210.628596][ T6493] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 211.484014][ T4282] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 211.492740][ T4282] Bluetooth: hci2: Injecting HCI hardware error event [ 211.505794][ T4278] Bluetooth: hci2: hardware error 0x00 [ 211.563761][ T4281] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 212.181701][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 213.568994][ T4278] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 213.822684][ T6537] loop2: detected capacity change from 0 to 32768 [ 213.857586][ T6537] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.626 (6537) [ 213.934452][ T6537] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 213.986129][ T6537] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 214.003785][ T6537] BTRFS info (device loop2): using free space tree [ 214.300462][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.633'. [ 214.379983][ T6537] BTRFS info (device loop2): enabling ssd optimizations [ 214.563932][ T4268] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 217.621577][ T6621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.647'. [ 218.714617][ T6640] sctp: [Deprecated]: syz.5.653 (pid 6640) Use of int in maxseg socket option. [ 218.714617][ T6640] Use struct sctp_assoc_value instead [ 219.077232][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.655'. [ 220.067112][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.660'. [ 222.410733][ T6681] netlink: 12 bytes leftover after parsing attributes in process `syz.5.668'. [ 222.951532][ T6690] loop0: detected capacity change from 0 to 512 [ 223.304675][ T6690] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 223.563990][ T6690] loop0: detected capacity change from 512 to 0 [ 223.711180][ C1] I/O error, dev loop0, sector 42 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 223.735868][ T6699] EXT4-fs error (device loop0): __ext4_find_entry:1685: inode #2: comm syz.0.671: reading directory lblock 0 [ 223.831460][ T5388] loop: Write error at byte offset 9223372036854776831, length 1024. [ 223.844323][ C1] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 223.854023][ C1] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 223.864164][ C1] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 223.892786][ T6699] EXT4-fs (loop0): I/O error while writing superblock [ 223.971876][ T6702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.674'. [ 223.986458][ C0] I/O error, dev loop0, sector 42 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 224.003999][ T4271] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 224.058211][ C1] I/O error, dev loop0, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 224.068275][ T4271] EXT4-fs error (device loop0): ext4_get_inode_loc:4651: inode #2: block 5: comm syz-executor: unable to read itable block [ 224.093455][ C1] I/O error, dev loop0, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 9 prio class 2 [ 224.146835][ T4845] loop: Write error at byte offset 9223372036854776831, length 1024. [ 224.155369][ C0] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 224.165021][ C0] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 224.174611][ C0] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 224.183085][ T4271] EXT4-fs (loop0): I/O error while writing superblock [ 224.198487][ T4271] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: IO failure [ 224.219005][ T5388] loop: Write error at byte offset 9223372036854776831, length 1024. [ 224.243792][ C1] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 224.253442][ C1] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 224.262961][ C1] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 224.271280][ T4271] EXT4-fs (loop0): I/O error while writing superblock [ 224.313625][ T4271] EXT4-fs error (device loop0): ext4_dirty_inode:6137: inode #2: comm syz-executor: mark_inode_dirty error [ 224.327802][ T9] loop: Write error at byte offset 9223372036854776831, length 1024. [ 224.336114][ C0] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 224.344613][ T4271] EXT4-fs (loop0): I/O error while writing superblock [ 224.403869][ T9] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4636: inode #2: block 5: comm kworker/u4:0: unable to read itable block [ 224.435977][ T4557] loop: Write error at byte offset 9223372036854776831, length 1024. [ 224.461947][ C0] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 224.470843][ T9] EXT4-fs (loop0): I/O error while writing superblock [ 224.483504][ T4271] EXT4-fs (loop0): unmounting filesystem. [ 224.538326][ T1196] loop: Write error at byte offset 9223372036854776831, length 1024. [ 224.586520][ C0] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 224.595099][ T4271] EXT4-fs (loop0): I/O error while writing superblock [ 225.753406][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz.2.679'. [ 225.873447][ T5388] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.151423][ T5388] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.410573][ T5388] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.540495][ T5388] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.598350][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 227.608696][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 227.617955][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 227.627320][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 227.635450][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 227.642961][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 227.984384][ T6738] chnl_net:caif_netlink_parms(): no params data found [ 228.642628][ T6738] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.664343][ T6738] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.685105][ T6738] device bridge_slave_0 entered promiscuous mode [ 228.790022][ T6738] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.803964][ T6738] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.837265][ T6738] device bridge_slave_1 entered promiscuous mode [ 229.069805][ T6738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.118721][ T6738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.472043][ T6738] team0: Port device team_slave_0 added [ 229.556416][ T6738] team0: Port device team_slave_1 added [ 229.673282][ T6738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.711705][ T6738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.724261][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 229.860642][ T6738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.261612][ T6738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.279113][ T6738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.608822][ T6738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.838031][ T6738] device hsr_slave_0 entered promiscuous mode [ 230.849413][ T6765] loop4: detected capacity change from 0 to 32768 [ 230.865315][ T6738] device hsr_slave_1 entered promiscuous mode [ 230.912322][ T6765] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.694 (6765) [ 231.075737][ T6765] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 231.203808][ T6765] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 231.213307][ T6765] BTRFS info (device loop4): setting nodatasum [ 231.262732][ T6765] BTRFS info (device loop4): using free space tree [ 231.512417][ T6765] BTRFS info (device loop4): enabling ssd optimizations [ 231.567273][ T5388] device hsr_slave_0 left promiscuous mode [ 231.612001][ T5388] device hsr_slave_1 left promiscuous mode [ 231.688070][ T5388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.703921][ T5388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.804029][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 231.943210][ T5388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.973750][ T5388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.222355][ T5388] device bridge_slave_1 left promiscuous mode [ 233.274845][ T5388] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.279629][ T6816] loop5: detected capacity change from 0 to 32768 [ 233.289532][ T6816] XFS: attr2 mount option is deprecated. [ 233.334455][ T4267] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 233.383325][ T5388] device bridge_slave_0 left promiscuous mode [ 233.407444][ T5388] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.431953][ T6816] XFS (loop5): Mounting V5 Filesystem [ 233.714317][ T6816] XFS (loop5): Ending clean mount [ 233.735226][ T6816] XFS (loop5): Quotacheck needed: Please wait. [ 233.774009][ T6816] XFS (loop5): Quotacheck: Done. [ 233.832066][ T5388] device veth1_macvtap left promiscuous mode [ 233.840729][ T5388] device veth0_macvtap left promiscuous mode [ 233.861008][ T5388] device veth1_vlan left promiscuous mode [ 233.884031][ T5388] device veth0_vlan left promiscuous mode [ 233.903767][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 234.323707][ T4559] XFS (loop5): Unmounting Filesystem [ 235.307177][ T6860] netlink: 64 bytes leftover after parsing attributes in process `syz.1.706'. [ 235.666815][ T5388] team0 (unregistering): Port device team_slave_1 removed [ 235.732306][ T5388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.808683][ T5388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.966294][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 236.308048][ T5388] bond0 (unregistering): Released all slaves [ 236.912918][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 236.919053][ T6738] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 237.065293][ T6738] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 237.118529][ T6738] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 237.185869][ T6738] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 237.660492][ T6738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.736028][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.774472][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.836191][ T6738] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.869126][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.017654][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.094084][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.101326][ T5579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.904061][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.118632][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.147684][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.198911][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.206108][ T5579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.309455][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 239.348384][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 239.577397][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 239.588293][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 239.604820][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 239.635463][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 239.671631][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 239.698901][ T6889] loop2: detected capacity change from 0 to 32768 [ 239.740850][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 239.772898][ T6889] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.711 (6889) [ 239.820797][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 239.829016][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 239.838117][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.852709][ T6738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 239.867279][ T6889] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 239.878940][ T6889] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 239.896144][ T6889] BTRFS info (device loop2): setting nodatasum [ 239.921620][ T6889] BTRFS info (device loop2): using free space tree [ 240.315433][ T6889] BTRFS info (device loop2): enabling ssd optimizations [ 240.644159][ T6948] netlink: 64 bytes leftover after parsing attributes in process `syz.1.716'. [ 241.017369][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.032175][ T4268] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 241.058184][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.135489][ T6738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.572361][ T5622] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop2 scanned by udevd (5622) [ 244.986102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 245.005429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 245.267105][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.291959][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.314451][ T6738] device veth0_vlan entered promiscuous mode [ 245.334395][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.369310][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 246.120170][ T6738] device veth1_vlan entered promiscuous mode [ 246.232185][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 246.672193][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 246.699855][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 246.762960][ T6738] device veth0_macvtap entered promiscuous mode [ 246.835042][ T6738] device veth1_macvtap entered promiscuous mode [ 247.021829][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.080277][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.149681][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.213875][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.264899][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.336519][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.391705][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.433761][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.509193][ T6738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.551451][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 247.571183][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 