last executing test programs: 14.634409717s ago: executing program 2 (id=112): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) io_setup(0x82, &(0x7f0000000240)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8) io_submit(r5, 0x1, &(0x7f0000000640)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x5, r6, &(0x7f0000000680)='1,N-', 0x4, 0x1}]) 12.071799017s ago: executing program 2 (id=119): r0 = getpid() prlimit64(0x0, 0x7, &(0x7f0000004080), 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) 11.986381309s ago: executing program 2 (id=120): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 11.103412866s ago: executing program 2 (id=123): socket$netlink(0x10, 0x3, 0xf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040040) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_GET(r4, &(0x7f0000004700)={0x0, 0x0, &(0x7f00000046c0)={&(0x7f0000004640)={0x14, 0x0, 0xb19, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x20008080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.074192236s ago: executing program 2 (id=127): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x1, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x5}, 0x4}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 10.026335177s ago: executing program 1 (id=128): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000001940)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 8.788493651s ago: executing program 2 (id=131): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 8.617707994s ago: executing program 1 (id=134): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 7.655138612s ago: executing program 1 (id=135): io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70], 0x1, 0x1e9, &(0x7f00000002c0)="$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") 7.640703633s ago: executing program 3 (id=136): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 7.170479452s ago: executing program 0 (id=139): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) lseek(r2, 0x1, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000600)={[{@nouser_xattr}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0x3, 0x570, &(0x7f0000000680)="$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") mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 5.389564086s ago: executing program 4 (id=142): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x1, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x5}, 0x4}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 4.931192595s ago: executing program 0 (id=143): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x82, &(0x7f0000000240)=0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8) io_submit(r5, 0x1, &(0x7f0000000640)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x5, r6, &(0x7f0000000680)='1,N-', 0x4, 0x1}]) 4.746296169s ago: executing program 3 (id=144): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@nolazytime}]}, 0x1, 0x241, &(0x7f00000020c0)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="08002bbd7000ffdbdf251a00000000000100730000006c29cc00"], 0x20}}, 0x20000000) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={r2, 0xee01}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x9, r6}, 0x38) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000c62) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0x1006) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x30, 0x99, 0x4, 0xfffff020}, {0x6, 0x0, 0x1, 0x5}]}, 0x10) 4.295010597s ago: executing program 4 (id=145): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x109081, 0x34) 4.235756758s ago: executing program 4 (id=146): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x20000000000001d2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f00000002c0)='./file1\x00', 0x4, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) 3.288325207s ago: executing program 4 (id=147): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x401, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x800, 0x0) rt_sigqueueinfo(0x0, 0x21, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) 3.168561529s ago: executing program 3 (id=148): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x800000, &(0x7f0000000540)=ANY=[@ANYBLOB='shortname=lower,shortname=winnt,shortname=win95,iocharset=macinuit,shortname=mixed,codepage=1255,nocase,check=strict,rodir,shortname=winnt,iocharset=cp1251,uid=', @ANYRESDEC, @ANYRESDEC, @ANYRESHEX, @ANYRES64], 0xfd, 0x29f, &(0x7f0000000a00)="$eJzs3U1rK1UcB+B/bnNvkguSLITLFaEjLnQV2oq4TZEKYkBRstCVxaYoTS20UNBF213xO+g3EF0KrgQX4lZwLYJUwY111UVlJE5aZ5oXW20a6X2eTU/POb+cc+YMM3TRk7ef3NxY29pZPz4+imq1FOVWtEonpWjEnZiLzEEAALfJSZrGb2lm1nMBAG6G9z8APHomvf9LB+d1r938zACAaflPf//fmcqUAIApe+PNt15ZbrdXXk+SasTm4W5nt5P9zNqX1+O96EU3FqIepxHpuYj9NE1ferm9spD0/dyI6ub+IL+/25kr5hejHo18/st6/7d+fjHJRCefvxv3B/kf7kc3lqIejxfHTwfjL43M34tnn86N34x6fPdObEUv1qKfzfKViNhbTJIXX21fyFf+6jfs+5vcHgAAAAAAAAAAAAAAAAAAAAAAbqlmcq5RPP8mO7+n2RzXnuXz5wPVTkefz7Mw8nyecjxRnu3aAQAAAAAAAAAAAAAAAAAA4P9i54MPN1Z7ve72pML733729VElC/xj58mF0mDcq6UOCzUvPFOcRu1yq7hQeOypnz4e1VSJylWvz78r3I2IfE0yGPKr+SkOel2Fb47effjczoPnx/WJcr7mo/5SC32yHXw4qPn0rKl8uQt+b/T988fg6IkRTb/WI8Z+YHXUDVkb7pzWsx0qxj8/K7R+H/rks1upu10bGr06/W2az9U8+KS1+sXej79cNj7hoZHOXftzCAAAAAAAAAAAAAAAAAAAyP9/+6xnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACz8/f3/1+1UIlCTXVs54NZrxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4MAAD//wuTkgI=") unshare(0x20020000) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='binfmt_misc\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) poll(0x0, 0x0, 0x90f0) r0 = open(&(0x7f0000000000)='.\x00', 0x800, 0x0) unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) 2.815140836s ago: executing program 1 (id=149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) 2.59520312s ago: executing program 1 (id=150): syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x4, 0x2, 0x0, @private=0xa010102, @broadcast}, {0x12, 0x81, 0x0, @multicast2=0xe0000001}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}}, 0x0) 1.53809251s ago: executing program 0 (id=151): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) setresgid(0xee00, 0xee01, 0x0) 1.323910285s ago: executing program 3 (id=152): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001080)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 1.322664394s ago: executing program 0 (id=153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x1, 0x7fe2, 0x1, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.081030999s ago: executing program 3 (id=154): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x28000600) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]}) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) fdatasync(r0) 1.08076835s ago: executing program 0 (id=155): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000780)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1fc0a0869fd0e76753a00000400", 0x0, 0x400006, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.04630881s ago: executing program 3 (id=156): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x1, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x5}, 0x4}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 172.878727ms ago: executing program 0 (id=157): syz_emit_ethernet(0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) dup(0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) utime(&(0x7f0000000340)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) rename(0x0, 0x0) pause() syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2900, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 117.957698ms ago: executing program 4 (id=158): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff09"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 37.235149ms ago: executing program 4 (id=159): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff00000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) socket$packet(0x11, 0xa, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_emit_ethernet(0x82, &(0x7f0000000380)=ANY=[], 0x0) 0s ago: executing program 1 (id=160): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e000100fdffff082e947eff00000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r4, @ANYRESOCT=r4, @ANYRES32=0x0], 0x28}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. syzkaller login: [ 49.814450][ T4173] cgroup: Unknown subsys name 'net' [ 49.947132][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.148584][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 52.435777][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 52.535708][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 52.545610][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 52.582903][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.590662][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.599033][ T4191] device bridge_slave_0 entered promiscuous mode [ 52.607200][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 52.628435][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 