last executing test programs: 7.172148392s ago: executing program 0 (id=97): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000200)={'dmm32at\x00', [0xfffffffd, 0x9, 0x2, 0x6, 0x2, 0x6, 0xfff, 0x2007, 0x5, 0x3ff, 0x7f, 0x1600, 0x5d3902be, 0x3, 0x9, 0x7, 0x0, 0x4, 0x31, 0x395, 0x80000089, 0xffffffff, 0x7, 0x1007, 0xffffeadb, 0x3, 0x10040, 0x5, 0x4, 0x3, 0x5]}) 6.286802544s ago: executing program 0 (id=102): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000f80)=@file={0x1, './file0\x00'}, 0x6e) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 6.258895006s ago: executing program 0 (id=104): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000086d040ec20000000000010902"], 0x0) write$sysctl(r2, &(0x7f0000000000)='2\x00', 0x2) 4.295977024s ago: executing program 3 (id=120): r0 = shmget(0x2, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x9, 0x708, 0x31363553, 0x9, 0x9, 0xff, 0x4a0aa7c5452c7498, 0x8, 0x0, 0x6, 0x0, 0x2}}) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000080)=""/212) 3.554723124s ago: executing program 4 (id=124): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x25dfdbfd, {{@in=@multicast1, @in=@remote, 0x0, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x81}, {0x1, 0x0, 0x80}}, [@tmpl={0x104, 0x5, [{{@in=@multicast2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in6=@local, 0x0, 0x3c}, 0xa, @in6=@dev, 0x2, 0x2, 0x0, 0x0, 0x800, 0x800}, {{@in6=@loopback, 0x4d4, 0x33}, 0x0, @in=@empty, 0x3, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x0, 0x1, 0x2, 0x7, 0x1, 0x0, 0x3}]}]}, 0x1bc}}, 0x0) 3.500116189s ago: executing program 4 (id=125): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0xc00, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1bc, 0x2b8, 0x0, 0x1bc, 0xff000000, 0x2a8, 0x3a8, 0x3a8, 0x2a8, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev, @private2, [], [], 'veth1_to_hsr\x00', 'wg2\x00'}, 0x0, 0x138, 0x1a0, 0x0, {0x0, 0xff3f0000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @loopback, @empty, [], [], [], 0x0, 0x6359d960a6776be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ee3779645eb76a85500d3615fd8745ab36d18b1d804af6941a5dafd665780197ab5730b9e3afa5ec362b56b047b4"], 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='itimer_expire\x00', r5}, 0x18) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40186f40, &(0x7f0000000440)=0x1f) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) 3.471770811s ago: executing program 1 (id=126): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 3.417239835s ago: executing program 3 (id=127): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getdents64(r3, &(0x7f0000000380)=""/4091, 0xff3a) syz_emit_ethernet(0x0, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket(0x10, 0x80002, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002"], 0x64}}, 0x0) 2.968205911s ago: executing program 2 (id=128): r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080), 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(r1, 0x0, 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000000)=0x31) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x2, 0x34005}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000180)=0x10) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e03000200000000000000000300005839c900910000", 0x48}], 0x1) read$alg(0xffffffffffffffff, &(0x7f0000000b80)=""/237, 0xed) socket$nl_netfilter(0x10, 0x3, 0xc) 2.667162896s ago: executing program 4 (id=129): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) 2.652767087s ago: executing program 4 (id=130): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$sndctrl(&(0x7f00000001c0), 0xffffffffffffffc0, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = io_uring_setup(0x2f00, &(0x7f000000c480)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r3 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x653f, 0x0, 0x0, 0x28e, 0x0, r2}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, 0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r2], 0x1) 2.591024492s ago: executing program 0 (id=131): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75fcffffffffffffff47113e55eb2894f9becf7542da0bc21470e44122020000000000000061dc9363aed4a18d67efd5f2fdf90000def700000000000000000000000000000000abfb00"}, 0xd8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) listen(0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 2.590398542s ago: executing program 0 (id=132): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x48}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}]}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\b'}]}], {0x14, 0x11, 0x1, 0x4}}, 0x104}, 0x1, 0x0, 0x0, 0x4c899}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 2.512228948s ago: executing program 1 (id=133): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x121091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 1.398559228s ago: executing program 1 (id=134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 1.095366672s ago: executing program 3 (id=135): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x2b06, 0x0, 0x0, &(0x7f0000ffe000)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r7, r7, 0x0, 0x40008) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001600010a0000"], 0x14}}, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0, 0x0) 1.039849507s ago: executing program 2 (id=136): syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @empty, @void, {@ipv4={0x800, @dccp={{0x6, 0x4, 0x0, 0x7, 0x28, 0x67, 0x0, 0x9, 0x21, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x7, 0x2}]}}, {{0x4e31, 0x4e24, 0x4, 0x1, 0xe, 0x0, 0x0, 0x0, 0x0, "c87a3d", 0x6, "d270ac"}}}}}}, 0x0) 1.039475967s ago: executing program 4 (id=137): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x400040, &(0x7f00000000c0)={[{@user_xattr}, {@grpquota}]}, 0xfd, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x802, 0xa2) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000000)=0x4) 1.039260977s ago: executing program 1 (id=138): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000760001000000000000000000070202"], 0x18}, 0x1, 0x5502000000000000}, 0x0) 1.039187297s ago: executing program 2 (id=139): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000280)={0x2, 0x4, 0x6, 0x7e, 0x7f, 0x495}) 1.038913677s ago: executing program 2 (id=140): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0xc00, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1bc, 0x2b8, 0x0, 0x1bc, 0xff000000, 0x2a8, 0x3a8, 0x3a8, 0x2a8, 0x3a8, 0x3, 0x0, {[{{@ipv6={@dev, @private2, [], [], 'veth1_to_hsr\x00', 'wg2\x00'}, 0x0, 0x138, 0x1a0, 0x0, {0x0, 0xff3f0000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @private1, @loopback, @empty, [], [], [], 0x0, 0x6359d960a6776be9}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ee3779645eb76a85500d3615fd8745ab36d18b1d804af6941a5dafd665780197ab5730b9e3afa5ec362b56b047b4"], 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='itimer_expire\x00', r5}, 0x18) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, 0x0) 992.246361ms ago: executing program 1 (id=141): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r0, 0x4122, 0x0) 688.508955ms ago: executing program 0 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setrlimit(0xd, &(0x7f0000000400)={0x8, 