247.615213][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.665892][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.717282][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.758663][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.800556][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.903892][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.965420][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.005385][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.015313][ T6738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.126401][ T6738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.185310][ T6738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.222991][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 248.260894][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 248.324009][ T6738] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.336142][ T6738] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.359609][ T6738] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.368774][ T6738] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.638832][ T5436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.667263][ T5436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.716032][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 248.815806][ T4479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.894576][ T4479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.956267][ T5436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 251.428946][ T7089] netlink: 64 bytes leftover after parsing attributes in process `syz.4.739'. [ 251.514957][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.740'. [ 251.995358][ T7091] team0: Port device team_slave_0 removed [ 254.669780][ T7112] loop2: detected capacity change from 0 to 32768 [ 254.735547][ T7112] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.746 (7112) [ 254.815478][ T7112] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 254.881922][ T7112] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 254.927543][ T7148] netlink: 12 bytes leftover after parsing attributes in process `syz.5.752'. [ 254.941611][ T7112] BTRFS info (device loop2): using free space tree [ 255.361520][ T7112] BTRFS error (device loop2): open_ctree failed: -22 [ 255.806355][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.812846][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.653194][ T7222] netlink: 64 bytes leftover after parsing attributes in process `syz.5.764'. [ 263.961616][ T7257] loop2: detected capacity change from 0 to 32768 [ 264.062917][ T7257] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.774 (7257) [ 264.164717][ T7257] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 264.243704][ T7257] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 264.303796][ T7257] BTRFS info (device loop2): setting nodatasum [ 264.331833][ T7257] BTRFS info (device loop2): using free space tree [ 265.719441][ T7257] BTRFS error (device loop2): open_ctree failed: -12 [ 267.886400][ T7348] netlink: 64 bytes leftover after parsing attributes in process `syz.2.788'. [ 268.056355][ T4471] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 278.830973][ T7445] device syzkaller0 entered promiscuous mode [ 280.924458][ T7471] netlink: 64 bytes leftover after parsing attributes in process `syz.2.816'. [ 282.946564][ T7473] loop5: detected capacity change from 0 to 32768 [ 282.998437][ T7473] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.815 (7473) [ 283.199614][ T7473] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 283.217351][ T7473] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 283.226650][ T7473] BTRFS info (device loop5): using free space tree [ 283.349469][ T7473] BTRFS info (device loop5): enabling ssd optimizations [ 283.701617][ T4559] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 283.911691][ T7523] netlink: 924 bytes leftover after parsing attributes in process `syz.1.824'. [ 285.297278][ T7528] loop6: detected capacity change from 0 to 32768 [ 285.304727][ T7528] XFS: attr2 mount option is deprecated. [ 285.603701][ T5622] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (5622) [ 285.845186][ T7528] XFS (loop6): Mounting V5 Filesystem [ 288.925015][ T7528] XFS (loop6): Ending clean mount [ 288.943621][ T7528] XFS (loop6): Quotacheck needed: Please wait. [ 290.079571][ T7528] XFS (loop6): Quotacheck: Done. [ 290.336818][ T7572] device syzkaller0 entered promiscuous mode [ 290.363448][ T6738] XFS (loop6): Unmounting Filesystem [ 291.581592][ T7591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.832'. [ 293.624118][ T7609] netlink: 924 bytes leftover after parsing attributes in process `syz.5.836'. [ 297.703575][ T7639] loop5: detected capacity change from 0 to 32768 [ 297.781642][ T7639] XFS: attr2 mount option is deprecated. [ 297.807401][ T7639] XFS (loop5): Mounting V5 Filesystem [ 297.897886][ T7639] XFS (loop5): Ending clean mount [ 297.918678][ T7639] XFS (loop5): Quotacheck needed: Please wait. [ 297.966504][ T7639] XFS (loop5): Quotacheck: Done. [ 298.423905][ T22] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 298.630233][ T22] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.025575][ T22] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 299.050546][ T22] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.106823][ T22] usb 7-1: config 0 descriptor?? [ 299.623718][ T7540] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 299.982637][ T22] pwc: Askey VC010 type 2 USB webcam detected. [ 300.236324][ T7540] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 300.258777][ T7540] usb 3-1: config 0 has no interface number 0 [ 300.291920][ T7540] usb 3-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 300.351143][ T7540] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 300.367247][ T4559] XFS (loop5): Unmounting Filesystem [ 300.375232][ T22] pwc: recv_control_msg error -32 req 02 val 2b00 [ 300.379101][ T7540] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.390204][ T7540] usb 3-1: Product: syz [ 300.390616][ T22] pwc: recv_control_msg error -32 req 02 val 2700 [ 300.401456][ T7540] usb 3-1: Manufacturer: syz [ 300.407113][ T7540] usb 3-1: SerialNumber: syz [ 300.438713][ T7540] usb 3-1: config 0 descriptor?? [ 300.455346][ T22] pwc: recv_control_msg error -32 req 02 val 2c00 [ 300.465465][ T7540] asix: probe of 3-1:0.251 failed with error -22 [ 300.493216][ T22] pwc: recv_control_msg error -32 req 04 val 1000 [ 300.539663][ T22] pwc: recv_control_msg error -32 req 04 val 1300 [ 300.572740][ T22] pwc: recv_control_msg error -32 req 04 val 1400 [ 300.610804][ T22] pwc: recv_control_msg error -32 req 02 val 2000 [ 300.641330][ T22] pwc: recv_control_msg error -32 req 02 val 2100 [ 300.649174][ T22] pwc: recv_control_msg error -32 req 04 val 1500 [ 300.687014][ T22] pwc: recv_control_msg error -32 req 02 val 2500 [ 300.697400][ T22] pwc: recv_control_msg error -32 req 02 val 2400 [ 300.723464][ T22] pwc: recv_control_msg error -32 req 02 val 2600 [ 300.736412][ T7676] netlink: 924 bytes leftover after parsing attributes in process `syz.4.853'. [ 300.746491][ T22] pwc: recv_control_msg error -32 req 02 val 2900 [ 300.755880][ T22] pwc: recv_control_msg error -32 req 02 val 2800 [ 300.787051][ T22] pwc: recv_control_msg error -32 req 04 val 1100 [ 300.828694][ T22] pwc: recv_control_msg error -71 req 04 val 1200 [ 300.951552][ T22] pwc: Registered as video103. [ 301.790952][ T22] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input10 [ 302.140745][ T7679] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 302.193281][ T22] usb 7-1: USB disconnect, device number 2 [ 303.165203][ T4437] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 304.625183][ T5798] usb 3-1: USB disconnect, device number 4 [ 306.051604][ T7721] netlink: 924 bytes leftover after parsing attributes in process `syz.2.864'. [ 309.259273][ T7752] netlink: 64 bytes leftover after parsing attributes in process `syz.6.871'. [ 310.810565][ T7771] netlink: 876 bytes leftover after parsing attributes in process `syz.1.878'. [ 310.869491][ T7771] netlink: 16 bytes leftover after parsing attributes in process `syz.1.878'. [ 311.735020][ T7768] loop4: detected capacity change from 0 to 32768 [ 311.800130][ T7768] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.876 (7768) [ 311.888678][ T7768] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 311.949288][ T7768] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 312.033872][ T7768] BTRFS info (device loop4): setting nodatasum [ 312.041485][ T7768] BTRFS info (device loop4): using free space tree [ 312.169939][ T7768] BTRFS info (device loop4): enabling ssd optimizations [ 312.523275][ T7813] netlink: 12 bytes leftover after parsing attributes in process `syz.5.883'. [ 312.595252][ T4267] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 317.255902][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.262319][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.354605][ T7845] device syzkaller0 entered promiscuous mode [ 317.938570][ T7853] netlink: 876 bytes leftover after parsing attributes in process `syz.2.891'. [ 317.975493][ T7853] netlink: 16 bytes leftover after parsing attributes in process `syz.2.891'. [ 318.458363][ T7843] loop6: detected capacity change from 0 to 32768 [ 318.507746][ T7843] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.890 (7843) [ 318.766373][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.896'. [ 318.779338][ T7843] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 318.877506][ T7843] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 318.936729][ T7843] BTRFS info (device loop6): setting nodatasum [ 318.994230][ T7843] BTRFS info (device loop6): using free space tree [ 319.147350][ T7843] BTRFS error (device loop6): open_ctree failed: -12 [ 319.334193][ T5622] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by udevd (5622) [ 320.671008][ T7910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 321.287343][ T7880] loop5: detected capacity change from 0 to 32768 [ 321.358811][ T7880] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 321.393216][ T7880] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 321.437043][ T7880] BTRFS info (device loop5): setting nodatasum [ 321.464031][ T7880] BTRFS info (device loop5): using free space tree [ 321.710699][ T7880] BTRFS info (device loop5): enabling ssd optimizations [ 321.898385][ T7952] netlink: 876 bytes leftover after parsing attributes in process `syz.4.906'. [ 321.957339][ T7952] netlink: 16 bytes leftover after parsing attributes in process `syz.4.906'. [ 322.091249][ T4559] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 322.291632][ T7916] loop2: detected capacity change from 0 to 32768 [ 322.455652][ T7964] netlink: 12 bytes leftover after parsing attributes in process `syz.6.909'. [ 322.467953][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.910'. [ 322.599588][ T7916] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 322.643677][ T7916] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 322.683639][ T7916] BTRFS info (device loop2): setting nodatasum [ 322.708649][ T7916] BTRFS info (device loop2): force zlib compression, level 3 [ 322.753920][ T7916] BTRFS info (device loop2): metadata ratio 4 [ 322.790789][ T7916] BTRFS info (device loop2): enabling ssd optimizations [ 322.863796][ T7916] BTRFS info (device loop2): allowing degraded mounts [ 322.957398][ T7916] BTRFS info (device loop2): using free space tree [ 324.514694][ T7916] BTRFS error (device loop2): open_ctree failed: -12 [ 326.945001][ T8005] loop6: detected capacity change from 0 to 32768 [ 326.977163][ T8005] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.915 (8005) [ 327.072534][ T8005] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 327.137720][ T8005] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 327.183592][ T8005] BTRFS info (device loop6): setting nodatasum [ 327.221306][ T8005] BTRFS info (device loop6): using free space tree [ 327.802225][ T8005] BTRFS error (device loop6): open_ctree failed: -12 [ 328.141852][ T8051] netlink: 876 bytes leftover after parsing attributes in process `syz.2.921'. [ 328.558804][ T8060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 330.945183][ T8081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.930'. [ 331.358503][ T8091] netlink: 876 bytes leftover after parsing attributes in process `syz.1.933'. [ 332.002423][ T8106] netlink: 4 bytes leftover after parsing attributes in process `syz.6.935'. [ 332.955093][ T8106] team0: Port device team_slave_0 removed [ 336.092539][ T8135] loop4: detected capacity change from 0 to 256 [ 336.096836][ T4479] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 336.420193][ T8135] FAT-fs (loop4): Directory bread(block 64) failed [ 336.489175][ T8135] FAT-fs (loop4): Directory bread(block 65) failed [ 336.514416][ T8135] FAT-fs (loop4): Directory bread(block 66) failed [ 336.552927][ T8135] FAT-fs (loop4): Directory bread(block 67) failed [ 336.604096][ T8135] FAT-fs (loop4): Directory bread(block 68) failed [ 336.634072][ T8135] FAT-fs (loop4): Directory bread(block 69) failed [ 336.640791][ T8135] FAT-fs (loop4): Directory bread(block 70) failed [ 336.678549][ T8149] netlink: 876 bytes leftover after parsing attributes in process `syz.2.944'. [ 336.695947][ T8135] FAT-fs (loop4): Directory bread(block 71) failed [ 336.702570][ T8135] FAT-fs (loop4): Directory bread(block 72) failed [ 336.744875][ T8135] FAT-fs (loop4): Directory bread(block 73) failed [ 337.111237][ T8157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.946'. [ 337.160104][ T8157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.946'. [ 337.259249][ T8157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.946'. [ 338.662444][ T8183] loop4: detected capacity change from 0 to 512 [ 339.960679][ T8183] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.952: inode has both inline data and extents flags [ 340.003845][ T8183] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.952: couldn't read orphan inode 15 (err -117) [ 340.078716][ T8183] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 340.350530][ T26] audit: type=1800 audit(1773089118.419:2): pid=8195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.952" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 340.654198][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 340.933945][ T8206] loop4: detected capacity change from 0 to 2048 [ 341.042339][ T8206] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 341.232263][ T8216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.959'. [ 341.323861][ T8216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.959'. [ 341.349561][ T8216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.959'. [ 341.533881][ T8203] loop2: detected capacity change from 0 to 32768 [ 341.542157][ T8203] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.955 (8203) [ 341.587055][ T8203] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 341.637364][ T8203] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 341.656829][ T8203] BTRFS info (device loop2): setting nodatasum [ 341.663289][ T8203] BTRFS info (device loop2): using free space tree [ 341.859314][ T8203] BTRFS info (device loop2): enabling ssd optimizations [ 342.140321][ T4268] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 343.744491][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.964'. [ 347.767431][ T8292] loop4: detected capacity change from 0 to 32768 [ 347.776924][ T8292] XFS: attr2 mount option is deprecated. [ 347.919291][ T8292] XFS (loop4): Mounting V5 Filesystem [ 348.052363][ T8292] XFS (loop4): Ending clean mount [ 348.059652][ T8292] XFS (loop4): Quotacheck needed: Please wait. [ 348.161576][ T8292] XFS (loop4): Quotacheck: Done. [ 348.608433][ T4267] XFS (loop4): Unmounting Filesystem [ 349.423226][ T8308] device syzkaller0 entered promiscuous mode [ 349.799936][ T8304] loop5: detected capacity change from 0 to 32768 [ 349.853996][ T8304] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.971 (8304) [ 349.882300][ T8316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.975'. [ 349.932561][ T8304] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 349.973760][ T8304] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 349.993699][ T8304] BTRFS info (device loop5): setting nodatasum [ 349.999932][ T8304] BTRFS info (device loop5): using free space tree [ 350.044531][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 350.234743][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.979'. [ 350.930951][ T8304] BTRFS info (device loop5): enabling ssd optimizations [ 351.048157][ T26] audit: type=1800 audit(1773089129.119:3): pid=8304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.971" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 351.141213][ T26] audit: type=1800 audit(1773089129.139:4): pid=8304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.971" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 351.205044][ T4559] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 351.515392][ T26] audit: type=1800 audit(1773089129.159:5): pid=8304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.971" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 352.141820][ T8312] loop4: detected capacity change from 0 to 32768 [ 352.183896][ T8312] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.972 (8312) [ 352.259179][ T8312] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 352.301919][ T5622] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 10 scanned by udevd (5622) [ 352.312033][ T8312] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 352.333705][ T8312] BTRFS info (device loop4): setting nodatasum [ 352.340027][ T8312] BTRFS info (device loop4): using free space tree [ 353.471467][ T8380] device syzkaller0 entered promiscuous mode [ 353.482890][ T8312] BTRFS error (device loop4): open_ctree failed: -12 [ 353.490962][ T5618] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by udevd (5618) [ 359.869760][ T8430] loop4: detected capacity change from 0 to 32768 [ 360.088863][ T8430] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 360.121941][ T8430] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 360.170931][ T8430] BTRFS info (device loop4): setting nodatasum [ 360.255165][ T8430] BTRFS info (device loop4): using free space tree [ 360.278652][ T8432] device syzkaller0 entered promiscuous mode [ 361.370394][ T8430] BTRFS info (device loop4): enabling ssd optimizations [ 361.436924][ T26] audit: type=1800 audit(1773089139.509:6): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.999" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 361.528197][ T26] audit: type=1800 audit(1773089139.529:7): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.999" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 361.614723][ T26] audit: type=1800 audit(1773089139.549:8): pid=8430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.999" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 361.710837][ T4267] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 362.576669][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1004'. [ 362.672059][ T8469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1006'. [ 365.655946][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1018'. [ 365.728108][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1017'. [ 366.484380][ T8526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 367.432327][ T4478] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 369.146191][ T8545] loop5: detected capacity change from 0 to 4096 [ 369.217825][ T8548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'. [ 369.405534][ T8545] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 369.566021][ T8555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1033'. [ 369.693099][ T8545] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #15: comm syz.5.1028: corrupted inode contents [ 369.769820][ T8545] EXT4-fs error (device loop5): ext4_dirty_inode:6137: inode #15: comm syz.5.1028: mark_inode_dirty error [ 369.821184][ T8545] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #15: comm syz.5.1028: corrupted inode contents [ 369.854993][ T8545] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #15: comm syz.5.1028: mark_inode_dirty error [ 369.894142][ T8545] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #15: comm syz.5.1028: corrupted inode contents [ 369.934881][ T8545] EXT4-fs error (device loop5): __ext4_ext_dirty:202: inode #15: comm syz.5.1028: mark_inode_dirty error [ 370.021659][ T8545] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #15: comm syz.5.1028: corrupted inode contents [ 370.073620][ T8545] EXT4-fs error (device loop5): ext4_truncate:4318: inode #15: comm syz.5.1028: mark_inode_dirty error [ 370.105069][ T8545] EXT4-fs error (device loop5) in ext4_setattr:5676: Corrupt filesystem [ 370.144073][ T8545] EXT4-fs error (device loop5): ext4_do_update_inode:5272: inode #15: comm syz.5.1028: corrupted inode contents [ 370.299718][ T8545] EXT4-fs warning (device loop5): ext4_evict_inode:282: couldn't mark inode dirty (err -117) [ 371.152010][ T8571] input: syz1 as /devices/virtual/input/input11 [ 371.225864][ T4559] EXT4-fs (loop5): unmounting filesystem. [ 373.201307][ T8594] loop6: detected capacity change from 0 to 32768 [ 373.208497][ T8594] XFS: attr2 mount option is deprecated. [ 373.333310][ T8594] XFS (loop6): Mounting V5 Filesystem [ 373.494784][ T8594] XFS (loop6): Ending clean mount [ 373.504402][ T8594] XFS (loop6): Quotacheck needed: Please wait. [ 373.542579][ T8594] XFS (loop6): Quotacheck: Done. [ 374.293397][ T6738] XFS (loop6): Unmounting Filesystem [ 374.951236][ T8614] loop5: detected capacity change from 0 to 32768 [ 374.982180][ T8614] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.1046 (8614) [ 375.022528][ T8614] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 375.073744][ T8614] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 375.082598][ T8614] BTRFS info (device loop5): using free space tree [ 375.347924][ T8614] BTRFS info (device loop5): enabling ssd optimizations [ 377.417706][ T4559] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 378.431172][ T8680] loop6: detected capacity change from 0 to 512 [ 378.514536][ T8680] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 378.544081][ T8680] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.690530][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.697099][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.774669][ T6445] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 378.845470][ T8691] random: crng reseeded on system resumption [ 380.595903][ T6738] EXT4-fs (loop6): unmounting filesystem. [ 380.693574][ T6445] usb 6-1: Using ep0 maxpacket: 32 [ 380.701239][ T6445] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.771538][ T6445] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 380.791287][ T6445] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 380.858884][ T6445] usb 6-1: Product: syz [ 380.873448][ T6445] usb 6-1: Manufacturer: syz [ 380.878436][ T6445] usb 6-1: SerialNumber: syz [ 380.924264][ T6445] usb 6-1: config 0 descriptor?? [ 380.943072][ T6445] hub 6-1:0.0: bad descriptor, ignoring hub [ 380.949798][ T6445] hub: probe of 6-1:0.0 failed with error -5 [ 380.970045][ T8702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 382.810396][ T8704] loop6: detected capacity change from 0 to 32768 [ 382.836429][ T8704] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.1068 (8704) [ 383.534534][ T8704] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 383.559071][ T8714] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.567102][ T8714] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.810521][ T8704] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 383.820377][ T8704] BTRFS info (device loop6): using free space tree [ 384.630270][ T8704] BTRFS error (device loop6): open_ctree failed: -22 [ 384.924289][ T8754] loop6: detected capacity change from 0 to 512 [ 385.049921][ T8751] loop2: detected capacity change from 0 to 32768 [ 385.066738][ T8751] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1074 (8751) [ 385.091224][ T8754] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 385.128425][ T8754] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 385.163791][ T8751] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 385.181244][ T8751] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 385.242702][ T8751] BTRFS info (device loop2): setting nodatasum [ 385.273136][ T8751] BTRFS info (device loop2): using free space tree [ 385.449051][ T6738] EXT4-fs (loop6): unmounting filesystem. [ 385.600628][ T8751] BTRFS info (device loop2): enabling ssd optimizations [ 385.642170][ T26] audit: type=1800 audit(1773089163.709:9): pid=8751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1074" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 385.824983][ T26] audit: type=1800 audit(1773089163.739:10): pid=8751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1074" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 386.085404][ T26] audit: type=1800 audit(1773089163.739:11): pid=8751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1074" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 386.198554][ T8714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.223716][ T4268] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 386.274812][ T6445] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 386.335148][ T8714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.579435][ T6445] usb 7-1: config 2 has an invalid interface descriptor of length 8, skipping [ 386.588925][ T6445] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 386.600094][ T6445] usb 7-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 386.610029][ T6445] usb 7-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 386.621188][ T6445] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.553702][ T8714] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.562726][ T8714] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.572916][ T8714] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.582157][ T8714] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.778126][ T125] usb 7-1: USB disconnect, device number 3 [ 388.933637][ T8812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.993747][ T4317] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 389.440794][ T1184] usb 6-1: USB disconnect, device number 4 [ 392.066590][ T8812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.169595][ T4317] usb 5-1: unable to read config index 0 descriptor/all [ 392.186377][ T4317] usb 5-1: can't read configurations, error -71 [ 392.226586][ T8828] loop5: detected capacity change from 0 to 2048 [ 392.288823][ T8828] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024) [ 392.449833][ T5622] udevd[5622]: incorrect nilfs2 checksum on /dev/loop5 [ 392.451253][ T8833] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 392.650509][ T8828] NILFS error (device loop5): __nilfs_read_inode: invalid file type bits in mode 0177777 for inode 12 [ 392.807117][ T8828] Remounting filesystem read-only [ 394.964512][ T4317] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 395.231408][ T4317] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 395.257187][ T4317] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 395.279639][ T4317] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 395.289786][ T4317] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.298227][ T4317] usb 6-1: Product: syz [ 395.302675][ T4317] usb 6-1: Manufacturer: syz [ 395.308359][ T4317] usb 6-1: SerialNumber: syz [ 395.322029][ T4317] usb 6-1: config 0 