52.636986][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.644295][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.652365][ T4191] device bridge_slave_1 entered promiscuous mode [ 52.715752][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.740513][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.776453][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.783606][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.791209][ T4192] device bridge_slave_0 entered promiscuous mode [ 52.817782][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.825038][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.833129][ T4192] device bridge_slave_1 entered promiscuous mode [ 52.863756][ T4191] team0: Port device team_slave_0 added [ 52.869678][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.876912][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.884611][ T4184] device bridge_slave_0 entered promiscuous mode [ 52.905613][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.912910][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.920518][ T4185] device bridge_slave_0 entered promiscuous mode [ 52.928945][ T4191] team0: Port device team_slave_1 added [ 52.942157][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.949406][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.957102][ T4184] device bridge_slave_1 entered promiscuous mode [ 52.970936][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.978183][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.986016][ T4183] device bridge_slave_0 entered promiscuous mode [ 52.993865][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.000926][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.008776][ T4185] device bridge_slave_1 entered promiscuous mode [ 53.032173][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.042661][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.049733][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.057614][ T4183] device bridge_slave_1 entered promiscuous mode [ 53.085656][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.092911][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.118985][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.139355][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.150465][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.167591][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.174776][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.200752][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.213570][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.231325][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.242618][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.264144][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.281394][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.300625][ T4183] team0: Port device team_slave_0 added [ 53.308277][ T4183] team0: Port device team_slave_1 added [ 53.323209][ T4192] team0: Port device team_slave_0 added [ 53.358634][ T4192] team0: Port device team_slave_1 added [ 53.367139][ T4184] team0: Port device team_slave_0 added [ 53.382140][ T4185] team0: Port device team_slave_0 added [ 53.390037][ T4185] team0: Port device team_slave_1 added [ 53.408295][ T4184] team0: Port device team_slave_1 added [ 53.434316][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.441273][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.467552][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.480082][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.487215][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.513148][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.538898][ T4191] device hsr_slave_0 entered promiscuous mode [ 53.545611][ T4191] device hsr_slave_1 entered promiscuous mode [ 53.564251][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.571209][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.597418][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.610079][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.617243][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.643365][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.662640][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.669593][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.695664][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.727028][ T4183] device hsr_slave_0 entered promiscuous mode [ 53.734430][ T4183] device hsr_slave_1 entered promiscuous mode [ 53.741391][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.749188][ T4183] Cannot create hsr debugfs directory [ 53.762505][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.769452][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.795675][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.807177][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.814510][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.840428][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.868071][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.875236][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.901645][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.953563][ T4192] device hsr_slave_0 entered promiscuous mode [ 53.960516][ T4192] device hsr_slave_1 entered promiscuous mode [ 53.967229][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.974916][ T4192] Cannot create hsr debugfs directory [ 53.999228][ T4185] device hsr_slave_0 entered promiscuous mode [ 54.006214][ T4185] device hsr_slave_1 entered promiscuous mode [ 54.012852][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.020393][ T4185] Cannot create hsr debugfs directory [ 54.075752][ T4184] device hsr_slave_0 entered promiscuous mode [ 54.083130][ T4184] device hsr_slave_1 entered promiscuous mode [ 54.089700][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.097581][ T4184] Cannot create hsr debugfs directory [ 54.193284][ T1326] Bluetooth: hci2: command 0x0409 tx timeout [ 54.199905][ T1326] Bluetooth: hci0: command 0x0409 tx timeout [ 54.199961][ T4189] Bluetooth: hci4: command 0x0409 tx timeout [ 54.218700][ T4189] Bluetooth: hci3: command 0x0409 tx timeout [ 54.224937][ T4189] Bluetooth: hci1: command 0x0409 tx timeout [ 54.348919][ T4191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.360129][ T4191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.372068][ T4191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.386378][ T4191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.418137][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.428801][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.443046][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.455267][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.502959][ T4192] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.521314][ T4192] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.531150][ T4192] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.540763][ T4192] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.631274][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.647201][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.673874][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.680720][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.690349][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.718926][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.744850][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.763419][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.775649][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.788323][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.796417][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.805225][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.815047][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.824258][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.831947][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.845292][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.855856][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.864484][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.872186][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.881246][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.893602][ T1225] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.900768][ T1225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.911337][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.919104][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.944793][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.953956][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.962806][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.971194][ T1225] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.978291][ T1225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.986695][ T1225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.998844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.007719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.016434][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.023528][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.044453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.053517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.063866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.072814][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.079863][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.088112][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.097024][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.106414][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.119266][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.127525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.137432][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.146485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.155397][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.162483][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.179693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.188854][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.219711][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.228606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.238124][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.247494][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.254572][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.262951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.271409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.280229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.303516][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.313980][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.324207][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.332925][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.341049][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.350728][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.364864][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.374744][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.395888][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.404418][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.413473][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.421769][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.431149][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.439747][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 55.450308][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 55.459408][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.468077][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.477011][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.500338][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.531265][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.540866][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.561536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 55.583091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 55.591801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 55.601327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 55.614587][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 55.624727][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.639317][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.658172][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.698988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 55.708936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 55.737927][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.745071][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.767448][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.787682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 55.799059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 55.808032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 55.816816][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.823934][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.833530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 55.843322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 55.852141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 55.860844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 55.888327][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.898169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.908015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.916540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.924470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.931865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 55.940795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 55.953420][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.966157][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.981986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 55.990572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.998084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.019588][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.034836][ T4185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 56.046759][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.059047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.068545][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.078066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.086690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.096187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.105100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.114823][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.121869][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.130977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.140328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.148996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.157379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.167071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.174871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.186967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.196035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.205633][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.212810][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.231238][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.256153][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.268053][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.276017][ T4241] Bluetooth: hci1: command 0x041b tx timeout [ 56.288580][ T4241] Bluetooth: hci3: command 0x041b tx timeout [ 56.295297][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.308224][ T4241] Bluetooth: hci4: command 0x041b tx timeout [ 56.315334][ T4241] Bluetooth: hci0: command 0x041b tx timeout [ 56.327709][ T4241] Bluetooth: hci2: command 0x041b tx timeout [ 56.345476][ T4183] device veth0_vlan entered promiscuous mode [ 56.353688][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.364168][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.378290][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.387933][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.401843][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.411058][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.419679][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.433037][ T4192] device veth0_vlan entered promiscuous mode [ 56.448670][ T4183] device veth1_vlan entered promiscuous mode [ 56.476556][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.491518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.499858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.508645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.518546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.527102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.535437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.543135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.550927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.559689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.580547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.589558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.598435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.607413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.618009][ T4192] device veth1_vlan entered promiscuous mode [ 56.634679][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.707452][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.716560][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.725210][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.734705][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.743257][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.751723][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.765933][ T4183] device veth0_macvtap entered promiscuous mode [ 56.777120][ T4192] device veth0_macvtap entered promiscuous mode [ 