0xf0d}) getpid() syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x108c8, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x445c, &(0x7f000000c300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fanotify_init(0x20, 0x40000) fanotify_mark(r3, 0x105, 0x5000003a, 0xffffffffffffffff, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200), 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat$null(r5, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x103) r6 = open_tree(r5, &(0x7f0000000640)='\x00', 0x81000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r6, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 206.584974ms ago: executing program 3 (id=143): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x5) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75fcffffffffffffff47113e55eb2894f9becf7542da0bc21470e44122020000000000000061dc9363aed4a18d67efd5f2fdf90000def700000000000000000000000000000000abfb00"}, 0xd8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 166.516047ms ago: executing program 2 (id=144): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r1, 0x9dffffff}}, 0x48) 156.335848ms ago: executing program 1 (id=145): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x12, &(0x7f00000003c0)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x504f, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, 0x0, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r2, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x2000c420) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="88020000", @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x0) 96.360413ms ago: executing program 2 (id=146): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8800) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r2, 0x1, &(0x7f00000001c0)) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) ioctl$SIOCAX25ADDUID(r5, 0x8902, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 95.720273ms ago: executing program 3 (id=147): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = epoll_create1(0x80000) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r0, &(0x7f0000000080)={0x20, 0x0, r2, {0x0, 0x18}}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000002240)={0x10000000}) epoll_pwait2(r1, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 246.231µs ago: executing program 4 (id=148): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@map, 0xffffffffffffffff, 0x2b, 0x2020}, 0x20) 0s ago: executing program 3 (id=149): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000001200)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@iocharset={'iocharset', 0x3d, 'ascii'}}, {@uni_xlate}, {@uni_xlate}, {@shortname_winnt}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@utf8no}, {@shortname_lower}, {@utf8no}, {@fat=@check_strict}, {@numtail}]}, 0x1, 0x36b, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000002300)='./file1\x00', 0x141842, 0x100) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.209' (ED25519) to the list of known hosts. [ 31.607462][ T4032] cgroup: Unknown subsys name 'net' [ 31.869907][ T4032] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.148376][ T4032] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 33.032702][ T4052] chnl_net:caif_netlink_parms(): no params data found [ 33.055500][ T4048] chnl_net:caif_netlink_parms(): no params data found [ 33.091989][ T4052] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.093167][ T4052] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.094861][ T4052] device bridge_slave_0 entered promiscuous mode [ 33.103404][ T4044] chnl_net:caif_netlink_parms(): no params data found [ 33.107750][ T4052] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.108963][ T4052] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.110432][ T4052] device bridge_slave_1 entered promiscuous mode [ 33.134683][ T4058] chnl_net:caif_netlink_parms(): no params data found [ 33.138403][ T4048] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.139565][ T4048] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.141127][ T4048] device bridge_slave_0 entered promiscuous mode [ 33.144271][ T4052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.153529][ T4052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.155117][ T4048] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.156359][ T4048] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.158259][ T4048] device bridge_slave_1 entered promiscuous mode [ 33.176411][ T4043] chnl_net:caif_netlink_parms(): no params data found [ 33.182458][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.183583][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.185110][ T4044] device bridge_slave_0 entered promiscuous mode [ 33.192565][ T4052] team0: Port device team_slave_0 added [ 33.195686][ T4052] team0: Port device team_slave_1 added [ 33.197980][ T4048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.199662][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.200902][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.202403][ T4044] device bridge_slave_1 entered promiscuous mode [ 33.212736][ T4048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.238263][ T4052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.239386][ T4052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.243295][ T4052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.246076][ T4048] team0: Port device team_slave_0 added [ 33.248720][ T4044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.251762][ T4058] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.252874][ T4058] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.254350][ T4058] device bridge_slave_0 entered promiscuous mode [ 33.256580][ T4048] team0: Port device team_slave_1 added [ 33.261049][ T4052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.262165][ T4052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.266376][ T4052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.273588][ T4044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.277903][ T4058] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.279055][ T4058] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.280441][ T4058] device bridge_slave_1 entered promiscuous mode [ 33.294924][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.296087][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.300702][ T4048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.306467][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.307870][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.309399][ T4043] device bridge_slave_0 entered promiscuous mode [ 33.311344][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.312470][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.313993][ T4043] device bridge_slave_1 entered promiscuous mode [ 33.318467][ T4048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.319541][ T4048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.323940][ T4048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.330459][ T4058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.335620][ T4044] team0: Port device team_slave_0 added [ 33.344273][ T4058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.349347][ T4044] team0: Port device team_slave_1 added [ 