descriptor?? [ 395.330304][ T8862] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 395.366277][ T8862] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 395.390924][ T4317] usb 6-1: ucan: probing device on interface #0 [ 395.401853][ T4317] usb 6-1: ucan: invalid EP count (1) [ 395.414986][ T4317] usb 6-1: ucan: probe failed; try to update the device firmware [ 395.640764][ T8865] loop2: detected capacity change from 0 to 32768 [ 395.759259][ T8865] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.1106 (8865) [ 395.840379][ T8865] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 395.888228][ T8865] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 395.913833][ T8865] BTRFS info (device loop2): setting nodatasum [ 395.923950][ T8865] BTRFS info (device loop2): using free space tree [ 396.087048][ T8893] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 396.087048][ T8893] program syz.4.1114 not setting count and/or reply_len properly [ 396.681353][ T8865] BTRFS info (device loop2): enabling ssd optimizations [ 397.941594][ T4268] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 398.184137][ T8875] loop6: detected capacity change from 0 to 32768 [ 398.516310][ T8918] sg_write: data in/out 28/14 bytes for SCSI command 0x0-- guessing data in; [ 398.516310][ T8918] program syz.4.1119 not setting count and/or reply_len properly [ 398.536439][ T4314] usb 6-1: USB disconnect, device number 5 [ 398.539336][ T8875] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.1111 (8875) [ 399.319067][ T4845] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 401.209068][ T8961] loop6: detected capacity change from 0 to 32768 [ 401.216417][ T8961] XFS: attr2 mount option is deprecated. [ 401.314743][ T8961] XFS (loop6): Mounting V5 Filesystem [ 401.395096][ T8961] XFS (loop6): Ending clean mount [ 401.404855][ T8961] XFS (loop6): Quotacheck needed: Please wait. [ 401.530533][ T8961] XFS (loop6): Quotacheck: Done. [ 401.767712][ T6738] XFS (loop6): Unmounting Filesystem [ 401.987258][ T8947] loop4: detected capacity change from 0 to 32768 [ 402.037930][ T8947] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 402.129815][ T8947] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 402.175199][ T8947] BTRFS info (device loop4): setting nodatasum [ 402.181402][ T8947] BTRFS info (device loop4): using free space tree [ 402.601657][ T8947] BTRFS info (device loop4): enabling ssd optimizations [ 402.913769][ T4336] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 403.068844][ T4267] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 403.111756][ T4336] usb 6-1: config 2 has an invalid interface descriptor of length 8, skipping [ 403.167098][ T4336] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 403.208144][ T4336] usb 6-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 403.252975][ T4336] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 403.302289][ T4336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.911403][ T4314] usb 6-1: USB disconnect, device number 6 [ 406.340746][ T9040] device syzkaller0 entered promiscuous mode [ 409.300246][ T9059] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 409.307892][ T9059] UDF-fs: Scanning with blocksize 512 failed [ 409.314768][ T9059] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 409.322324][ T9059] UDF-fs: Scanning with blocksize 1024 failed [ 409.329025][ T9059] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 409.336576][ T9059] UDF-fs: Scanning with blocksize 2048 failed [ 409.342993][ T9059] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 409.350610][ T9059] UDF-fs: Scanning with blocksize 4096 failed [ 410.009380][ T9061] loop4: detected capacity change from 0 to 32768 [ 410.035192][ T9061] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.1158 (9061) [ 410.053242][ T9061] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 410.064019][ T9061] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 410.075420][ T9061] BTRFS info (device loop4): setting nodatasum [ 410.081656][ T9061] BTRFS info (device loop4): using free space tree [ 410.204604][ T9061] BTRFS info (device loop4): enabling ssd optimizations [ 410.626533][ T4267] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 410.703701][ T125] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 410.895306][ T125] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.958659][ T125] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 410.998850][ T125] usb 7-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 411.017687][ T125] usb 7-1: Product: syz [ 411.034700][ T125] usb 7-1: SerialNumber: syz [ 411.086046][ T5622] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop4 scanned by udevd (5622) [ 411.535311][ T8003] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 411.733857][ T8003] usb 5-1: Using ep0 maxpacket: 32 [ 411.741499][ T8003] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.801164][ T8003] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.854499][ T8003] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 411.875516][ T8003] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 411.899819][ T8003] usb 5-1: Product: syz [ 411.908440][ T8003] usb 5-1: Manufacturer: syz [ 411.966223][ T8003] hub 5-1:4.0: USB hub found [ 412.099790][ T125] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 412.116999][ T125] cdc_ncm 7-1:1.0: dwNtbInMaxSize=177 is too small. Using 2048 [ 412.133621][ T125] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 412.176756][ T8003] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 412.301446][ T125] cdc_ncm 7-1:1.0: setting tx_max = 88 [ 412.517677][ T8003] usb 5-1: USB disconnect, device number 9 [ 412.755317][ T9099] loop2: detected capacity change from 0 to 1024 [ 412.766056][ T9099] hfsplus: unable to parse mount options [ 413.249511][ T26] audit: type=1326 audit(1773089191.299:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 414.239871][ T26] audit: type=1326 audit(1773089191.299:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 414.263116][ T26] audit: type=1326 audit(1773089191.309:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 414.398184][ T26] audit: type=1326 audit(1773089191.309:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 414.549702][ T26] audit: type=1326 audit(1773089191.309:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 414.690033][ T26] audit: type=1326 audit(1773089191.309:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 414.790479][ T26] audit: type=1326 audit(1773089191.309:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 414.905396][ T26] audit: type=1326 audit(1773089191.309:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 415.007951][ T26] audit: type=1326 audit(1773089191.319:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 415.107173][ T26] audit: type=1326 audit(1773089191.319:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9098 comm="syz.2.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 415.394266][ T9115] loop2: detected capacity change from 0 to 512 [ 415.464406][ T9115] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 415.483935][ T9115] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 415.500619][ T9117] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 415.509070][ T9117] UDF-fs: Scanning with blocksize 512 failed [ 415.515614][ T9117] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 415.523086][ T9117] UDF-fs: Scanning with blocksize 1024 failed [ 415.530591][ T9117] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 415.538374][ T9117] UDF-fs: Scanning with blocksize 2048 failed [ 415.544691][ T9117] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 415.552166][ T9117] UDF-fs: Scanning with blocksize 4096 failed [ 416.411453][ T9122] loop6: detected capacity change from 0 to 256 [ 416.420709][ T9122] exfat: Bad value for 'umask' [ 417.229468][ T125] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 418.069659][ T125] usb 7-1: USB disconnect, device number 4 [ 418.076377][ T125] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP) [ 418.178527][ T9132] capability: warning: `syz.1.1171' uses 32-bit capabilities (legacy support in use) [ 419.117095][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 419.117122][ T26] audit: type=1326 audit(1773089197.189:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9135 comm="syz.1.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caed9c799 code=0x7ffc0000 [ 419.198670][ T26] audit: type=1326 audit(1773089197.229:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9135 comm="syz.1.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f5caed9c799 code=0x7ffc0000 [ 419.221589][ T26] audit: type=1326 audit(1773089197.229:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9135 comm="syz.1.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caed9c799 code=0x7ffc0000 [ 419.444036][ T26] audit: type=1326 audit(1773089197.229:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9135 comm="syz.1.1174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caed9c799 code=0x7ffc0000 [ 422.452778][ T9159] ipt_CLUSTERIP: Please specify destination IP [ 422.492970][ T9164] xt_hashlimit: size too large, truncated to 1048576 [ 422.694010][ T125] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 422.931732][ T125] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.020092][ T125] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.345947][ T125] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 423.355999][ T125] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.367576][ T125] usb 7-1: config 0 descriptor?? [ 423.604603][ T125] usbhid 7-1:0.0: can't add hid device: -71 [ 423.610745][ T125] usbhid: probe of 7-1:0.0 failed with error -71 [ 423.625268][ T9170] netem: change failed [ 423.636312][ T125] usb 7-1: USB disconnect, device number 5 [ 423.943574][ T9178] loop5: detected capacity change from 0 to 4096 [ 424.103931][ T9178] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 424.833741][ T4559] EXT4-fs (loop5): unmounting filesystem. [ 426.522807][ T9201] loop2: detected capacity change from 0 to 128 [ 427.532638][ T9205] loop6: detected capacity change from 0 to 512 [ 428.754649][ T9201] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 428.786535][ T9201] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 430.304725][ T9205] EXT4-fs: error -4 creating inode table initialization thread [ 430.313214][ T9205] EXT4-fs (loop6): mount failed [ 430.414332][ T9212] loop5: detected capacity change from 0 to 256 [ 430.475477][ T9212] exfat: Bad value for 'umask' [ 430.681893][ T9216] loop6: detected capacity change from 0 to 512 [ 430.732311][ T9216] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.1197: inode #1: comm syz.6.1197: iget: illegal inode # [ 430.771589][ T9216] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1197: error while reading EA inode 1 err=-117 [ 430.814625][ T9216] EXT4-fs (loop6): 1 orphan inode deleted [ 430.824313][ T9216] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 431.054868][ T6738] EXT4-fs (loop6): unmounting filesystem. [ 431.134092][ T9228] loop2: detected capacity change from 0 to 512 [ 431.190251][ T9228] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 431.206451][ T9231] loop6: detected capacity change from 0 to 512 [ 431.221076][ T9228] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.264589][ T9231] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 431.279061][ T4437] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 431.409278][ T9231] EXT4-fs (loop6): 1 truncate cleaned up [ 431.451377][ T9231] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 431.527015][ T9228] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.1200: Invalid inode table block 0 in block_group 0 [ 431.566999][ T5622] udevd[5622]: incorrect ext4dev checksum on /dev/loop2 [ 431.696207][ T9228] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 431.798334][ T9228] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #3: comm syz.2.1200: mark_inode_dirty error [ 431.835377][ T9228] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.1200: Invalid block bitmap block 0 in block_group 0 [ 432.425304][ T9234] mmap: syz.6.1201 (9234) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 432.452955][ T9228] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz.2.1200: Invalid inode table block 0 in block_group 0 [ 432.525040][ T9228] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 432.592052][ T9228] EXT4-fs error (device loop2): ext4_dirty_inode:6137: inode #3: comm syz.2.1200: mark_inode_dirty error [ 432.627792][ T9228] Quota error (device loop2): write_blk: dquota write failed [ 432.653162][ T9228] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 432.681490][ T9228] EXT4-fs error (device loop2): ext4_acquire_dquot:6835: comm syz.2.1200: Failed to acquire dquot type 0 [ 432.794503][ T6738] EXT4-fs (loop6): unmounting filesystem. [ 432.925367][ T47] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm kworker/u4:3: Invalid inode table block 0 in block_group 0 [ 433.129043][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 433.156865][ T4268] EXT4-fs error (device loop2): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 0 in block_group 0 [ 434.879632][ T9263] loop2: detected capacity change from 0 to 512 [ 435.958655][ T9280] overlayfs: missing 'workdir' [ 437.276358][ T9290] loop5: detected capacity change from 0 to 1024 [ 437.313560][ T9291] loop2: detected capacity change from 0 to 512 [ 437.336377][ T9290] hfsplus: unable to parse mount options [ 437.420429][ T9291] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 437.668649][ T9291] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 438.754806][ T9300] loop6: detected capacity change from 0 to 512 [ 440.529822][ T9312] loop6: detected capacity change from 0 to 512 [ 440.750761][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.758362][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.703270][ T9319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1223'. [ 444.273882][ T6586] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 444.385888][ T26] audit: type=1326 audit(1773089222.459:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9347 comm="syz.2.