56.785960][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.796762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.805142][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.814264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.829956][ T4185] device veth0_vlan entered promiscuous mode [ 56.839166][ T4183] device veth1_macvtap entered promiscuous mode [ 56.848959][ T4192] device veth1_macvtap entered promiscuous mode [ 56.861784][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.871087][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.879112][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.889714][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.899870][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.908695][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.920246][ T4185] device veth1_vlan entered promiscuous mode [ 56.937544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.946296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.954133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.974195][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.983765][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.006997][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.017460][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.028006][ T4191] device veth0_vlan entered promiscuous mode [ 57.036718][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.044847][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.052923][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.060561][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.069114][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.093212][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.106089][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.118250][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.132021][ T4191] device veth1_vlan entered promiscuous mode [ 57.138865][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.149023][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.158364][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.168524][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.177796][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.192291][ T4185] device veth0_macvtap entered promiscuous mode [ 57.201932][ T4185] device veth1_macvtap entered promiscuous mode [ 57.211962][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.223673][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.233456][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.242148][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.250904][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.262186][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.275021][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.287088][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.295646][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.303934][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.311753][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.320675][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.329392][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.338647][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.363267][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.374006][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.384148][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.400086][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.410986][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.427100][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.439233][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.449370][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.460447][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.471287][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.481501][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.490186][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.499314][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.508416][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.517849][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.526573][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.535339][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.545329][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.555514][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.564535][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.573485][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.604298][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.613913][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.625401][ T4191] device veth0_macvtap entered promiscuous mode [ 57.637873][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.647099][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.655665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.666229][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.675271][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.684119][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.692856][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.709171][ T4191] device veth1_macvtap entered promiscuous mode [ 57.728838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.739827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.747751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.763474][ T4184] device veth0_vlan entered promiscuous mode [ 57.783323][ T4184] device veth1_vlan entered promiscuous mode [ 57.802658][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.814358][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.824489][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.835170][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.845212][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.856635][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.867582][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.889937][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.899468][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.907568][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.916260][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.929177][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.939990][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.950200][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.961397][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.975573][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.986166][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.997244][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.049761][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.059419][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.071383][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.080398][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.089411][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.098158][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.140402][ T4266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.150318][ T4266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.159118][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.176655][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.202421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.205207][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.210233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.228411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.230427][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.242674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.254578][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.274614][ T4184] device veth0_macvtap entered promiscuous mode [ 58.315454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.341445][ T4184] device veth1_macvtap entered promiscuous mode [ 58.353117][ T4263] Bluetooth: hci2: command 0x040f tx timeout [ 58.360108][ T4263] Bluetooth: hci0: command 0x040f tx timeout [ 58.384075][ T4263] Bluetooth: hci4: command 0x040f tx timeout [ 58.395839][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.397008][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.415715][ T4263] Bluetooth: hci3: command 0x040f tx timeout [ 58.417344][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.442664][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.451085][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.471189][ T4263] Bluetooth: hci1: command 0x040f tx timeout [ 58.480560][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.490699][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.501972][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.512146][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.522758][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.536381][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.546870][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.558877][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.567556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.576800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.586874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.595437][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.604622][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.626586][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.638271][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.656175][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.670371][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.688051][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.699824][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.715299][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.727908][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.740459][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.750281][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.763257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.771902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.783854][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.825355][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.835923][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.851591][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.866061][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.878158][ T25] audit: type=1326 audit(1757705573.509:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 58.879579][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.922081][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.922789][ T25] audit: type=1326 audit(1757705573.549:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 58.942458][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.978342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.989166][ T25] audit: type=1326 audit(1757705573.549:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 59.006941][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.089886][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.116943][ T25] audit: type=1326 audit(1757705573.549:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 59.126284][ T571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.160622][ T4306] loop1: detected capacity change from 0 to 1024 [ 59.171006][ T25] audit: type=1326 audit(1757705573.549:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 59.212832][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.244289][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.245117][ T4306] ======================================================= [ 59.245117][ T4306] WARNING: The mand mount option has been deprecated and [ 59.245117][ T4306] and is ignored by this kernel. Remove the mand [ 59.245117][ T4306] option from the mount to silence this warning. [ 59.245117][ T4306] ======================================================= [ 59.253134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.432497][ T25] audit: type=1326 audit(1757705573.549:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 59.515491][ T571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.540212][ T571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.555924][ T25] audit: type=1326 audit(1757705573.549:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 59.595239][ T4266] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.628304][ T4306] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 59.697110][ T4316] syz.0.6[4316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.697202][ T4316] syz.0.6[4316] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.744911][ T25] audit: type=1326 audit(1757705573.549:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 59.748298][ T4306] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.067305][ T4306] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: block 3: comm syz.1.2: lblock 3 mapped to illegal pblock 3 (length 3) [ 60.188543][ T4306] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 60.188718][ T4306] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.188718][ T4306] [ 60.394793][ T25] audit: type=1326 audit(1757705573.589:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 60.394840][ T25] audit: type=1326 audit(1757705573.589:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4302 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 60.433568][ T4189] Bluetooth: hci3: command 0x0419 tx timeout [ 60.433888][ T4189] Bluetooth: hci4: command 0x0419 tx timeout [ 60.433972][ T4189] Bluetooth: hci0: command 0x0419 tx timeout [ 60.434023][ T4189] Bluetooth: hci2: command 0x0419 tx timeout [ 60.544496][ T4189] Bluetooth: hci1: command 0x0419 tx timeout [ 60.620199][ T9] EXT4-fs error (device loop1): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 60.626100][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 60.626164][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.626164][ T9] [ 61.248399][ T4326] loop4: detected capacity change from 0 to 512 [ 61.378890][ T4326] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 61.378927][ T4326] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 61.378942][ T4326] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 61.419046][ T4326] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 61.419067][ T4326] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 61.419186][ T4326] EXT4-fs (loop4): failed to initialize system zone (-117) [ 61.419296][ T4326] EXT4-fs (loop4): mount failed [ 62.644939][ T1109] cfg80211: failed to load regulatory.db [ 63.657453][ T2398] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 63.889734][ T4353] loop4: detected capacity change from 0 to 256 [ 63.932335][ T2398] usb 4-1: Using ep0 maxpacket: 16 [ 64.021228][ T4353] FAT-fs (loop4): Directory bread(block 64) failed [ 64.037055][ T4353] FAT-fs (loop4): Directory bread(block 65) failed [ 64.053800][ T4353] FAT-fs (loop4): Directory bread(block 66) failed [ 64.060783][ T4353] FAT-fs (loop4): Directory bread(block 67) failed [ 64.080977][ T4353] FAT-fs (loop4): Directory bread(block 68) failed [ 64.095505][ T2398] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 64.101141][ T4353] FAT-fs (loop4): Directory bread(block 69) failed [ 64.113649][ T2398] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 64.122435][ T4353] FAT-fs (loop4): Directory bread(block 70) failed [ 64.139214][ T4353] FAT-fs (loop4): Directory bread(block 71) failed [ 64.161227][ T4353] FAT-fs (loop4): Directory bread(block 72) failed [ 64.179673][ T4353] FAT-fs (loop4): Directory bread(block 73) failed [ 64.302609][ T2398] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 64.316968][ T2398] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.335491][ T2398] usb 4-1: Product: syz [ 64.344187][ T2398] usb 4-1: Manufacturer: syz [ 64.354379][ T2398] usb 4-1: SerialNumber: syz [ 64.514148][ T4355] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.877496][ T1326] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.162368][ T1326] usb 2-1: Using ep0 maxpacket: 16 [ 65.309429][ T1326] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 65.326984][ T1326] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 65.543202][ T1326] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 65.561152][ T1326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.623167][ T1326] usb 2-1: Product: syz [ 65.640700][ T1326] usb 2-1: Manufacturer: syz [ 65.650875][ T1326] usb 2-1: SerialNumber: syz [ 65.758989][ T4367] xt_nfacct: accounting object `syz1' does not exist [ 65.803046][ T4369] usb usb5: usbfs: process 4369 (syz.4.17) did not claim interface 0 before use [ 66.275590][ T4371] loop1: detected capacity change from 0 to 1024 [ 66.428926][ T4371] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 66.705850][ T4371] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,norecovery,resgid=0x0000000000000000,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,grpid,auto_da_alloc=0x0000000000000343,grpid,barrier=0x0000000000000007,nombcache,. Quota mode: none. [ 66.787084][ T4371] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #11: comm syz.1.14: missing EA_INODE flag [ 66.804824][ T4371] EXT4-fs (loop1): Remounting filesystem read-only [ 66.812096][ T4371] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.14: error while reading EA inode 11 err=-117 [ 66.834489][ T4371] EXT4-fs (loop1): Remounting filesystem read-only [ 66.841488][ T4371] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.272230][ C0] sched: RT throttling activated [ 67.272953][ T2398] usb 4-1: 0:2 : does not exist [ 67.300395][ T2398] usb 4-1: USB disconnect, device number 2 [ 67.911897][ T4378] device ip6tnl0 entered promiscuous mode [ 67.984475][ T4377] device ip6tnl0 left promiscuous mode [ 68.342548][ T1326] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 68.381652][ T1326] usb 2-1: USB disconnect, device number 2 [ 68.682637][ T4390] loop1: detected capacity change from 0 to 4096 [ 68.748798][ T4395] loop4: detected capacity change from 0 to 512 [ 68.768948][ T4390] EXT4-fs (loop1): Test dummy encryption mode enabled [ 68.811558][ T4390] EXT4-fs (loop1): unsupported descriptor size 255 [ 69.105870][ T4395] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 69.147442][ T4395] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.211638][ T4386] loop3: detected capacity change from 0 to 40427 [ 69.250754][ T4386] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 69.314718][ T4386] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 69.336221][ T4395] overlayfs: conflicting lowerdir path [ 69.429273][ T4386] F2FS-fs (loop3): invalid crc value [ 69.505295][ T4386] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.671714][ T4386] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 69.703915][ T4386] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 70.179661][ T4416] loop4: detected capacity change from 0 to 4096 [ 70.332110][ T4416] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 70.419658][ T4422] Zero length message leads to an empty skb [ 71.165956][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.172518][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.562399][ T1326] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.583445][ T4416] EXT4-fs (loop4): Test dummy encryption mode enabled [ 71.612900][ T4416] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,mblk_io_submit,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue. Quota mode: writeback. [ 71.862628][ T1326] usb 3-1: Using ep0 maxpacket: 16 [ 71.987667][ T4416] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 72.012680][ T1326] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.037389][ T1326] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.262594][ T1326] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 72.286407][ T1326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.304703][ T1326] usb 3-1: Product: syz [ 72.308885][ T1326] usb 3-1: Manufacturer: syz [ 72.335091][ T1326] usb 3-1: SerialNumber: syz [ 72.788394][ T4445] loop1: detected capacity change from 0 to 2048 [ 72.881958][ T4448] loop3: detected capacity change from 0 to 512 [ 72.945289][ T4448] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 72.958559][ T4448] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.160343][ T4445] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.230485][ T4448] EXT4-fs (loop3): 1 truncate cleaned up [ 73.236323][ T4448] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 74.470449][ T4460] syz.0.33[4460] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.470548][ T4460] syz.0.33[4460] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.776444][ T1326] usb 3-1: 0:2 : does not exist [ 75.528255][ T1326] usb 3-1: USB disconnect, device number 2 [ 75.702421][ T4466] loop1: detected capacity change from 0 to 4096 [ 75.793123][ T4380] udevd[4380]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.809097][ T4466] EXT4-fs (loop1): Test dummy encryption mode enabled [ 75.840491][ T4466] EXT4-fs (loop1): unsupported descriptor size 255 [ 75.977919][ T4474] loop3: detected capacity change from 0 to 512 [ 76.109032][ T4474] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 76.152543][ T4474] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.487530][ T4484] xt_nfacct: accounting object `syz1' does not exist [ 78.034721][ T4489] loop2: detected capacity change from 0 to 256 [ 78.082691][ T4489] exfat: Unknown parameter 'fsmagic' [ 78.165143][ T4489] loop2: detected capacity change from 0 to 2048 [ 78.216950][ T4489] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.440673][ T4486] loop1: detected capacity change from 0 to 40427 [ 78.478006][ T4486] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 78.517902][ T4486] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 78.578767][ T4486] F2FS-fs (loop1): invalid crc value [ 78.634575][ T4486] F2FS-fs (loop1): Found nat_bits in checkpoint [ 78.761901][ T4486] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 78.780831][ T4486] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 80.981575][ T25] kauditd_printk_skb: 10 callbacks suppressed [ 80.981587][ T25] audit: type=1326 audit(1757705595.609:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ffbd9ba9 code=0x7ffc0000 [ 81.021473][ T4510] syz.1.45[4510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.021558][ T4510] syz.1.45[4510] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.072973][ T25] audit: type=1326 audit(1757705595.649:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ffbd9ba9 code=0x7ffc0000 [ 81.192305][ T25] audit: type=1326 audit(1757705595.649:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe9ffbd9ba9 code=0x7ffc0000 [ 81.252570][ T25] audit: type=1326 audit(1757705595.789:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ffbd9ba9 code=0x7ffc0000 [ 81.320234][ T25] audit: type=1326 audit(1757705595.789:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4509 comm="syz.1.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9ffbd9ba9 code=0x7ffc0000 [ 81.460814][ T4518] loop2: detected capacity change from 0 to 128 [ 81.717761][ T4518] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.738347][ T4518] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.369445][ T25] audit: type=1326 audit(1757705597.999:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64256d6ba9 code=0x7ffc0000 [ 83.471597][ T4537] loop2: detected capacity change from 0 to 1024 [ 83.753767][ T4537] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 84.283833][ T25] audit: type=1326 audit(1757705598.169:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f64256d6ba9 code=0x7ffc0000 [ 84.489259][ T25] audit: type=1326 audit(1757705598.239:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4533 comm="syz.3.52" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64256d6ba9 code=0x7ffc0000 [ 85.630639][ T4551] loop4: detected capacity change from 0 to 512 [ 85.771209][ T4558] xt_nfacct: accounting object `syz1' does not exist [ 87.005569][ T4551] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.59: Invalid inode bitmap blk 4 in block_group 0 [ 87.040623][ T4551] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,resuid=0x0000000000000000,grpquota,noload,nobarrier,lazytime,,errors=continue. Quota mode: writeback. [ 87.177140][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.492357][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 87.613357][ T21] usb 1-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 87.759635][ T21] usb 1-1: config 1 interface 0 has no altsetting 0 [ 87.955605][ T21] usb 1-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.40 [ 87.975482][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.995432][ T21] usb 1-1: Product: 龤㺼ꁄ操杻ꪲ뜃﭅嚅愄垂↖議ᢜବṑ쌱ስ鸑Ą꬟䒃ᙌꍚⶳ橱⨹哻깧殧ᑷὠስ蓦ꌄ⽻龥㔊㖲὜쉌 晘暈혌駅ꛥ鞏뗧⮜墯⩮哛 [ 88.045315][ T21] usb 1-1: Manufacturer: 쓄⠱ꐂ螿봽⬚竌สヽ嚑忩婒ሟ鈼 [ 88.069317][ T21] usb 1-1: SerialNumber: 冒㢸ꄒ〆㊘⵽ꮧ❷卥봱쪢뮛＝䉮鋳㲴н捤驿젻饱ㄱĤ彁ɣ聡ſꞇ种ᣟ抦ᖊ높郊铿갹鉂ⳕ䌾Ꞓ鴿峤䈄釳媌⋐랤뮍䡆茚ᚰ鲪큽蛒봚섏箬檈⚮Ь흽ầ䨁䥸띾उ汘剽峹ᶫ䳮掄뾿⇆ꓷ캾溈䠅ܧວ㻌㍛ை癑⋐愅蕜ձ攟綆ვ봶椲ॏ꫗恴벷婔Ꟶᮏܫ襤쎠盎텽ဈ禓驜Û迧 [ 88.192446][ T2398] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.427315][ T25] audit: type=1326 audit(1757705603.059:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537c6f7ba9 code=0x7ffc0000 [ 88.509806][ T25] audit: type=1326 audit(1757705603.059:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537c6f7ba9 code=0x7ffc0000 [ 88.538697][ T25] audit: type=1326 audit(1757705603.059:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f537c6f7ba9 code=0x7ffc0000 [ 88.568180][ T25] audit: type=1326 audit(1757705603.059:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537c6f7ba9 code=0x7ffc0000 [ 88.628923][ T2398] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.641649][ T25] audit: type=1326 audit(1757705603.059:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537c6f7ba9 code=0x7ffc0000 [ 88.647153][ T2398] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.674116][ T25] audit: type=1326 audit(1757705603.059:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f537c6f7ba9 code=0x7ffc0000 [ 89.204884][ T25] audit: type=1326 audit(1757705603.059:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537c6f7ba9 code=0x7ffc0000 [ 89.348596][ T2398] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 89.358520][ T2398] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.379840][ T2398] usb 4-1: config 0 descriptor?? [ 89.385836][ T25] audit: type=1326 audit(1757705603.059:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537c6f7ba9 code=0x7ffc0000 [ 89.422312][ T25] audit: type=1326 audit(1757705603.059:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f537c6f7ba9 code=0x7ffc0000 [ 89.492455][ T25] audit: type=1326 audit(1757705603.059:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4572 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f537c6f7ba9 code=0x7ffc0000 [ 89.736550][ T21] usbhid 1-1:1.0: can't add hid device: -71 [ 90.639630][ T21] usbhid: probe of 1-1:1.0 failed with error -71 [ 90.862564][ T4598] process 'syz.2.67' launched '/dev/fd/-1' with NULL argv: empty string added [ 91.075566][ T21] usb 1-1: USB disconnect, device number 2 [ 91.443523][ T4608] syz.1.68[4608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.443614][ T4608] syz.1.68[4608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.039628][ T4610] loop0: detected capacity change from 0 to 1024 [ 92.332820][ T4611] syz.2.70[4611] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.332907][ T4611] syz.2.70[4611] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.072448][ T2398] usbhid 4-1:0.0: can't add hid device: -71 [ 96.138619][ T2398] usbhid: probe of 4-1:0.0 failed with error -71 [ 96.265599][ T2398] usb 4-1: USB disconnect, device number 3 [ 99.176696][ T25] kauditd_printk_skb: 57 callbacks suppressed [ 99.176710][ T25] audit: type=1326 audit(1757705613.799:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4637 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 99.260543][ T25] audit: type=1326 audit(1757705613.799:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4637 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 99.346313][ T25] audit: type=1326 audit(1757705613.799:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4637 comm="syz.0.79" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 99.637556][ T4626] xt_nfacct: accounting object `syz1' does not exist [ 102.112920][ T4647] netlink: 44 bytes leftover after parsing attributes in process `syz.0.81'. [ 103.134243][ T4664] syz.2.85[4664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.134331][ T4664] syz.2.85[4664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 103.673617][ T25] audit: type=1326 audit(1757705618.309:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64256d6ba9 code=0x7ffc0000 [ 103.880156][ T25] audit: type=1326 audit(1757705618.349:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f64256d6ba9 code=0x7ffc0000 [ 104.002275][ T25] audit: type=1326 audit(1757705618.369:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4667 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64256d6ba9 code=0x7ffc0000 [ 104.118143][ T25] audit: type=1326 audit(1757705618.389:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4669 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6425709465 code=0x7ffc0000 [ 104.237448][ T25] audit: type=1326 audit(1757705618.549:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4669 comm="syz.3.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f64256d6ba9 code=0x7ffc0000 [ 104.849567][ T4678] loop2: detected capacity change from 0 to 512 [ 105.513523][ T4678] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.646644][ T4678] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.778825][ T4692] loop4: detected capacity change from 0 to 1024 [ 105.836848][ T4691] loop1: detected capacity change from 0 to 4096 [ 105.943083][ T4691] EXT4-fs (loop1): Test dummy encryption mode enabled [ 105.999692][ T4691] EXT4-fs (loop1): unsupported descriptor size 255 [ 106.043660][ T4692] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,errors=remount-ro,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 106.165079][ T4692] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.949095][ T4692] EXT4-fs error (device loop4): ext4_free_blocks:6218: comm syz.4.93: Freeing blocks not in datazone - block = 0, count = 16 [ 106.982407][ T4692] EXT4-fs (loop4): Remounting filesystem read-only [ 107.379585][ T4720] loop1: detected capacity change from 0 to 512 [ 107.712795][ T4723] syz.2.100[4723] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.712893][ T4723] syz.2.100[4723] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 108.416977][ T4722] loop0: detected capacity change from 0 to 512 [ 108.935904][ T4722] EXT4-fs (loop0): Ignoring removed nobh option [ 108.942859][ T4722] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.071450][ T4722] EXT4-fs (loop0): orphan cleanup on readonly fs [ 109.105038][ T4722] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 19 vs 41 free clusters [ 109.146523][ T4722] EXT4-fs (loop0): Remounting filesystem read-only [ 109.156277][ T4722] Quota error (device loop0): write_blk: dquota write failed [ 109.164732][ T4722] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 109.175000][ T4722] EXT4-fs error (device loop0): ext4_acquire_dquot:6209: comm syz.0.102: Failed to acquire dquot type 0 [ 109.207961][ T4722] EXT4-fs (loop0): Remounting filesystem read-only [ 109.217662][ T4722] EXT4-fs (loop0): 1 truncate cleaned up [ 109.317200][ T4722] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,noblock_validity,nolazytime,journal_dev=0x0000000000000d41,nogrpid,nobh,errors=remount-ro,noinit_itable,min_batch_time=0x00000000000000012. Quota mode: writeback. [ 109.762567][ T21] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 110.164051][ T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.275455][ T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 110.349912][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 110.588317][ T21] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 110.733048][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.764437][ T21] usb 1-1: can't set config #1, error -71 [ 110.775753][ T21] usb 1-1: USB disconnect, device number 3 [ 112.278605][ T4750] loop1: detected capacity change from 0 to 4096 [ 112.352416][ T4750] EXT4-fs (loop1): Test dummy encryption mode enabled [ 112.392623][ T4750] EXT4-fs (loop1): unsupported descriptor size 255 [ 115.338561][ T4773] xt_nfacct: accounting object `syz1' does not exist [ 116.326257][ T4786] loop1: detected capacity change from 0 to 128 [ 118.744400][ T4820] xt_hashlimit: size too large, truncated to 1048576 [ 118.958004][ T4830] fuse: root generation should be zero [ 119.886767][ T4840] loop1: detected capacity change from 0 to 128 [ 120.645482][ T4850] loop0: detected capacity change from 0 to 1024 [ 120.704212][ T4850] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5 [ 120.704212][ T4850] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 120.704212][ T4850] [ 120.881425][ T4850] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouser_xattr,auto_da_alloc=0x0000000000000008,,errors=continue. Quota mode: none. [ 122.663042][ T4864] loop3: detected capacity change from 0 to 128 [ 122.814231][ T4864] EXT4-fs (loop3): Test dummy encryption mode enabled [ 122.835028][ T4864] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 122.871280][ T4864] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 123.599819][ T4864] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 124.859793][ T4890] loop3: detected capacity change from 0 to 256 [ 125.662715][ T4890] FAT-fs (loop3): Unrecognized mount option "uid=18446744073709551615184467440737095516150xffffffffffffffff" or missing value [ 125.971730][ T25] audit: type=1326 audit(1757705640.599:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 126.015424][ T25] audit: type=1326 audit(1757705640.629:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 126.126955][ T25] audit: type=1326 audit(1757705640.639:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 126.157023][ T25] audit: type=1326 audit(1757705640.639:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 126.238925][ T25] audit: type=1326 audit(1757705640.639:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 126.311597][ T25] audit: type=1326 audit(1757705640.669:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 126.390208][ T25] audit: type=1326 audit(1757705640.669:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 126.441328][ T25] audit: type=1326 audit(1757705640.669:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 126.469377][ T25] audit: type=1326 audit(1757705640.669:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4900 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 126.508453][ T25] audit: type=1326 audit(1757705640.669:114): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=unconfined pid=4900 comm="syz.0.151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f617594bba9 code=0x7ffc0000 [ 127.357944][ T4920] loop0: detected capacity change from 0 to 512 [ 127.581966][ T4920] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 127.626357][ T4920] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.645086][ T4920] [ 127.647427][ T4920] ====================================================== [ 127.654427][ T4920] WARNING: possible circular locking dependency detected [ 127.661432][ T4920] syzkaller #0 Not tainted [ 127.665823][ T4920] ------------------------------------------------------ [ 127.672816][ T4920] syz.0.157/4920 is trying to acquire lock: [ 127.678678][ T4920] ffff88805e9c0b28 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410 [ 127.687632][ T4920] [ 127.687632][ T4920] but task is already holding lock: [ 127.694968][ T4920] ffff88805e885c30 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8b2/0x1b30 [ 127.704460][ T4920] [ 127.704460][ T4920] which lock already depends on the new lock. [ 127.704460][ T4920] [ 127.714836][ T4920] [ 127.714836][ T4920] the existing dependency chain (in reverse order) is: [ 127.723831][ T4920] [ 127.723831][ T4920] -> #2 (&ei->i_data_sem/2){++++}-{3:3}: [ 127.731627][ T4920] down_read+0x44/0x2e0 [ 127.736288][ T4920] ext4_map_blocks+0x32f/0x1b30 [ 127.741644][ T4920] ext4_getblk+0x16d/0x630 [ 127.746557][ T4920] ext4_bread+0x26/0x180 [ 127.751299][ T4920] ext4_quota_read+0x1b3/0x3a0 [ 127.756561][ T4920] find_tree_dqentry+0x188/0xb30 [ 127.761997][ T4920] find_tree_dqentry+0x3eb/0xb30 [ 127.767440][ T4920] qtree_read_dquot+0x13c/0x680 [ 127.772789][ T4920] v2_read_dquot+0xc0/0x110 [ 127.777789][ T4920] dquot_acquire+0x152/0x520 [ 127.782878][ T4920] ext4_acquire_dquot+0x2d9/0x4a0 [ 127.788402][ T4920] dqget+0x778/0xeb0 [ 127.792793][ T4920] __dquot_initialize+0x3b6/0xcb0 [ 127.798313][ T4920] ext4_process_orphan+0x54/0x300 [ 127.803833][ T4920] ext4_orphan_cleanup+0xaa9/0x12e0 [ 127.809525][ T4920] ext4_fill_super+0x92f0/0x9a60 [ 127.814961][ T4920] mount_bdev+0x287/0x3c0 [ 127.819790][ T4920] legacy_get_tree+0xe6/0x180 [ 127.824965][ T4920] vfs_get_tree+0x88/0x270 [ 127.829877][ T4920] do_new_mount+0x24a/0xa40 [ 127.834890][ T4920] __se_sys_mount+0x2d6/0x3c0 [ 127.840063][ T4920] do_syscall_64+0x4c/0xa0 [ 127.844981][ T4920] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.851375][ T4920] [ 127.851375][ T4920] -> #1 (&s->s_dquot.dqio_sem){++++}-{3:3}: [ 127.859428][ T4920] down_read+0x44/0x2e0 [ 127.864084][ T4920] v2_read_dquot+0x4a/0x110 [ 127.869088][ T4920] dquot_acquire+0x152/0x520 [ 127.874172][ T4920] ext4_acquire_dquot+0x2d9/0x4a0 [ 127.879695][ T4920] dqget+0x778/0xeb0 [ 127.884087][ T4920] __dquot_initialize+0x3b6/0xcb0 [ 127.889613][ T4920] ext4_mkdir+0x16c/0xc50 [ 127.894440][ T4920] vfs_mkdir+0x387/0x570 [ 127.899181][ T4920] do_mkdirat+0x1d7/0x5a0 [ 127.904005][ T4920] __x64_sys_mkdirat+0x85/0x90 [ 127.909263][ T4920] do_syscall_64+0x4c/0xa0 [ 127.914173][ T4920] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.920585][ T4920] [ 127.920585][ T4920] -> #0 (&dquot->dq_lock){+.+.}-{3:3}: [ 127.928216][ T4920] __lock_acquire+0x2c33/0x7c60 [ 127.933580][ T4920] lock_acquire+0x197/0x3f0 [ 127.938590][ T4920] __mutex_lock_common+0x1eb/0x2390 [ 127.944291][ T4920] mutex_lock_nested+0x17/0x20 [ 127.949578][ T4920] dquot_commit+0x5a/0x410 [ 127.954500][ T4920] ext4_write_dquot+0x1f0/0x360 [ 127.959851][ T4920] mark_all_dquot_dirty+0xf9/0x400 [ 127.965460][ T4920] __dquot_alloc_space+0x5d0/0xe20 [ 127.971068][ T4920] ext4_mb_new_blocks+0xf68/0x4940 [ 127.976677][ T4920] ext4_ext_map_blocks+0x146f/0x64e0 [ 127.982461][ T4920] ext4_map_blocks+0x981/0x1b30 [ 127.987809][ T4920] ext4_getblk+0x16d/0x630 [ 127.992720][ T4920] ext4_bread+0x26/0x180 [ 127.997466][ T4920] ext4_append+0x2c3/0x560 [ 128.002379][ T4920] ext4_init_new_dir+0x2a2/0x940 [ 128.007812][ T4920] ext4_mkdir+0x47d/0xc50 [ 128.012636][ T4920] vfs_mkdir+0x387/0x570 [ 128.017376][ T4920] do_mkdirat+0x1d7/0x5a0 [ 128.022206][ T4920] __x64_sys_mkdirat+0x85/0x90 [ 128.027485][ T4920] do_syscall_64+0x4c/0xa0 [ 128.032408][ T4920] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.038808][ T4920] [ 128.038808][ T4920] other info that might help us debug this: [ 128.038808][ T4920] [ 128.049022][ T4920] Chain exists of: [ 128.049022][ T4920] &dquot->dq_lock --> &s->s_dquot.dqio_sem --> &ei->i_data_sem/2 [ 128.049022][ T4920] [ 128.062643][ T4920] Possible unsafe locking scenario: [ 128.062643][ T4920] [ 128.070066][ T4920] CPU0 CPU1 [ 128.075404][ T4920] ---- ---- [ 128.080741][ T4920] lock(&ei->i_data_sem/2); [ 128.085321][ T4920] lock(&s->s_dquot.dqio_sem); [ 128.092665][ T4920] lock(&ei->i_data_sem/2); [ 128.099753][ T4920] lock(&dquot->dq_lock); [ 128.104145][ T4920] [ 128.104145][ T4920] *** DEADLOCK *** [ 128.104145][ T4920] [ 128.112259][ T4920] 4 locks held by syz.0.157/4920: [ 128.117257][ T4920] #0: ffff88807b986460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 128.126370][ T4920] #1: ffff88807477d3b0 (&type->i_mutex_dir_key#4/1){+.+.}-{3:3}, at: filename_create+0x1f2/0x450 [ 128.136959][ T4920] #2: ffff88805e885c30 (&ei->i_data_sem/2){++++}-{3:3}, at: ext4_map_blocks+0x8b2/0x1b30 [ 128.146872][ T4920] #3: ffffffff8c23ee98 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 128.155901][ T4920] [ 128.155901][ T4920] stack backtrace: [ 128.161823][ T4920] CPU: 1 PID: 4920 Comm: syz.0.157 Not tainted syzkaller #0 [ 128.169090][ T4920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 128.179139][ T4920] Call Trace: [ 128.182409][ T4920] [ 128.185334][ T4920] dump_stack_lvl+0x168/0x230 [ 128.189998][ T4920] ? load_image+0x3b0/0x3b0 [ 128.194486][ T4920] ? show_regs_print_info+0x20/0x20 [ 128.199672][ T4920] ? print_circular_bug+0x12b/0x1a0 [ 128.204854][ T4920] check_noncircular+0x274/0x310 [ 128.209776][ T4920] ? add_chain_block+0x940/0x940 [ 128.214691][ T4920] ? lockdep_lock+0xdc/0x1e0 [ 128.219264][ T4920] ? mark_lock+0x94/0x320 [ 128.223576][ T4920] __lock_acquire+0x2c33/0x7c60 [ 128.228404][ T4920] ? hlock_conflict+0x59/0x1f0 [ 128.233150][ T4920] ? check_noncircular+0x16f/0x310 [ 128.238238][ T4920] ? add_chain_block+0x940/0x940 [ 128.243151][ T4920] ? lockdep_lock+0xdc/0x1e0 [ 128.247721][ T4920] ? verify_lock_unused+0x140/0x140 [ 128.252898][ T4920] ? lockdep_unlock+0x134/0x2d0 [ 128.257731][ T4920] ? lockdep_lock+0x1e0/0x1e0 [ 128.262386][ T4920] ? check_noncircular+0x16f/0x310 [ 128.267474][ T4920] ? mark_lock+0x94/0x320 [ 128.271782][ T4920] ? __lock_acquire+0x13ad/0x7c60 [ 128.276788][ T4920] lock_acquire+0x197/0x3f0 [ 128.281279][ T4920] ? dquot_commit+0x5a/0x410 [ 128.285863][ T4920] ? __might_sleep+0xf0/0xf0 [ 128.290454][ T4920] ? read_lock_is_recursive+0x10/0x10 [ 128.295807][ T4920] ? dquot_commit+0x5a/0x410 [ 128.300384][ T4920] __mutex_lock_common+0x1eb/0x2390 [ 128.305566][ T4920] ? dquot_commit+0x5a/0x410 [ 128.310140][ T4920] ? __might_sleep+0xf0/0xf0 [ 128.314708][ T4920] ? mutex_lock_io_nested+0x60/0x60 [ 128.319898][ T4920] mutex_lock_nested+0x17/0x20 [ 128.324641][ T4920] dquot_commit+0x5a/0x410 [ 128.329036][ T4920] ? __ext4_journal_start_sb+0x1bd/0x360 [ 128.334649][ T4920] ext4_write_dquot+0x1f0/0x360 [ 128.339483][ T4920] mark_all_dquot_dirty+0xf9/0x400 [ 128.344577][ T4920] __dquot_alloc_space+0x5d0/0xe20 [ 128.349671][ T4920] ext4_mb_new_blocks+0xf68/0x4940 [ 128.354770][ T4920] ? ext4_mb_pa_callback+0xd0/0xd0 [ 128.359880][ T4920] ? ext4_ext_check_overlap+0x15f/0x560 [ 128.365403][ T4920] ? ext4_inode_to_goal_block+0x313/0x450 [ 128.371108][ T4920] ext4_ext_map_blocks+0x146f/0x64e0 [ 128.376380][ T4920] ? ext4_ext_release+0x10/0x10 [ 128.381217][ T4920] ? rwsem_write_trylock+0x12f/0x1b0 [ 128.386480][ T4920] ? ext4_es_lookup_extent+0x408/0xa10 [ 128.391916][ T4920] ext4_map_blocks+0x981/0x1b30 [ 128.396766][ T4920] ? ext4_map_blocks+0x55d/0x1b30 [ 128.401768][ T4920] ? ext4_issue_zeroout+0x250/0x250 [ 128.406944][ T4920] ? ext4_map_blocks+0x6a2/0x1b30 [ 128.411944][ T4920] ext4_getblk+0x16d/0x630 [ 128.416338][ T4920] ? ext4_get_block_unwritten+0x30/0x30 [ 128.421863][ T4920] ? __brelse+0x55/0x90 [ 128.425994][ T4920] ext4_bread+0x26/0x180 [ 128.430213][ T4920] ext4_append+0x2c3/0x560 [ 128.434607][ T4920] ? ext4_init_new_dir+0x940/0x940 [ 128.439695][ T4920] ? ext4_has_group_desc_csum+0x1f0/0x1f0 [ 128.445393][ T4920] ext4_init_new_dir+0x2a2/0x940 [ 128.450312][ T4920] ext4_mkdir+0x47d/0xc50 [ 128.454619][ T4920] ? ext4_symlink+0xcc0/0xcc0 [ 128.459272][ T4920] ? inode_permission+0xef/0x480 [ 128.464189][ T4920] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 128.469190][ T4920] ? security_inode_mkdir+0xb3/0x100 [ 128.474457][ T4920] vfs_mkdir+0x387/0x570 [ 128.478680][ T4920] do_mkdirat+0x1d7/0x5a0 [ 128.482986][ T4920] ? vfs_mkdir+0x570/0x570 [ 128.487381][ T4920] ? getname_flags+0x1fe/0x500 [ 128.492120][ T4920] __x64_sys_mkdirat+0x85/0x90 [ 128.496858][ T4920] do_syscall_64+0x4c/0xa0 [ 128.501291][ T4920] ? clear_bhb_loop+0x30/0x80 [ 128.505946][ T4920] ? clear_bhb_loop+0x30/0x80 [ 128.510600][ T4920] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.516478][ T4920] RIP: 0033:0x7f617594a417 [ 128.520873][ T4920] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.540460][ T4920] RSP: 002b:00007f6173b91e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 128.548869][ T4920] RAX: ffffffffffffffda RBX: 00007f6173b91ef0 RCX: 00007f617594a417 [ 128.556827][ T4920] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 00000000ffffff9c [ 128.564778][ T4920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 128.572724][ T4920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000080 [ 128.580674][ T4920] R13: 00007f6173b91eb0 R14: 0000000000000000 R15: 0000000000000000 [ 128.588628][ T4920] [ 128.756140][ T4930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.160'. [ 132.593353][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.599664][ T1428] ieee802154 phy1 wpan1: encryption failed: -22