33.388301][ T4052] device hsr_slave_0 entered promiscuous mode [ 33.427127][ T4052] device hsr_slave_1 entered promiscuous mode [ 33.479151][ T4043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.481933][ T4043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.503671][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.504724][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.509283][ T4044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.514928][ T4043] team0: Port device team_slave_0 added [ 33.519366][ T4058] team0: Port device team_slave_0 added [ 33.523406][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.524427][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.529803][ T4044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.588007][ T4048] device hsr_slave_0 entered promiscuous mode [ 33.657142][ T4048] device hsr_slave_1 entered promiscuous mode [ 33.707103][ T4048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.708307][ T4048] Cannot create hsr debugfs directory [ 33.709749][ T4043] team0: Port device team_slave_1 added [ 33.711359][ T4058] team0: Port device team_slave_1 added [ 33.741223][ T4058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.742271][ T4058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.745901][ T4058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.753655][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.754787][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.759500][ T4043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.762994][ T4058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.764057][ T4058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.768303][ T4058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.818071][ T4044] device hsr_slave_0 entered promiscuous mode [ 33.857243][ T4044] device hsr_slave_1 entered promiscuous mode [ 33.897060][ T4044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.898191][ T4044] Cannot create hsr debugfs directory [ 33.901833][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.902905][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.906806][ T4043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.957912][ T4058] device hsr_slave_0 entered promiscuous mode [ 34.007148][ T4058] device hsr_slave_1 entered promiscuous mode [ 34.066944][ T4058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.068101][ T4058] Cannot create hsr debugfs directory [ 34.147900][ T4043] device hsr_slave_0 entered promiscuous mode [ 34.187161][ T4043] device hsr_slave_1 entered promiscuous mode [ 34.237000][ T4043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.238147][ T4043] Cannot create hsr debugfs directory [ 34.323961][ T4052] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.378103][ T4052] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.420410][ T4052] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.458632][ T4052] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.520918][ T4048] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.568858][ T4048] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.620589][ T4048] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.678034][ T4048] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.722506][ T4044] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.768260][ T4044] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.819373][ T4044] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.872015][ T4044] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.932304][ T4043] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.967467][ T4089] Bluetooth: hci4: command 0x0409 tx timeout [ 34.968640][ T4089] Bluetooth: hci2: command 0x0409 tx timeout [ 34.974175][ T4043] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.977473][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 34.978524][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 34.979566][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 35.014172][ T4043] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.051713][ T4043] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.093025][ T4052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.095282][ T4058] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.138386][ T4058] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.178200][ T4058] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.218029][ T4058] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.286794][ T4052] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.290812][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.292928][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.294376][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.295860][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.298842][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.299924][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.301694][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.313379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.315026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.316548][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.317655][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.320800][ T4048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.329586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.331294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.346820][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.350228][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.352177][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.353719][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.355016][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.356364][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.358268][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.359775][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.368985][ T4048] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.373647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.375248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.382713][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.384528][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.386070][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.388310][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.389816][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.391314][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.392727][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.393799][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.395239][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.398444][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.403143][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.412664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.414255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.415699][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.416854][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.419793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.426242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.429621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.431072][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.432142][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.433837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.435307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.436803][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.438069][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.440026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.448012][ T4058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.452213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.462130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.463801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.465585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.468072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.475861][ T4044] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.477931][ T4044] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.483345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.485060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.486670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.490300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.491905][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.493432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.494778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.496281][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.499341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.501947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.503413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.504848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.506989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.512489][ T4043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.515155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.516861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.524546][ T4058] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.532111][ T4052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.535765][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.537689][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.539070][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.540092][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.541491][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.542677][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.543843][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.550812][ T4043] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.564436][ T4048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.566118][ T4048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.569865][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.571420][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.572874][ T580] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.573999][ T580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.575297][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.576664][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.579752][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.581246][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.582670][ T580] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.583804][ T580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.585123][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.586584][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.588685][ T580] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.589810][ T580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.591169][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.592761][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.594415][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.596017][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.598297][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.599958][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.601536][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.602907][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.604375][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 35.605844][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.608291][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.611463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 35.616684][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.618695][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.620604][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 35.624138][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.625778][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.635425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 35.637213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 35.638914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 35.645860][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.651517][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.653147][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.654599][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.655896][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.658729][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 35.660360][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 35.662325][ T4043] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.667896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.669289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.672712][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.674174][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.687565][ T4058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.689762][ T4058] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 35.691414][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.692979][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.700636][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.702269][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.705034][ T4052] device veth0_vlan entered promiscuous mode [ 35.709145][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.710607][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.712035][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.713556][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.724660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.725979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.736704][ T4048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.743997][ T4052] device veth1_vlan entered promiscuous mode [ 35.757774][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.759294][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.760671][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.761884][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.762989][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.764369][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.766429][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.770678][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.774243][ T4044] device veth0_vlan entered promiscuous mode [ 35.779460][ T4043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.784382][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.786041][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.801478][ T4044] device veth1_vlan entered promiscuous mode [ 35.805392][ T4048] device veth0_vlan entered promiscuous