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 445.435416][ T6586] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.456840][ T6586] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.503670][ T6586] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 445.544860][ T6586] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.609646][ T6586] usb 5-1: config 0 descriptor?? [ 445.653555][ T9367] device bridge1 entered promiscuous mode [ 449.327330][ T6586] usbhid 5-1:0.0: can't add hid device: -71 [ 449.333404][ T6586] usbhid: probe of 5-1:0.0 failed with error -71 [ 449.388376][ T6586] usb 5-1: USB disconnect, device number 10 [ 449.728390][ T26] audit: type=1326 audit(1773089227.799:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9393 comm="syz.4.1248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdf2d9c799 code=0x7ffc0000 [ 449.837059][ T9399] netem: change failed [ 449.909123][ T9401] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1247'. [ 449.930853][ T9404] netlink: 1140 bytes leftover after parsing attributes in process `syz.4.1251'. [ 454.124950][ T9490] netem: change failed [ 454.712667][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1264'. [ 455.159827][ T9510] loop6: detected capacity change from 0 to 512 [ 455.218980][ T9510] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 455.265922][ T9510] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 455.431884][ T9492] 9pnet_fd: p9_fd_create_tcp (9492): problem connecting socket to 127.0.0.1 [ 455.472744][ T9510] EXT4-fs (loop6): 1 truncate cleaned up [ 462.555668][ T9510] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 462.564689][ T26] audit: type=1326 audit(1773089233.839:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caed9c799 code=0x7ffc0000 [ 462.908965][ T5436] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 462.923250][ T26] audit: type=1326 audit(1773089233.839:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caed9c799 code=0x7ffc0000 [ 463.051286][ T26] audit: type=1326 audit(1773089233.849:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5caed9c799 code=0x7ffc0000 [ 463.106165][ T6738] EXT4-fs (loop6): unmounting filesystem. [ 463.197708][ T26] audit: type=1326 audit(1773089233.859:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caed9c799 code=0x7ffc0000 [ 463.221060][ T26] audit: type=1326 audit(1773089233.859:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caed9c799 code=0x7ffc0000 [ 463.262727][ T26] audit: type=1326 audit(1773089233.869:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5caed9c799 code=0x7ffc0000 [ 463.608890][ T26] audit: type=1326 audit(1773089233.869:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caed9c799 code=0x7ffc0000 [ 464.288781][ T26] audit: type=1326 audit(1773089233.869:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caed9c799 code=0x7ffc0000 [ 464.291040][ T9548] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1280'. [ 464.403684][ T26] audit: type=1326 audit(1773089233.879:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5caed9c799 code=0x7ffc0000 [ 464.458043][ T9553] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1280'. [ 464.463519][ T26] audit: type=1326 audit(1773089233.879:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9507 comm="syz.1.1270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5caed9c799 code=0x7ffc0000 [ 465.110655][ T9557] loop2: detected capacity change from 0 to 32768 [ 465.118033][ T9557] XFS: attr2 mount option is deprecated. [ 465.536539][ T9569] loop4: detected capacity change from 0 to 1024 [ 465.717569][ T9569] hfsplus: unable to parse mount options [ 467.289705][ T9557] XFS (loop2): Mounting V5 Filesystem [ 467.540747][ T9578] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 467.744734][ T9557] XFS (loop2): log mount failed [ 468.341911][ T9590] loop5: detected capacity change from 0 to 512 [ 468.409358][ T9590] EXT4-fs: Ignoring removed i_version option [ 468.456175][ T9590] EXT4-fs: Ignoring removed bh option [ 468.571458][ T9590] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 468.625171][ T9590] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 469.425298][ T4559] EXT4-fs (loop5): unmounting filesystem. [ 475.799941][ T9652] loop4: detected capacity change from 0 to 32768 [ 475.807427][ T9652] XFS: attr2 mount option is deprecated. [ 475.883595][ T7903] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 475.986820][ T9652] XFS (loop4): Mounting V5 Filesystem [ 476.092002][ T7903] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 476.103327][ T7903] usb 3-1: config 0 has no interface number 0 [ 476.122576][ T7903] usb 3-1: config 0 interface 41 has no altsetting 0 [ 476.143845][ T7903] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 476.153055][ T7903] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.173628][ T7903] usb 3-1: Product: syz [ 476.179882][ T7903] usb 3-1: Manufacturer: syz [ 476.185189][ T7903] usb 3-1: SerialNumber: syz [ 476.414492][ T7903] usb 3-1: config 0 descriptor?? [ 476.460910][ T9652] XFS (loop4): Ending clean mount [ 476.469341][ T9652] XFS (loop4): Quotacheck needed: Please wait. [ 476.594472][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1314'. [ 476.888011][ T9652] XFS (loop4): Quotacheck: Done. [ 477.758753][ T4267] XFS (loop4): Unmounting Filesystem [ 477.933246][ T7903] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 479.538868][ T9694] overlayfs: unrecognized mount option "/" or missing value [ 480.880183][ T7903] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 480.914011][ T7903] CoreChips: probe of 3-1:0.41 failed with error -71 [ 480.973743][ T7903] usb 3-1: USB disconnect, device number 5 [ 481.203906][ T9705] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1325'. [ 481.213040][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1325'. [ 481.222482][ T9705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1325'. [ 483.225834][ T9725] loop2: detected capacity change from 0 to 16 [ 483.288757][ T9725] erofs: (device loop2): mounted with root inode @ nid 36. [ 483.323689][ T4336] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 483.535986][ T4336] usb 5-1: unable to get BOS descriptor or descriptor too short [ 483.564311][ T4336] usb 5-1: not running at top speed; connect to a high speed hub [ 483.585364][ T4336] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.626869][ T4336] usb 5-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 483.653552][ T4336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.703150][ T4336] usb 5-1: Product: syz [ 483.712501][ T4336] usb 5-1: Manufacturer: syz [ 483.723892][ T4336] usb 5-1: SerialNumber: syz [ 483.777514][ T9729] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 483.890795][ T9731] loop5: detected capacity change from 0 to 512 [ 483.927466][ T9729] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 483.991019][ T4336] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 484.000734][ T9731] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 484.095304][ T4336] usb 5-1: USB disconnect, device number 11 [ 484.141120][ T9731] EXT4-fs (loop5): 1 truncate cleaned up [ 484.159913][ T9526] udevd[9526]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 484.209033][ T9731] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 486.049230][ T4559] EXT4-fs (loop5): unmounting filesystem. [ 489.920348][ T9783] loop5: detected capacity change from 0 to 32768 [ 489.927764][ T9783] XFS: attr2 mount option is deprecated. [ 490.061083][ T9783] XFS (loop5): Mounting V5 Filesystem [ 490.446048][ T9783] XFS (loop5): Ending clean mount [ 491.329676][ T9783] XFS (loop5): Quotacheck needed: Please wait. [ 491.641229][ T9783] XFS (loop5): Quotacheck: Done. [ 491.841723][ T4559] XFS (loop5): Unmounting Filesystem [ 492.147868][ T5388] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.296416][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 492.311671][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 492.320729][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 492.346060][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 492.367306][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 492.368714][ T5388] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.387278][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 492.677015][ T5388] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.275054][ T5388] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.544555][ T9837] loop5: detected capacity change from 0 to 16 [ 493.627694][ T9837] erofs: (device loop5): mounted with root inode @ nid 36. [ 494.443600][ T4278] Bluetooth: hci2: command 0x0409 tx timeout [ 494.453353][ T9449] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 494.486355][ T4559] erofs: (device loop5): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 494.579768][ T4559] syz-executor: attempt to access beyond end of device [ 494.579768][ T4559] loop5: rw=0, sector=296, nr_sectors = 8 limit=16 [ 494.659496][ T4559] erofs: (device loop5): z_erofs_read_folio: failed to read, err [-117] [ 494.696519][ T4559] erofs: (device loop5): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 494.865595][ T9828] chnl_net:caif_netlink_parms(): no params data found [ 495.476308][ T9828] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.500941][ T9828] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.530680][ T9828] device bridge_slave_0 entered promiscuous mode [ 496.221042][ T9828] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.233765][ T9828] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.291778][ T9828] device bridge_slave_1 entered promiscuous mode [ 496.523534][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 496.530764][ T9828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.623303][ T9828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.720890][ T9828] team0: Port device team_slave_0 added [ 496.744429][ T9828] team0: Port device team_slave_1 added [ 496.822697][ T9828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.874789][ T4314] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 496.893786][ T9828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.071464][ T9828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.105526][ T4314] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 497.155831][ T4314] usb 5-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 497.223888][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.283162][ T4314] usb 5-1: Product: syz [ 497.291614][ T4314] usb 5-1: Manufacturer: syz [ 497.317042][ T4314] usb 5-1: SerialNumber: syz [ 497.466447][ T9828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.494936][ T9828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.525486][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1381'. [ 497.541005][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1381'. [ 497.563654][ T9828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.580499][ T4314] usb 5-1: unit 3 not found! [ 497.585896][ T4314] usb 5-1: unit 7 not found! [ 497.592155][ T4314] usb 5-1: unit 5 not found! [ 497.604028][ T4314] usb 5-1: unit 16 not found! [ 497.711984][ T4314] usb 5-1: USB disconnect, device number 12 [ 498.072653][ T9828] device hsr_slave_0 entered promiscuous mode [ 498.080558][ T9828] device hsr_slave_1 entered promiscuous mode [ 498.100237][ T9828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.109894][ T9828] Cannot create hsr debugfs directory [ 498.603863][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 498.860751][ T5388] device hsr_slave_0 left promiscuous mode [ 499.079551][ T5388] device hsr_slave_1 left promiscuous mode [ 499.224793][ T5388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.422834][ T5388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.461512][ T5388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.501209][ T5388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.572910][ T5388] device bridge_slave_1 left promiscuous mode [ 499.613026][ T5388] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.924267][ T5388] device bridge_slave_0 left promiscuous mode [ 499.930603][ T5388] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.109759][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 500.109846][ T26] audit: type=1326 audit(1773089278.169:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.2.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 500.226478][ T26] audit: type=1326 audit(1773089278.169:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.2.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 500.495143][ T26] audit: type=1326 audit(1773089278.169:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.2.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 500.578739][ T26] audit: type=1326 audit(1773089278.169:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.2.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 500.726052][ T26] audit: type=1326 audit(1773089278.179:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.2.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 500.877892][ T26] audit: type=1326 audit(1773089278.179:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.2.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 500.982013][ T5388] device veth1_macvtap left promiscuous mode [ 500.989948][ T5388] device veth0_macvtap left promiscuous mode [ 501.004661][ T26] audit: type=1326 audit(1773089278.179:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.2.