mode [ 35.814264][ T4058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.816881][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.819289][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.820726][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.822231][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 35.823409][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 35.828728][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.830223][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.834859][ T4052] device veth0_macvtap entered promiscuous mode [ 35.843747][ T4052] device veth1_macvtap entered promiscuous mode [ 35.845493][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.847370][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.848871][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.850514][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.852031][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.856172][ T4048] device veth1_vlan entered promiscuous mode [ 35.877345][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.878894][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 35.880331][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.881967][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.897984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.899602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.901194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.902668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.904161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.905587][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.908328][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.909747][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.912131][ T4044] device veth0_macvtap entered promiscuous mode [ 35.914530][ T4052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.915806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.917914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.919499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.925013][ T4052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.927910][ T4058] device veth0_vlan entered promiscuous mode [ 35.929459][ T4044] device veth1_macvtap entered promiscuous mode [ 35.931225][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.932703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.934144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.935608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.937672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.939228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.940537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.943899][ T4052] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.945287][ T4052] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.946672][ T4052] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.949202][ T4052] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.954016][ T4043] device veth0_vlan entered promiscuous mode [ 35.962077][ T4043] device veth1_vlan entered promiscuous mode [ 35.963682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.964990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.966355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.969875][ T4058] device veth1_vlan entered promiscuous mode [ 35.971861][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.973698][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.975747][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.979577][ T4048] device veth0_macvtap entered promiscuous mode [ 35.982067][ T4048] device veth1_macvtap entered promiscuous mode [ 35.986544][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 35.988897][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 35.990327][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.991739][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.993255][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.996168][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.000094][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.002708][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.008303][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.009828][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 36.011547][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.013105][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.022451][ T4044] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.023858][ T4044] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.025206][ T4044] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.026675][ T4044] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.044176][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.045857][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.048344][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.049953][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.052425][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.056173][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.058385][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.063621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.065209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.069254][ T4043] device veth0_macvtap entered promiscuous mode [ 36.071014][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.072593][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.074228][ T4048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.075961][ T4048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.081837][ T4048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.090764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.092255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.093816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.100417][ T580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.101609][ T580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.103924][ T4048] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.105208][ T4048] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.106526][ T4048] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.110158][ T4048] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.113862][ T4043] device veth1_macvtap entered promiscuous mode [ 36.115242][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.116674][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.118962][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.120499][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.132654][ T4058] device veth0_macvtap entered promiscuous mode [ 36.139259][ T4058] device veth1_macvtap entered promiscuous mode [ 36.152502][ T1612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.153850][ T1612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.164557][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 36.166153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.168451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.176484][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.182136][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.183723][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.185361][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.187501][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.189146][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.191350][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.195738][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.198032][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.199576][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.201173][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.202694][ T4043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.204227][ T4043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.206628][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.217972][ T580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.219293][ T580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.225887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.227675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.229207][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.230773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.232415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.235586][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.240251][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.241621][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.243396][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.245038][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.246807][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.249596][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 36.251144][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.253383][ T4058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.260030][ T1612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.261389][ T1612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.264508][ T4043] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.265832][ T4043] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.268030][ T4043] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.269403][ T4043] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.272627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.274162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.280643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.283197][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.284757][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.286374][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.291497][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.293062][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.294552][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.296074][ T4058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 36.298966][ T4058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.301413][ T4058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.311801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.313467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.321138][ T1612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.322493][ T1612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.324140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.355058][ T1612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.356430][ T1612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.357646][ T4058] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.359121][ T4058] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.360420][ T4058] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.361681][ T4058] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.377548][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.486440][ T4154] loop2: detected capacity change from 0 to 40427 [ 36.525035][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.526334][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.534814][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.536573][ T148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.543081][ T148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.545484][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 36.871257][ T4164] loop1: detected capacity change from 0 to 24 [ 37.498728][ T4124] Bluetooth: hci1: command 0x041b tx timeout [ 37.500352][ T4124] Bluetooth: hci0: command 0x041b tx timeout [ 37.501601][ T4124] Bluetooth: hci3: command 0x041b tx timeout [ 37.502986][ T4124] Bluetooth: hci2: command 0x041b tx timeout [ 37.503979][ T4124] Bluetooth: hci4: command 0x041b tx timeout [ 37.527838][ T4164] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 37.533115][ T4164] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 37.557144][ T1612] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.558575][ T1612] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.561535][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.563369][ T4154] F2FS-fs (loop2): invalid crc value [ 37.605705][ T4154] F2FS-fs (loop2): Found nat_bits in checkpoint [ 37.629816][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.631910][ T4154] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 37.633589][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.636844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.151718][ T4181] udc-core: couldn't find an available UDC or it's busy [ 38.152917][ T4181] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 38.206399][ T4052] attempt to access beyond end of device [ 38.206399][ T4052] loop2: rw=2049, want=45104, limit=40427 [ 38.255421][ T4183] loop3: detected capacity change from 0 to 4096 [ 38.306875][ T4183] NILFS (loop3): invalid segment: Checksum error in segment payload [ 38.319393][ T4183] NILFS (loop3): trying rollback from an earlier position [ 38.343464][ T4183] NILFS (loop3): recovery complete [ 38.395223][ T4186] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 39.003269][ T4195] ubi31: attaching mtd0 [ 39.007113][ T4195] ubi31: scanning is finished [ 39.007898][ T4195] ubi31: empty MTD device detected [ 39.367782][ T4195] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 39.475857][ T4204] loop0: detected capacity change from 0 to 512 [ 39.873974][ T4088] Bluetooth: hci4: command 0x040f tx timeout [ 39.874926][ T4088] Bluetooth: hci2: command 0x040f tx timeout [ 39.875914][ T4088] Bluetooth: hci3: command 0x040f tx timeout [ 39.876952][ T4088] Bluetooth: hci0: command 0x040f tx timeout [ 39.877831][ T4088] Bluetooth: hci1: command 0x040f tx timeout [ 39.999719][ T4204] EXT4-fs error (device loop0): ext4_orphan_get:1427: comm syz.0.14: bad orphan inode 8388608 [ 40.002272][ T4204] EXT4-fs (loop0): mounted filesystem without journal. Opts: noinit_itable,,errors=continue. Quota mode: none. [ 40.211593][ T4229] loop4: detected capacity change from 0 to 24 [ 40.902617][ T4242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'. [ 40.904759][ T4242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'. [ 40.906149][ T4242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.23'. [ 40.910570][ T4242] Zero length message leads to an empty skb [ 41.010328][ T4229] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 41.012926][ T4229] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 41.168119][ T4258] ubi31: attaching mtd0 [ 41.172646][ T4258] ubi31: scanning is finished [ 41.453491][ T4258] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 41.454678][ T4258] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 