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 501.230945][ T5388] device veth1_vlan left promiscuous mode [ 501.243752][ T5388] device veth0_vlan left promiscuous mode [ 501.265794][ T26] audit: type=1326 audit(1773089278.179:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.2.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 501.361512][ T26] audit: type=1326 audit(1773089278.179:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.2.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 501.492743][ T26] audit: type=1326 audit(1773089278.179:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9949 comm="syz.2.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 501.748052][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 501.756537][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.762889][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.484558][ T9981] loop4: detected capacity change from 0 to 16 [ 502.525469][ T9981] erofs: (device loop4): mounted with root inode @ nid 36. [ 502.714385][ T9981] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 502.938740][ T9981] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 505.687211][ T5388] team0 (unregistering): Port device team_slave_1 removed [ 506.343555][ T5388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.574905][ T5388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.980325][ T5388] bond0 (unregistering): Released all slaves [ 507.298970][T10021] fuse: Bad value for 'fd' [ 507.515175][ T9828] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 507.564109][ T9828] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 507.645756][ T9828] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 507.887480][ T9828] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 509.278934][ T9828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.406377][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 509.414603][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 509.479176][ T9828] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.521043][T10061] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1416'. [ 509.542254][T10061] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1416'. [ 509.709052][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 509.858652][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 510.101459][ T4557] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.108716][ T4557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.462444][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 510.489697][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 510.542459][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 510.582239][ T4557] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.589587][ T4557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.638094][T10070] netlink: 'syz.5.1411': attribute type 2 has an invalid length. [ 510.654403][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 510.718881][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 510.782806][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 510.836162][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 510.988870][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 512.115130][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 512.194371][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 512.236441][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 512.276969][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 512.313315][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 512.360004][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 512.401997][ T9828] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 515.163905][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1426'. [ 515.553845][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 515.592105][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 515.655249][ T9828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.155988][ T4314] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 516.343690][ T4314] usb 5-1: Using ep0 maxpacket: 8 [ 516.351850][ T4314] usb 5-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 252, changing to 11 [ 516.408524][ T4314] usb 5-1: config 1 interface 0 has no altsetting 0 [ 516.438425][ T4314] usb 5-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.40 [ 516.463637][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.498589][ T4314] usb 5-1: Product: ᄄ䔱゜癴﷌䜜ᬵ脀큀妫े忪솮佾栝鿺趃ꪛ鷓寗绲떍㴡쨺抢⨪俩퇚ﺹ埱蒉䜸ĕ᤬䞝⁏魸픲僿ȫᴥ떦毹圕쒣炗鸿儢趯䚉݀޺覓 [ 516.573498][ T4314] usb 5-1: SerialNumber: 圈湖﷤皟钹臇㼊ᎁ渴侨ⶾ┰ᚮ䷃᰷펔鴴벥䶊㻑⻊㚊ἧﮋᩕ赱蝍ᘳﺁݧề㢬♖녀㐪࿛☓녪ᒳ䦑뜑銏횩兄䯪跎 [ 516.964699][T10122] loop4: detected capacity change from 0 to 512 [ 517.197609][T10122] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1427: inode #1: comm syz.4.1427: iget: illegal inode # [ 517.232714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 517.416236][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 517.462569][T10122] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1427: error while reading EA inode 1 err=-117 [ 517.601501][T10122] EXT4-fs (loop4): 1 orphan inode deleted [ 517.611028][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 517.653739][T10122] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 517.669906][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 517.788662][ T9828] device veth0_vlan entered promiscuous mode [ 517.850249][ T4314] usbhid 5-1:1.0: can't add hid device: -71 [ 517.861941][ T9828] device veth1_vlan entered promiscuous mode [ 517.893993][ T4314] usbhid: probe of 5-1:1.0 failed with error -71 [ 517.931616][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 517.941583][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 518.756594][T10148] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 518.764890][ T4314] usb 5-1: USB disconnect, device number 13 [ 518.784379][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 518.797479][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 518.814493][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 518.859584][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 519.007202][ T9828] device veth0_macvtap entered promiscuous mode [ 519.192598][ T9828] device veth1_macvtap entered promiscuous mode [ 519.253985][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 519.271929][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 519.450349][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 519.695428][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 520.095722][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.183658][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.200331][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.220053][T10173] loop5: detected capacity change from 0 to 512 [ 520.226113][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.265048][ T9828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.303528][T10173] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 520.324212][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.386120][T10173] EXT4-fs (loop5): 1 truncate cleaned up [ 520.391840][T10173] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 520.408014][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.453931][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.658175][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.674463][ T9828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 520.686362][ T9828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 520.699102][ T9828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.706837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 520.734488][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 520.753330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 520.780567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 521.138347][ T9828] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.261741][ T9828] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.283145][ T9828] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.308331][ T9828] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.358545][ T4559] EXT4-fs (loop5): unmounting filesystem. [ 521.551588][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 521.566723][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.811484][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 523.972329][ T4293] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.005537][ T4293] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.106988][ T5388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 525.866658][ T4328] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 525.893348][T10212] ipt_CLUSTERIP: Please specify destination IP [ 526.430595][ T4278] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 526.442487][ T4278] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 526.451615][ T4278] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 526.460671][ T4278] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 526.468736][ T4278] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 526.476318][ T4278] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 526.632983][T10201] loop4: detected capacity change from 0 to 40427 [ 526.659897][T10201] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(263168) [ 526.755317][T10201] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 526.833883][T10201] F2FS-fs (loop4): invalid crc value [ 526.847219][ T5388] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.920763][T10201] F2FS-fs (loop4): Found nat_bits in checkpoint [ 527.078899][ T5388] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.205234][T10201] F2FS-fs (loop4): Start checkpoint disabled! [ 527.257468][ T5388] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.505323][ T5388] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.627613][T10227] chnl_net:caif_netlink_parms(): no params data found [ 528.004541][T10227] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.013752][T10227] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.054505][T10227] device bridge_slave_0 entered promiscuous mode [ 528.083376][T10243] loop4: detected capacity change from 0 to 512 [ 528.108275][T10227] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.144074][T10227] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.152502][T10227] device bridge_slave_1 entered promiscuous mode [ 528.176098][T10243] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 528.315521][T10243] EXT4-fs (loop4): 1 truncate cleaned up [ 528.321410][T10243] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 528.533624][ T4278] Bluetooth: hci2: command 0x0409 tx timeout [ 529.103750][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 529.112859][T10227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.344111][T10227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.365076][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 529.384478][T10256] loop4: detected capacity change from 0 to 512 [ 529.394563][ T4281] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 529.419920][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 529.429246][ T4281] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 529.437307][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 529.446732][ T4281] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 529.514091][T10256] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 529.706661][T10227] team0: Port device team_slave_0 added [ 529.757036][T10256] EXT4-fs (loop4): 1 truncate cleaned up [ 529.762837][T10256] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 529.777521][T10227] team0: Port device team_slave_1 added [ 530.858767][ T4278] Bluetooth: hci2: command 0x041b tx timeout [ 530.959381][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 531.422058][T10227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.433347][T10227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.483593][ T4278] Bluetooth: hci4: command 0x0409 tx timeout [ 531.515314][T10227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.718435][T10227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.741261][T10227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.839773][T10227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.333789][T10227] device hsr_slave_0 entered promiscuous mode [ 532.341610][T10227] device hsr_slave_1 entered promiscuous mode [ 532.474242][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1460'. [ 532.751571][T10253] chnl_net:caif_netlink_parms(): no params data found [ 532.910447][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1463'. [ 532.924379][ T4278] Bluetooth: hci2: command 0x040f tx timeout [ 533.260482][ T5388] device hsr_slave_0 left promiscuous mode [ 533.268868][ T5388] device hsr_slave_1 left promiscuous mode [ 533.566089][ T4278] Bluetooth: hci4: command 0x041b tx timeout [ 534.055590][ T5388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.087923][ T5388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.157749][ T5388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.166258][ T5388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.276490][ T5388] device bridge_slave_1 left promiscuous mode [ 534.357065][ T5388] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.516332][ T5388] device bridge_slave_0 left promiscuous mode [ 534.934198][ T5388] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.003781][ T4278] Bluetooth: hci2: command 0x0419 tx timeout [ 535.027577][ T5388] device veth1_macvtap left promiscuous mode [ 535.033797][ T5388] device veth0_macvtap left promiscuous mode [ 535.039980][ T5388] device veth1_vlan left promiscuous mode [ 535.076180][ T5388] device veth0_vlan left promiscuous mode [ 535.566921][ T4313] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 535.606638][ T4313] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 535.643539][ T4278] Bluetooth: hci4: command 0x040f tx timeout [ 536.292699][ T5388] team0 (unregistering): Port device team_slave_1 removed [ 536.347002][ T5388] team0 (unregistering): Port device team_slave_0 removed [ 536.407555][ T5388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.486402][ T5388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.726773][T10340] loop5: detected capacity change from 0 to 512 [ 536.761939][T10340] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 536.791047][T10340] EXT4-fs (loop5): 1 truncate cleaned up [ 536.818261][T10340] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 537.552298][ T5388] bond0 (unregistering): Released all slaves [ 537.619224][ T4559] EXT4-fs (loop5): unmounting filesystem. [ 537.735271][ T4278] Bluetooth: hci4: command 0x0419 tx timeout [ 537.781240][T10253] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.789445][T10253] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.798608][T10253] device bridge_slave_0 entered promiscuous mode [ 537.809316][T10253] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.816821][T10253] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.828229][T10253] device bridge_slave_1 entered promiscuous mode [ 537.851776][T10316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1465'. [ 538.135740][T10253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.270349][T10253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.431224][T10227] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 538.469443][T10253] team0: Port device team_slave_0 added [ 538.489687][T10364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1471'. [ 538.510831][T10227] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 538.536689][T10253] team0: Port device team_slave_1 added [ 538.558623][T10227] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 538.642526][T10227] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 538.691454][T10253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.708478][T10253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.764254][T10253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.837574][T10253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.847567][T10253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.893866][ T4313] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 538.923644][T10253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.072716][T10253] device hsr_slave_0 entered promiscuous mode [ 539.082558][T10253] device hsr_slave_1 entered promiscuous mode [ 539.102771][T10253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 539.122293][T10253] Cannot create hsr debugfs directory [ 539.138209][ T4313] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 539.170873][ T4313] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 539.184974][T10227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.223730][ T4313] usb 6-1: config 1 has no interface number 0 [ 539.245044][ T4313] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 539.278099][ T5388] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.307576][ T4313] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 539.337970][ T4313] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 539.367902][ T4313] usb 6-1: Product: syz [ 539.372148][ T4313] usb 6-1: SerialNumber: syz [ 539.372747][T10227] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.424215][ T4313] usb 6-1: selecting invalid altsetting 1 [ 539.441356][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 539.465258][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 539.575373][ T5388] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.824801][ T5388] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.654746][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 540.679189][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 540.703660][ T4313] cdc_ncm 6-1:1.1: SET_CRC_MODE failed [ 540.723648][ T4313] usb 6-1: selecting invalid altsetting 1 [ 540.732991][ T9453] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.737067][ T4313] cdc_ncm 6-1:1.1: bind() failure [ 540.740209][ T9453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.786820][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 540.793649][ T4313] usb 6-1: USB disconnect, device number 7 [ 540.822362][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 540.965051][ T9453] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.972738][ T9453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.042618][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 541.069112][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 541.909498][T10392] xt_CT: No such helper "pptp" [ 541.933251][ T5388] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.957007][T10398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1478'. [ 542.003915][T10398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1478'. [ 542.014301][T10398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1478'. [ 542.024450][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 542.032746][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 542.083832][T10398] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1478'. [ 542.153258][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 542.162829][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 542.216320][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 542.250047][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 542.266802][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 542.284539][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 542.289529][T10401] loop5: detected capacity change from 0 to 2048 [ 542.294822][T10403] loop4: detected capacity change from 0 to 1024 [ 542.305824][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 542.316836][T10403] EXT4-fs: Ignoring removed nomblk_io_submit option [ 542.326922][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 542.342005][T10403] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 542.348064][T10401] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 542.380364][T10227] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 542.535778][T10403] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 542.581931][T10403] System zones: 0-1, 3-36 [ 542.603142][T10403] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 543.372446][T10253] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 543.481542][T10253] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 543.552350][ T5388] tipc: Left network mode [ 543.557637][T10253] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 543.648344][T10253] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 544.017803][T10408] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 544.486808][T10408] EXT4-fs (loop5): Remounting filesystem read-only [ 545.933169][T10227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.950981][ T4559] EXT4-fs (loop5): unmounting filesystem. [ 546.157508][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 546.246297][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 546.943367][T10253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.177145][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 547.211447][ T5579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 547.233381][T10253] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.358941][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 547.388825][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 547.414417][ T9458] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.421789][ T9458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.465761][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 547.592485][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 547.604539][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 547.634898][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.642060][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.704122][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 547.744529][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 547.888262][T10463] loop5: detected capacity change from 0 to 256 [ 547.920022][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 548.057372][T10461] bridge0: port 3(macsec1) entered blocking state [ 548.107792][T10461] bridge0: port 3(macsec1) entered disabled state [ 548.177968][T10463] FAT-fs (loop5): Directory bread(block 64) failed [ 548.212908][T10463] FAT-fs (loop5): Directory bread(block 65) failed [ 548.221169][T10463] FAT-fs (loop5): Directory bread(block 66) failed [ 548.232209][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 548.232814][T10463] FAT-fs (loop5): Directory bread(block 67) failed [ 548.248818][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 548.253673][T10463] FAT-fs (loop5): Directory bread(block 68) failed [ 548.258142][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 548.263574][T10463] FAT-fs (loop5): Directory bread(block 69) failed [ 548.272809][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 548.289474][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 548.292882][T10463] FAT-fs (loop5): Directory bread(block 70) failed [ 548.298932][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 548.321121][T10253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 548.321494][T10463] FAT-fs (loop5): Directory bread(block 71) failed [ 548.333229][T10253] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 548.445654][T10474] loop4: detected capacity change from 0 to 256 [ 548.506843][T10463] FAT-fs (loop5): Directory bread(block 72) failed [ 548.530418][T10474] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1cf37229, utbl_chksum : 0xe619d30d) [ 548.778116][T10463] FAT-fs (loop5): Directory bread(block 73) failed [ 549.325550][T10470] netem: change failed [ 549.366910][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 549.390007][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 549.424494][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 549.445900][T10480] loop4: detected capacity change from 0 to 512 [ 549.502203][T10480] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 549.568623][T10480] EXT4-fs (loop4): 1 truncate cleaned up [ 549.603267][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 549.622919][T10480] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 549.632830][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 550.675628][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 551.030763][T10227] device veth0_vlan entered promiscuous mode [ 552.112963][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 552.604178][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 552.662073][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 552.698812][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 552.761330][T10505] loop4: detected capacity change from 0 to 1024 [ 552.795088][T10505] hfsplus: unable to parse mount options [ 552.832027][ T9735] blk_print_req_error: 8 callbacks suppressed [ 552.832056][ T9735] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 552.858986][T10227] device veth1_vlan entered promiscuous mode [ 554.016328][T10253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.437565][T10524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1502'. [ 554.480211][T10524] device bridge_slave_1 left promiscuous mode [ 554.814363][T10524] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.568959][T10524] device bridge_slave_0 left promiscuous mode [ 555.576954][T10524] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.287869][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 557.304414][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 557.396186][T10227] device veth0_macvtap entered promiscuous mode [ 558.136339][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 558.253102][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 558.420310][T10548] loop5: detected capacity change from 0 to 16 [ 558.571488][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 558.606638][T10227] device veth1_macvtap entered promiscuous mode [ 558.615633][T10548] erofs: (device loop5): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 559.562817][T10227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.676396][T10227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.743758][T10227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.785651][T10227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.797365][T10227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.811682][T10227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.822209][T10227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.832268][T10227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.843772][T10227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.853685][T10227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.969350][T10227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.035232][T10227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.051272][ T5388] device hsr_slave_0 left promiscuous mode [ 560.988316][ T5388] device hsr_slave_1 left promiscuous mode [ 561.000615][ T5388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.016295][ T5388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.043569][ T6831] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 561.062357][ T5388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 561.483791][ T6831] usb 6-1: Using ep0 maxpacket: 8 [ 561.512649][ T5388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.522241][ T6831] usb 6-1: unable to get BOS descriptor or descriptor too short [ 561.544831][ T5388] device bridge_slave_1 left promiscuous mode [ 561.560337][ T6831] usb 6-1: config 4 has an invalid interface number: 147 but max is 0 [ 561.620587][ T5388] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.643541][ T6831] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 561.912810][ T6831] usb 6-1: config 4 has no interface number 0 [ 561.945618][ T6831] usb 