41.455785][ T4258] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 41.456802][ T4258] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 41.458330][ T4258] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 41.459366][ T4258] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 41.460550][ T4258] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2909424019 [ 41.462002][ T4258] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 41.471488][ T4262] ubi31: background thread "ubi_bgt31d" started, PID 4262 [ 42.164460][ T4088] Bluetooth: hci1: command 0x0419 tx timeout [ 42.165745][ T4088] Bluetooth: hci0: command 0x0419 tx timeout [ 42.166699][ T4088] Bluetooth: hci3: command 0x0419 tx timeout [ 42.168495][ T4088] Bluetooth: hci2: command 0x0419 tx timeout [ 42.169514][ T4088] Bluetooth: hci4: command 0x0419 tx timeout [ 42.785457][ T4302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'. [ 42.796246][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.806378][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.822725][ T4302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.823981][ T4302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.442900][ T4313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 43.655222][ T4316] loop0: detected capacity change from 0 to 24 [ 43.977428][ T4316] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 43.981357][ T4316] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 44.094753][ T4324] ubi: mtd0 is already attached to ubi31 [ 44.751280][ T4339] loop4: detected capacity change from 0 to 7 [ 46.010459][ T4339] Dev loop4: unable to read RDB block 7 [ 46.011562][ T4339] loop4: AHDI p1 p2 [ 46.012277][ T4339] loop4: partition table partially beyond EOD, truncated [ 46.025290][ T4339] loop4: p1 size 4227858431 extends beyond EOD, truncated [ 46.129992][ T4361] loop0: detected capacity change from 0 to 512 [ 46.179178][ T4361] ======================================================= [ 46.179178][ T4361] WARNING: The mand mount option has been deprecated and [ 46.179178][ T4361] and is ignored by this kernel. Remove the mand [ 46.179178][ T4361] option from the mount to silence this warning. [ 46.179178][ T4361] ======================================================= [ 46.224151][ T4361] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 46.228332][ T26] audit: type=1326 audit(46.210:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabe570a8 code=0x7ffc0000 [ 46.231471][ T26] audit: type=1326 audit(46.210:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4345 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffabe570a8 code=0x7ffc0000 [ 46.246877][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 46.262723][ T4361] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 46.264029][ T4361] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 46.613940][ T4361] EXT4-fs (loop0): 1 truncate cleaned up [ 46.616599][ T4361] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,noquota,grpjquota="errors=continue,block_validity,jqfmt=vfsv1,delalloc,,errors=continue. Quota mode: writeback. [ 46.693499][ T4360] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 4: comm syz.0.57: lblock 0 mapped to illegal pblock 4 (length 1) [ 47.731521][ T4391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 47.759166][ T4390] netlink: 256 bytes leftover after parsing attributes in process `syz.2.63'. [ 47.859634][ T4405] ubi: mtd0 is already attached to ubi31 [ 48.102090][ T4403] loop0: detected capacity change from 0 to 764 [ 48.196529][ T4417] netlink: 'syz.4.77': attribute type 12 has an invalid length. [ 48.220953][ T4403] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 48.778767][ T4427] loop1: detected capacity change from 0 to 8192 [ 49.092659][ T4441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 49.093972][ T4441] netlink: 28 bytes leftover after parsing attributes in process `syz.2.88'. [ 49.114819][ T4443] udc-core: couldn't find an available UDC or it's busy [ 49.115858][ T4443] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 49.741510][ T4438] loop1: detected capacity change from 0 to 32768 [ 49.760568][ T4438] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.87 (4438) [ 49.918668][ T4435] loop0: detected capacity change from 0 to 262144 [ 49.932013][ T4438] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 49.933998][ T4438] BTRFS info (device loop1): using free space tree [ 49.935993][ T4438] BTRFS info (device loop1): has skinny extents [ 49.949481][ T4435] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by syz.0.86 (4435) [ 50.001289][ T4435] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 50.002750][ T4435] BTRFS info (device loop0): using free space tree [ 50.003788][ T4435] BTRFS info (device loop0): has skinny extents [ 50.004707][ T4435] BTRFS info (device loop0): flagging fs with big metadata feature [ 50.023120][ T4438] BTRFS info (device loop1): enabling ssd optimizations [ 50.240384][ T4435] BTRFS info (device loop0): enabling ssd optimizations [ 51.019131][ T4496] loop4: detected capacity change from 0 to 32768 [ 51.190453][ T4527] process 'syz.0.102' launched './file0' with NULL argv: empty string added [ 51.596983][ T4516] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 51.751422][ T4546] udc-core: couldn't find an available UDC or it's busy [ 51.752496][ T4546] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 51.772962][ T4542] loop1: detected capacity change from 0 to 1024 [ 51.860084][ T4542] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000001,usrjquota=,. Quota mode: none. [ 51.869561][ T4516] usb 1-1: Using ep0 maxpacket: 8 [ 52.009381][ T4516] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 52.010789][ T4516] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 52.012401][ T4516] usb 1-1: config 0 has no interfaces? [ 52.013207][ T4516] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 52.014588][ T4516] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.028244][ T4516] usb 1-1: config 0 descriptor?? [ 52.072923][ T4556] loop2: detected capacity change from 0 to 512 [ 52.194595][ T4556] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.196624][ T4556] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 52.206421][ T4556] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.211786][ T4556] EXT4-fs (loop2): 1 truncate cleaned up [ 52.212842][ T4556] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,sysvgroups,,errors=continue. Quota mode: none. [ 53.030657][ T4572] loop1: detected capacity change from 0 to 1024 [ 53.146061][ T361] hfsplus: b-tree write err: -5, ino 4 [ 53.765396][ T4589] loop1: detected capacity change from 0 to 512 [ 53.782800][ T4589] EXT4-fs (loop1): Ignoring removed oldalloc option [ 53.793609][ T4589] EXT4-fs (loop1): 1 truncate cleaned up [ 53.794523][ T4589] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 53.895610][ T4592] loop1: detected capacity change from 0 to 64 [ 54.121593][ T4598] ubi: mtd0 is already attached to ubi31 [ 54.397561][ T4602] udc-core: couldn't find an available UDC or it's busy [ 54.398697][ T4602] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 54.495345][ T4603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 54.497046][ T4603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.127'. [ 54.830756][ T4516] usb 1-1: USB disconnect, device number 2 [ 56.403045][ T4628] loop4: detected capacity change from 0 to 1024 [ 56.922002][ T4644] loop0: detected capacity change from 0 to 32768 [ 57.320750][ T4628] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,grpquota,,errors=continue. Quota mode: writeback. [ 57.324416][ T4644] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 57.366681][ T4628] EXT4-fs error (device loop4): ext4_map_blocks:739: inode #15: block 1: comm syz.4.137: lblock 1 mapped to illegal pblock 1 (length 3) [ 57.380749][ T4628] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 57.389926][ T4658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 57.396219][ T4628] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.396219][ T4628] [ 57.439928][ T4665] loop3: detected capacity change from 0 to 256 [ 57.520176][ T4666] [ 57.520581][ T4666] ====================================================== [ 57.521605][ T4666] WARNING: possible circular locking dependency detected [ 57.522699][ T4666] 5.15.189-syzkaller #0 Not tainted [ 57.523495][ T4666] ------------------------------------------------------ [ 57.524508][ T4666] syz.0.142/4666 is trying to acquire lock: [ 57.525373][ T4666] ffff0000c7f65488 (&osb->system_file_mutex){+.+.}-{3:3}, at: ocfs2_get_system_file_inode+0x15c/0x5ec [ 57.527029][ T4666] [ 57.527029][ T4666] but task is already holding lock: [ 57.528185][ T4666] ffff0000dd740660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_extend_dir+0x498/0x390c [ 57.529923][ T4666] [ 57.529923][ T4666] which lock already depends on the new lock. [ 57.529923][ T4666] [ 57.531577][ T4666] [ 57.531577][ T4666] the existing dependency chain (in reverse order) is: [ 57.532890][ T4666] [ 57.532890][ T4666] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 57.534177][ T4666] down_read+0xc0/0x390 [ 57.534869][ T4666] ocfs2_read_virt_blocks+0x228/0x858 [ 57.535744][ T4666] ocfs2_find_entry+0x314/0x1b84 [ 57.536567][ T4666] ocfs2_find_files_on_disk+0x10c/0x388 [ 57.537442][ T4666] ocfs2_lookup_ino_from_name+0x60/0x114 [ 57.538329][ T4666] ocfs2_get_system_file_inode+0x288/0x5ec [ 57.539242][ T4666] ocfs2_init_global_system_inodes+0x2a8/0x594 [ 57.540234][ T4666] ocfs2_fill_super+0x3128/0x4074 [ 57.541063][ T4666] mount_bdev+0x264/0x358 [ 57.541898][ T4666] ocfs2_mount+0x44/0x58 [ 57.542659][ T4666] legacy_get_tree+0xd4/0x16c [ 57.543549][ T4666] vfs_get_tree+0x90/0x274 [ 57.544357][ T4666] do_new_mount+0x228/0x810 [ 57.545225][ T4666] path_mount+0x5b4/0x1000 [ 57.546091][ T4666] __arm64_sys_mount+0x514/0x5e4 [ 57.547005][ T4666] invoke_syscall+0x98/0x2b8 [ 57.547765][ T4666] el0_svc_common+0x138/0x258 [ 57.548674][ T4666] do_el0_svc+0x58/0x14c [ 57.549472][ T4666] el0_svc+0x78/0x1e0 [ 57.550245][ T4666] el0t_64_sync_handler+0xcc/0xe4 [ 57.551239][ T4666] el0t_64_sync+0x1a0/0x1a4 [ 57.552071][ T4666] [ 57.552071][ T4666] -> #0 (&osb->system_file_mutex){+.+.}-{3:3}: [ 57.553528][ T4666] __lock_acquire+0x2928/0x651c [ 57.554393][ T4666] lock_acquire+0x1f4/0x620 [ 57.555124][ T4666] __mutex_lock_common+0x194/0x1edc [ 57.555944][ T4666] mutex_lock_nested+0xac/0x11c [ 57.556726][ T4666] ocfs2_get_system_file_inode+0x15c/0x5ec [ 57.557694][ T4666] ocfs2_reserve_suballoc_bits+0x11c/0x3a68 [ 57.558650][ T4666] ocfs2_reserve_new_metadata_blocks+0x34c/0x7d8 [ 57.559694][ T4666] ocfs2_extend_dir+0x96c/0x390c [ 57.560544][ T4666] ocfs2_prepare_dir_for_insert+0x25c0/0x4408 [ 57.561527][ T4666] ocfs2_mknod+0x710/0x1e88 [ 57.562295][ T4666] vfs_mknod+0x3c4/0x44c [ 57.562992][ T4666] do_mknodat+0x3dc/0x5ac [ 57.563709][ T4666] __arm64_sys_mknodat+0xb0/0xcc [ 57.564541][ T4666] invoke_syscall+0x98/0x2b8 [ 57.565330][ T4666] el0_svc_common+0x138/0x258 [ 57.566119][ T4666] do_el0_svc+0x58/0x14c [ 57.566878][ T4666] el0_svc+0x78/0x1e0 [ 57.567534][ T4666] el0t_64_sync_handler+0xcc/0xe4 [ 57.568385][ T4666] el0t_64_sync+0x1a0/0x1a4 [ 57.569160][ T4666] [ 57.569160][ T4666] other info that might help us debug this: [ 57.569160][ T4666] [ 57.570653][ T4666] Possible unsafe locking scenario: [ 57.570653][ T4666] [ 57.571801][ T4666] CPU0 CPU1 [ 57.572639][ T4666] ---- ---- [ 57.573438][ T4666] lock(&ocfs2_file_ip_alloc_sem_key); [ 57.574306][ T4666] lock(&osb->system_file_mutex); [ 57.575464][ T4666] lock(&ocfs2_file_ip_alloc_sem_key); [ 57.576661][ T4666] lock(&osb->system_file_mutex); [ 57.577469][ T4666] [ 57.577469][ T4666] *** DEADLOCK *** [ 57.577469][ T4666] [ 57.578659][ T4666] 3 locks held by syz.0.142/4666: [ 57.579416][ T4666] #0: ffff0000d365e460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 57.580770][ T4666] #1: ffff0000dd7409c8 (&type->i_mutex_dir_key#14/1){+.+.}-{3:3}, at: filename_create+0x1ac/0x39c [ 57.582381][ T4666] #2: ffff0000dd740660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_extend_dir+0x498/0x390c [ 57.584043][ T4666] [ 57.584043][ T4666] stack backtrace: [ 57.584935][ T4666] CPU: 0 PID: 4666 Comm: syz.0.142 Not tainted 5.15.189-syzkaller #0 [ 57.586127][ T4666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 57.587642][ T4666] Call trace: [ 57.588098][ T4666] dump_backtrace+0x0/0x43c [ 57.588793][ T4666] show_stack+0x2c/0x3c [ 57.589389][ T4666] __dump_stack+0x30/0x40 [ 57.590000][ T4666] dump_stack_lvl+0xf8/0x160 [ 57.590622][ T4666] dump_stack+0x1c/0x5c [ 57.591247][ T4666] print_circular_bug+0x148/0x1b0 [ 57.592049][ T4666] check_noncircular+0x240/0x2d4 [ 57.592741][ T4666] __lock_acquire+0x2928/0x651c [ 57.593511][ T4666] lock_acquire+0x1f4/0x620 [ 57.594197][ T4666] __mutex_lock_common+0x194/0x1edc [ 57.594987][ T4666] mutex_lock_nested+0xac/0x11c [ 57.595756][ T4666] ocfs2_get_system_file_inode+0x15c/0x5ec [ 57.596610][ T4666] ocfs2_reserve_suballoc_bits+0x11c/0x3a68 [ 57.597460][ T4666] ocfs2_reserve_new_metadata_blocks+0x34c/0x7d8 [ 57.598350][ T4666] ocfs2_extend_dir+0x96c/0x390c [ 57.599090][ T4666] ocfs2_prepare_dir_for_insert+0x25c0/0x4408 [ 57.599971][ T4666] ocfs2_mknod+0x710/0x1e88 [ 57.600588][ T4666] vfs_mknod+0x3c4/0x44c [ 57.601317][ T4666] do_mknodat+0x3dc/0x5ac [ 57.602049][ T4666] __arm64_sys_mknodat+0xb0/0xcc [ 57.602882][ T4666] invoke_syscall+0x98/0x2b8 [ 57.603576][ T4666] el0_svc_common+0x138/0x258 [ 57.604339][ T4666] do_el0_svc+0x58/0x14c [ 57.605004][ T4666] el0_svc+0x78/0x1e0 [ 57.605655][ T4666] el0t_64_sync_handler+0xcc/0xe4 [ 57.606423][ T4666] el0t_64_sync+0x1a0/0x1a4 [ 57.659086][ T4665] FAT-fs (loop3): Directory bread(block 64) failed [ 57.660332][ T4665] FAT-fs (loop3): Directory bread(block 65) failed [ 57.661501][ T4665] FAT-fs (loop3): Directory bread(block 66) failed [ 57.662624][ T4665] FAT-fs (loop3): Directory bread(block 67) failed [ 57.663583][ T4665] FAT-fs (loop3): Directory bread(block 68) failed [ 57.664634][ T4665] FAT-fs (loop3): Directory bread(block 69) failed [ 57.665799][ T4665] FAT-fs (loop3): Directory bread(block 70) failed [ 57.671484][ T4665] FAT-fs (loop3): Directory bread(block 71) failed [ 57.673826][ T4665] FAT-fs (loop3): Directory bread(block 72) failed [ 57.676027][ T4665] FAT-fs (loop3): Directory bread(block 73) failed [ 57.705263][ T4048] (syz-executor,4048,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 57.707332][ T4048] ocfs2: Unmounting device (7,0) on (node local)