6-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 563.004090][T10576] overlayfs: failed to clone upperpath [ 563.149324][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.173936][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.435948][ T6831] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.510360][ T6831] usb 6-1: Product: syz [ 563.540736][ T6831] usb 6-1: Manufacturer: syz [ 563.586003][ T6831] usb 6-1: SerialNumber: syz [ 563.652273][ T6831] usb 6-1: can't set config #4, error -71 [ 563.713599][ T6831] usb 6-1: USB disconnect, device number 8 [ 563.799389][ T5388] device bridge_slave_0 left promiscuous mode [ 563.824295][ T5388] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.366770][ T5388] device veth1_macvtap left promiscuous mode [ 565.372908][ T5388] device veth0_macvtap left promiscuous mode [ 565.436052][ T5388] device veth1_vlan left promiscuous mode [ 565.442070][ T5388] device veth0_vlan left promiscuous mode [ 566.260837][ T5388] team0 (unregistering): Port device team_slave_1 removed [ 566.370802][ T5388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.435052][ T5388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.985120][ T5388] bond0 (unregistering): Released all slaves [ 567.142051][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 567.151155][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 567.161793][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 567.180334][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 567.192462][T10227] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.209520][T10227] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.221067][T10227] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.243497][T10227] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.572091][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 567.609049][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 567.686390][T10253] device veth0_vlan entered promiscuous mode [ 567.734283][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 567.758960][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 567.792506][T10253] device veth1_vlan entered promiscuous mode [ 567.815335][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.856173][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 567.877911][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.893190][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 568.694050][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 568.766145][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 568.918136][ T9456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.934121][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 568.942832][ T9456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.963559][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 569.051371][ T9458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 569.189396][T10253] device veth0_macvtap entered promiscuous mode [ 569.396587][ T26] kauditd_printk_skb: 18 callbacks suppressed [ 569.396629][ T26] audit: type=1326 audit(1773089347.459:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 569.493659][ T8003] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 569.779581][ T8003] usb 6-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 569.885962][ T8003] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 570.001219][ T26] audit: type=1326 audit(1773089347.459:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 570.113999][ T8003] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.302780][ T8003] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 570.442047][ T26] audit: type=1326 audit(1773089347.459:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 570.567531][ T8003] usb 6-1: config 0 interface 0 has no altsetting 0 [ 570.691020][ T8003] usb 6-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 570.797621][T10253] device veth1_macvtap entered promiscuous mode [ 570.824526][ T26] audit: type=1326 audit(1773089347.459:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 570.831659][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 570.879510][ T8003] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.032848][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 571.143512][ T26] audit: type=1326 audit(1773089347.459:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 571.172498][ T8003] usb 6-1: config 0 descriptor?? [ 571.343877][ T26] audit: type=1326 audit(1773089347.459:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 571.468488][ T26] audit: type=1326 audit(1773089347.459:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 571.623345][ T26] audit: type=1326 audit(1773089347.459:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 571.672531][ T8003] hid-alps 0003:044E:120C.0004: unbalanced delimiter at end of report description [ 571.734138][ T8003] hid-alps 0003:044E:120C.0004: parse failed [ 571.740307][ T8003] hid-alps: probe of 0003:044E:120C.0004 failed with error -22 [ 571.783652][ T26] audit: type=1326 audit(1773089347.459:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 571.831623][ T26] audit: type=1326 audit(1773089347.459:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10626 comm="syz.2.1523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2c0b9c799 code=0x7ffc0000 [ 571.874466][ T8003] usb 6-1: USB disconnect, device number 9 [ 571.967865][T10646] capability: warning: `syz.2.1525' uses deprecated v2 capabilities in a way that may be insecure [ 572.398902][T10253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.409975][T10253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.421410][T10253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.432947][T10253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.515719][T10658] overlayfs: failed to clone upperpath [ 572.692313][T10253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.759385][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 572.820585][ T9453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 573.585475][T10253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.084367][T10672] [ 575.086756][T10672] ====================================================== [ 575.093853][T10672] WARNING: possible circular locking dependency detected [ 575.100884][T10672] syzkaller #0 Not tainted [ 575.105321][T10672] ------------------------------------------------------ [ 575.112361][T10672] syz.2.1529/10672 is trying to acquire lock: [ 575.118450][T10672] ffff888073034800 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3a2/0x1c30 [ 575.129204][T10672] [ 575.129204][T10672] but task is already holding lock: [ 575.136580][T10672] ffff88807480bd58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1a4/0x7b0 [ 575.146632][T10672] [ 575.146632][T10672] which lock already depends on the new lock. [ 575.146632][T10672] [ 575.157053][T10672] [ 575.157053][T10672] the existing dependency chain (in reverse order) is: [ 575.166083][T10672] [ 575.166083][T10672] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 575.173682][T10672] down_read_killable+0x4c/0x340 [ 575.179453][T10672] mmap_read_lock_killable+0x1d/0x60 [ 575.185283][T10672] lock_mm_and_find_vma+0x2b1/0x2f0 [ 575.191124][T10672] do_user_addr_fault+0x2db/0xb10 [ 575.196811][T10672] exc_page_fault+0x60/0x100 [ 575.202048][T10672] asm_exc_page_fault+0x22/0x30 [ 575.207465][T10672] fault_in_readable+0x13e/0x1f0 [ 575.212962][T10672] fault_in_iov_iter_readable+0xbb/0x2e0 [ 575.219157][T10672] generic_perform_write+0x3f8/0x5c0 [ 575.225060][T10672] __generic_file_write_iter+0x148/0x2a0 [ 575.231608][T10672] generic_file_write_iter+0xab/0x2e0 [ 575.237588][T10672] vfs_write+0x4b1/0xa30 [ 575.242564][T10672] ksys_write+0x14c/0x250 [ 575.244940][T10253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.247596][T10672] do_syscall_64+0x4c/0xa0 [ 575.247632][T10672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.269259][T10672] [ 575.269259][T10672] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 575.270950][T10253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 575.277974][T10672] __lock_acquire+0x2d07/0x7d10 [ 575.278011][T10672] lock_acquire+0x1bb/0x4a0 [ 575.278033][T10672] down_write+0x36/0x60 [ 575.278060][T10672] process_measurement+0x3a2/0x1c30 [ 575.309282][T10672] ima_file_mmap+0x102/0x150 [ 575.314437][T10672] __se_sys_remap_file_pages+0x559/0x7b0 [ 575.320600][T10672] do_syscall_64+0x4c/0xa0 [ 575.325553][T10672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.331974][T10672] [ 575.331974][T10672] other info that might help us debug this: [ 575.331974][T10672] [ 575.342292][T10672] Possible unsafe locking scenario: [ 575.342292][T10672] [ 575.349842][T10672] CPU0 CPU1 [ 575.355208][T10672] ---- ---- [ 575.360576][T10672] lock(&mm->mmap_lock); [ 575.364914][T10672] lock(&sb->s_type->i_mutex_key#13); [ 575.372902][T10672] lock(&mm->mmap_lock); [ 575.379753][T10672] lock(&sb->s_type->i_mutex_key#13); [ 575.385225][T10672] [ 575.385225][T10672] *** DEADLOCK *** [ 575.385225][T10672] [ 575.393410][T10672] 1 lock held by syz.2.1529/10672: [ 575.398521][T10672] #0: ffff88807480bd58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1a4/0x7b0 [ 575.409011][T10672] [ 575.409011][T10672] stack backtrace: [ 575.414894][T10672] CPU: 1 PID: 10672 Comm: syz.2.1529 Not tainted syzkaller #0 [ 575.422351][T10672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 575.432406][T10672] Call Trace: [ 575.435691][T10672] [ 575.438623][T10672] dump_stack_lvl+0x188/0x24e [ 575.443307][T10672] ? load_image+0x400/0x400 [ 575.447824][T10672] ? show_regs_print_info+0x12/0x12 [ 575.453035][T10672] ? print_circular_bug+0x12b/0x1a0 [ 575.458249][T10672] check_noncircular+0x296/0x330 [ 575.463194][T10672] ? look_up_lock_class+0x75/0x140 [ 575.468308][T10672] ? add_chain_block+0x940/0x940 [ 575.473250][T10672] ? lockdep_lock+0xf1/0x1f0 [ 575.477940][T10672] ? _find_first_zero_bit+0xcf/0x100 [ 575.483416][T10672] __lock_acquire+0x2d07/0x7d10 [ 575.488280][T10672] ? ima_match_policy+0x107/0x2120 [ 575.493409][T10672] ? __lock_acquire+0x7d10/0x7d10 [ 575.498440][T10672] ? verify_lock_unused+0x140/0x140 [ 575.503653][T10672] ? ima_match_policy+0x107/0x2120 [ 575.508771][T10672] ? ima_match_policy+0x2093/0x2120 [ 575.513976][T10672] lock_acquire+0x1bb/0x4a0 [ 575.518484][T10672] ? process_measurement+0x3a2/0x1c30 [ 575.523870][T10672] ? __might_sleep+0xd0/0xd0 [ 575.528729][T10672] ? read_lock_is_recursive+0x10/0x10 [ 575.534202][T10672] ? ima_get_action+0x71/0xa0 [ 575.538883][T10672] down_write+0x36/0x60 [ 575.543051][T10672] ? process_measurement+0x3a2/0x1c30 [ 575.548426][T10672] process_measurement+0x3a2/0x1c30 [ 575.553635][T10672] ? ima_file_mmap+0x150/0x150 [ 575.558436][T10672] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 575.564428][T10672] ? __sched_text_start+0x8/0x8 [ 575.569285][T10672] ? lock_chain_count+0x20/0x20 [ 575.574243][T10672] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 575.580077][T10672] ? lockdep_hardirqs_on+0x94/0x140 [ 575.585346][T10672] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 575.591624][T10672] ima_file_mmap+0x102/0x150 [ 575.596317][T10672] ? end_current_label_crit_section+0x14b/0x170 [ 575.602649][T10672] ? ima_file_free+0x3e0/0x3e0 [ 575.607590][T10672] ? common_file_perm+0x171/0x1c0 [ 575.612623][T10672] ? bpf_lsm_mmap_file+0x5/0x10 [ 575.617488][T10672] ? security_mmap_file+0x11b/0x180 [ 575.622697][T10672] __se_sys_remap_file_pages+0x559/0x7b0 [ 575.628353][T10672] ? lock_chain_count+0x20/0x20 [ 575.633321][T10672] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 575.639051][T10672] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 575.644867][T10672] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 575.650516][T10672] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 575.656451][T10672] do_syscall_64+0x4c/0xa0 [ 575.660892][T10672] ? clear_bhb_loop+0x60/0xb0 [ 575.665663][T10672] ? clear_bhb_loop+0x60/0xb0 [ 575.670522][T10672] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 575.676421][T10672] RIP: 0033:0x7fd2c0b9c799 [ 575.680841][T10672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.700582][T10672] RSP: 002b:00007fd2c1abd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 575.709179][T10672] RAX: ffffffffffffffda RBX: 00007fd2c0e16270 RCX: 00007fd2c0b9c799 [ 575.717243][T10672] RDX: 0000000000000000 RSI: 0000000000400d00 RDI: 000020000051c000 [ 575.725217][T10672] RBP: 00007fd2c0c32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 575.733193][T10672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.741186][T10672] R13: 00007fd2c0e16308 R14: 00007fd2c0e16270 R15: 00007fffc47b7118 [ 575.749171][T10672] [ 576.027446][T10253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.094884][T10253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.106463][T10253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.208702][T10253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.613327][T10253] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.681318][T10253] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.698809][T10253] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.721260][T10253] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.749796][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 576.763004][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 576.814071][T10253] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht' [ 576.846434][ T5388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.860558][T10253] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 576.869124][ T5388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.882546][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 576.905365][ T5388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.913234][ T5388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.923383][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready