last executing test programs: 5m28.273567481s ago: executing program 32 (id=358): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/vtconsole/vtcon1/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000280), 0x0) 1m20.147376377s ago: executing program 33 (id=1559): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB=' '], 0x16) 1m17.752755145s ago: executing program 5 (id=1570): socket$kcm(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 1m17.290801307s ago: executing program 34 (id=1570): socket$kcm(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 1m15.027685831s ago: executing program 35 (id=1580): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000b081000418e00000004fc", 0x57}], 0x1) 56.213961579s ago: executing program 8 (id=1621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a8, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x3d8, 0x325, 0x378, 0x3d8, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0x0, 0xff], [0x0, 0xffffffff], 'macvtap0\x00', 'macsec0\x00', {0xff}, {}, 0x11}, 0x0, 0x230, 0x2a0, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x4000000000000, 0x8000004, 0x0, 0x20, 0x2, 0x1, 0x7fbfffff, 0x0, 0x8}, {0x20000000000}}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x3, 0x10, 0x6, 0x0, "a3248fc87b24ee73f335970c3a5369f49905a21ae893e7653334ffb53ae7806048e252e29e369d98586fe7b4535788469805bc21c887a286f4033514ea854ac9"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast2, [0xffffffff, 0xff, 0xffffff00, 0xff000000], [0x0, 0xff000000, 0xffffff, 0xff000000], 'bond_slave_0\x00', 'veth1\x00', {0xff}, {0xff}, 0x62, 0xbc, 0x1, 0x4}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x4, 0x1, 0x0, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) semget(0x2, 0x3, 0x33a) mount$fuseblk(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 55.136015405s ago: executing program 8 (id=1622): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_gettime(0x4, &(0x7f00000000c0)) 54.595361239s ago: executing program 8 (id=1624): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x169442, 0x1e8) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 54.288815756s ago: executing program 8 (id=1627): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200700, &(0x7f0000000680)={[{@noload}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks}, {@minixdf}, {@debug}]}, 0x1, 0x488, &(0x7f00000001c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x108188b, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x85b400, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) 53.160989653s ago: executing program 8 (id=1633): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) 52.269632935s ago: executing program 1 (id=1635): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000012c0)={r2, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) 51.810749616s ago: executing program 1 (id=1641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46af", 0x3}], 0x1}, 0x20000885) 50.920394308s ago: executing program 8 (id=1642): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000002a0003050002000000000000180000800c"], 0x28}], 0x1}, 0x14008010) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) 50.720764013s ago: executing program 1 (id=1643): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write(r1, &(0x7f0000000400)='transport=loop,nqn=t', 0x14) write(r0, &(0x7f0000000000), 0x0) 49.738200237s ago: executing program 36 (id=1642): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="280000002a0003050002000000000000180000800c"], 0x28}], 0x1}, 0x14008010) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) 49.683305818s ago: executing program 1 (id=1647): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x3, 0xc8, {0x5, 0x8, 0x9}}}}, 0x53) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) getdents64(r5, &(0x7f0000002600)=""/4113, 0x1011) 48.617281544s ago: executing program 7 (id=1650): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x169442, 0x1e8) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x2) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 48.021760948s ago: executing program 1 (id=1653): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008050000010b"], 0x88) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) accept(r2, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 47.978210179s ago: executing program 7 (id=1655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46af", 0x3}], 0x1}, 0x20000885) 47.55639693s ago: executing program 1 (id=1656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) 47.366718174s ago: executing program 37 (id=1656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) 47.361909624s ago: executing program 7 (id=1658): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write(r1, &(0x7f0000000400)='transport=loop,nqn=t', 0x14) write(r0, &(0x7f0000000000), 0x0) 46.695919031s ago: executing program 7 (id=1662): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000), 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x3, 0xc8, {0x5, 0x8, 0x9}}}}, 0x53) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) getdents64(r5, &(0x7f0000002600)=""/4113, 0x1011) 45.586012447s ago: executing program 7 (id=1664): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x169442, 0x1e8) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x2) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 44.852333305s ago: executing program 7 (id=1667): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008050000010b"], 0x88) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) accept(r2, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 44.459606465s ago: executing program 38 (id=1667): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008050000010b"], 0x88) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) accept(r2, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 42.974593642s ago: executing program 0 (id=1670): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, 0x0) unshare(0x22020600) 41.931677248s ago: executing program 0 (id=1672): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x3, 0xc8, {0x5, 0x8, 0x9}}}}, 0x53) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) getdents64(r4, &(0x7f0000002600)=""/4113, 0x1011) 40.906843113s ago: executing program 0 (id=1676): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x3, 0xc8, {0x5, 0x8, 0x9}}}}, 0x53) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) getdents64(r5, &(0x7f0000002600)=""/4113, 0x1011) 39.701792923s ago: executing program 0 (id=1678): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200700, &(0x7f0000000680)={[{@noload}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks}, {@minixdf}, {@debug}]}, 0x1, 0x488, &(0x7f00000001c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x108188b, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x85b400, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0) 39.142723757s ago: executing program 0 (id=1680): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) semget(0x2, 0x3, 0x33a) mount$fuseblk(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 38.612504391s ago: executing program 0 (id=1681): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000012c0)={r2, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) 38.293599219s ago: executing program 39 (id=1681): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000012c0)={r2, 0x8002, 0x7fff, 0x0, 0x0, [0x0], [0x2], [0x0, 0x4, 0xfffffffe, 0x5e8]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r3, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) 35.773589361s ago: executing program 6 (id=1686): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r4, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)="6b46af", 0x3}], 0x1}, 0x20000885) 35.204644925s ago: executing program 6 (id=1687): r0 = socket$packet(0x11, 0x3, 0x300) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) read$FUSE(r1, &(0x7f0000002040)={0x2020}, 0x2020) splice(r0, 0x0, r2, 0x0, 0x200006, 0x9) 34.795479955s ago: executing program 6 (id=1688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x3d8, 0x325, 0x378, 0x3d8, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0x0, 0xff], [0x0, 0xffffffff], 'macvtap0\x00', 'macsec0\x00', {0xff}, {}, 0x11}, 0x0, 0x230, 0x2a0, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x4000000000000, 0x8000004, 0x0, 0x20, 0x2, 0x1, 0x7fbfffff, 0x0, 0x8}, {0x20000000000}}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x3, 0x10, 0x6, 0x0, "a3248fc87b24ee73f335970c3a5369f49905a21ae893e7653334ffb53ae7806048e252e29e369d98586fe7b4535788469805bc21c887a286f4033514ea854ac9"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast2, [0xffffffff, 0xff, 0xffffff00, 0xff000000], [0x0, 0xff000000, 0xffffff, 0xff000000], 'bond_slave_0\x00', 'veth1\x00', {0xff}, {0xff}, 0x62, 0xbc, 0x1, 0x4}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x4, 0x1, 0x0, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) semget(0x2, 0x3, 0x33a) mount$fuseblk(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 33.766039111s ago: executing program 6 (id=1689): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200700, &(0x7f0000000680)={[{@noload}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks}, {@minixdf}, {@debug}]}, 0x1, 0x488, &(0x7f00000001c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x108188b, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x85b400, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) 33.278445133s ago: executing program 6 (id=1690): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001014d9ec29bd7010f4d9df25080003000100000008004c000000000008004b00130000000800"], 0x58}, 0x1, 0x0, 0x0, 0x4004005}, 0x4004080) 32.683530648s ago: executing program 6 (id=1691): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x3, 0xc8, {0x5, 0x8, 0x9}}}}, 0x53) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) getdents64(r4, &(0x7f0000002600)=""/4113, 0x1011) 32.455059073s ago: executing program 40 (id=1691): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_qos_setup_complete={{}, {0x3, 0xc8, {0x5, 0x8, 0x9}}}}, 0x53) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x381081a, &(0x7f00000010c0)=ANY=[], 0xfc, 0x2d5, &(0x7f0000000400)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) getdents64(r4, &(0x7f0000002600)=""/4113, 0x1011) 26.391815654s ago: executing program 9 (id=1695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x3d8, 0x325, 0x378, 0x3d8, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0x0, 0xff], [0x0, 0xffffffff], 'macvtap0\x00', 'macsec0\x00', {0xff}, {}, 0x11}, 0x0, 0x230, 0x2a0, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x4000000000000, 0x8000004, 0x0, 0x20, 0x2, 0x1, 0x7fbfffff, 0x0, 0x8}, {0x20000000000}}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x3, 0x10, 0x6, 0x0, "a3248fc87b24ee73f335970c3a5369f49905a21ae893e7653334ffb53ae7806048e252e29e369d98586fe7b4535788469805bc21c887a286f4033514ea854ac9"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast2, [0xffffffff, 0xff, 0xffffff00, 0xff000000], [0x0, 0xff000000, 0xffffff, 0xff000000], 'bond_slave_0\x00', 'veth1\x00', {0xff}, {0xff}, 0x62, 0xbc, 0x1, 0x4}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x4, 0x1, 0x0, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) semget(0x2, 0x3, 0x33a) mount$fuseblk(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 25.37353435s ago: executing program 9 (id=1696): bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) sched_setscheduler(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x16, 0x7, 0xf, 0xfffe, 0x7, 0x1, 0x4007f, 0x10000003, 0x4ca9d89d, 0x4, 0x1, 0x81, 0xb, 0x24004000, 0x6], 0x2, 0x4}) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f00000002c0)) 24.285456837s ago: executing program 9 (id=1697): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001014d9ec29bd7010f4d9df25080003000100000008004c000000000008004b00130000000800"], 0x58}, 0x1, 0x0, 0x0, 0x4004005}, 0x4004080) 24.204500109s ago: executing program 9 (id=1698): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200700, &(0x7f0000000680)={[{@noload}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks}, {@minixdf}, {@debug}]}, 0x1, 0x488, &(0x7f00000001c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x108188b, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) 23.945445335s ago: executing program 9 (id=1699): socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) chdir(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000400)) 23.300468591s ago: executing program 9 (id=1700): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 22.973483969s ago: executing program 41 (id=1700): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000840) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x900, 0x0) ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0xf423b, 0xfffffffffffffffc, 0x0, 0x0, 0x9, 0xfffffffffffffffc, 0x1, 0x3, 0x80000, 0x7ff, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0xf11b, 0x1, 0x8, 0x0, 0x0, 0x2, 0xb17, 0xffffffffffffffff, 0x5c43, 0x1, 0x6}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 20.195624149s ago: executing program 3 (id=1702): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x480, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x3d8, 0x325, 0x378, 0x3d8, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0x0, 0xff], [0x0, 0xffffffff], 'macvtap0\x00', 'macsec0\x00', {0xff}, {}, 0x11}, 0x0, 0x230, 0x2a0, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x4000000000000, 0x8000004, 0x0, 0x20, 0x2, 0x1, 0x7fbfffff, 0x0, 0x8}, {0x20000000000}}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x3, 0x10, 0x6, 0x0, "a3248fc87b24ee73f335970c3a5369f49905a21ae893e7653334ffb53ae7806048e252e29e369d98586fe7b4535788469805bc21c887a286f4033514ea854ac9"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast2, [0xffffffff, 0xff, 0xffffff00, 0xff000000], [0x0, 0xff000000, 0xffffff, 0xff000000], 'bond_slave_0\x00', 'veth1\x00', {0xff}, {0xff}, 0x62, 0xbc, 0x1, 0x4}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x4, 0x1, 0x0, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e0) semget(0x2, 0x3, 0x33a) mount$fuseblk(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 19.234012412s ago: executing program 3 (id=1703): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003b00)={0x30, 0x3e, 0x107, 0x0, 0x5, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str=';\x00'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x14, 0x0, 0x0, @fd=r0}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8044}, 0x4010) 19.047430727s ago: executing program 3 (id=1704): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001014d9ec29bd7010f4d9df25080003000100000008004c000000000008004b001300000008004a000000000008004b001300000008000300000000"], 0x58}, 0x1, 0x0, 0x0, 0x4004005}, 0x4004080) 19.012543048s ago: executing program 3 (id=1705): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200700, &(0x7f0000000680)={[{@noload}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks}, {@minixdf}, {@debug}]}, 0x1, 0x488, &(0x7f00000001c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x108188b, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) 18.785932183s ago: executing program 3 (id=1706): bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) sched_setscheduler(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x16, 0x7, 0xf, 0xfffe, 0x7, 0x1, 0x4007f, 0x10000003, 0x4ca9d89d, 0x4, 0x1, 0x81, 0xb, 0x24004000, 0x6], 0x2, 0x4}) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f00000002c0)) 17.482878636s ago: executing program 3 (id=1707): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) write$FUSE_STATX(r0, 0x0, 0x0) 17.205880573s ago: executing program 42 (id=1707): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000400)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}, {@bh}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000000000, 0x0, 0x85c, 0x5}) write$FUSE_STATX(r0, 0x0, 0x0) 16.931747859s ago: executing program 5 (id=1682): r0 = socket(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="4137a29b582bd471798f15", 0xb}], 0x1}}], 0x1, 0x4000801) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 16.609391468s ago: executing program 5 (id=1710): socket$netlink(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f00000000c0)='\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) chdir(0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000400)) 15.332888009s ago: executing program 5 (id=1712): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200700, &(0x7f0000000680)={[{@noload}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@stripe={'stripe', 0x3d, 0x9}}, {@inode_readahead_blks}, {@minixdf}, {@debug}]}, 0x1, 0x488, &(0x7f00000001c0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x108188b, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) 14.838484331s ago: executing program 5 (id=1714): bind$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0xa) r0 = getpid() socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) sched_setscheduler(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x16, 0x7, 0xf, 0xfffe, 0x7, 0x1, 0x4007f, 0x10000003, 0x4ca9d89d, 0x4, 0x1, 0x81, 0xb, 0x24004000, 0x6], 0x2, 0x4}) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f00000002c0)) 11.334631378s ago: executing program 5 (id=1720): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001014d9ec29bd7010f4d9df25080003000100000008004c000000000008004b001300000008004a000000000008004b001300000008000300000000"], 0x58}, 0x1, 0x0, 0x0, 0x4004005}, 0x4004080) 10.799528172s ago: executing program 43 (id=1720): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001014d9ec29bd7010f4d9df25080003000100000008004c000000000008004b001300000008004a000000000008004b001300000008000300000000"], 0x58}, 0x1, 0x0, 0x0, 0x4004005}, 0x4004080) 5.108620483s ago: executing program 2 (id=1742): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@handle={0x73682a85, 0x110b, 0x3}, @fda={0x66646185, 0x3, 0xfffffffffffffffd, 0x30}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 4.918753828s ago: executing program 2 (id=1743): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) 3.955509682s ago: executing program 2 (id=1745): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) 3.854830494s ago: executing program 4 (id=1746): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xf, 0x410400, 0x0, 0x2, 0x0, 0x1ff, 0x0, 0x0, 0x20}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/169, 0xa9}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4) 3.609013901s ago: executing program 2 (id=1747): sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x20008080) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0xfffffffffffffe26, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x50, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.729359193s ago: executing program 4 (id=1748): r0 = socket(0x11, 0x3, 0x0) accept4$inet6(r0, 0x0, &(0x7f0000000100), 0x80000) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e25, 0x14, @remote, 0x200105}, 0x1c) r1 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffd000/0x2000)=nil, 0x4000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$MEMREADOOB64(r1, 0x1269, &(0x7f00000000c0)={0x1}) 1.62468428s ago: executing program 4 (id=1749): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) setresuid(0x0, 0xee00, 0xee00) write(r0, &(0x7f0000000280)='1', 0x1) 1.497051753s ago: executing program 2 (id=1750): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xffce, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@handle={0x73682a85, 0x110b, 0x3}, @fda={0x66646185, 0x3, 0xfffffffffffffffd, 0x30}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 1.367380106s ago: executing program 4 (id=1751): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x5802, 0x294, 0x0, 0x294, 0x3d8, 0x325, 0x378, 0x3d8, 0x378, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [0x0, 0xff], [0x0, 0xffffffff], 'macvtap0\x00', 'macsec0\x00', {0xff}, {}, 0x11}, 0x0, 0xe0, 0x150, 0x52020000, {}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x3, 0x10, 0x6, 0x0, "a3248fc87b24ee73f335970c3a5369f49905a21ae893e7653334ffb53ae7806048e252e29e369d98586fe7b4535788469805bc21c887a286f4033514ea854ac9"}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @mcast2, [0xffffffff, 0xff, 0xffffff00, 0xff000000], [0x0, 0xff000000, 0xffffff, 0xff000000], 'bond_slave_0\x00', 'veth1\x00', {0xff}, {0xff}, 0x62, 0xbc, 0x1, 0x4}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x4, 0x1, 0x0, 'snmp_trap\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) semget(0x2, 0x3, 0x33a) mount$fuseblk(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) 1.272013489s ago: executing program 2 (id=1752): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmmsg$inet(r3, 0x0, 0x0, 0x40008000) getresuid(0x0, 0x0, 0x0) syz_ublk_setup_io_uring(0x294a, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$ublk_chdev(0x0, 0x0, 0x381400) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x14004017}, 0x80) 208.896285ms ago: executing program 4 (id=1753): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x169442, 0x1e8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x2) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r2}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) 0s ago: executing program 4 (id=1754): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000000)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) write(r0, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) kernel console output (not intermixed with test programs): adv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.417740][ T9675] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.432411][ T9675] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.446213][ T9675] device bridge_slave_0 entered promiscuous mode [ 380.457908][ T9642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.467990][ T9642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.495271][ T9642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.527088][ T9675] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.536880][ T9675] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.555261][ T9675] device bridge_slave_1 entered promiscuous mode [ 380.667638][ T9642] device hsr_slave_0 entered promiscuous mode [ 380.681922][ T9642] device hsr_slave_1 entered promiscuous mode [ 380.692502][ T9642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.700434][ T9642] Cannot create hsr debugfs directory [ 380.708448][ T9675] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.760322][ T9675] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.856000][ T9675] team0: Port device team_slave_0 added [ 380.913847][ T9675] team0: Port device team_slave_1 added [ 380.961652][ T9697] chnl_net:caif_netlink_parms(): no params data found [ 381.009530][ T9675] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.029994][ T9675] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.079916][ T9675] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.129723][ T9675] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.144136][ T9675] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.170843][ T9675] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.333399][ T4640] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.352318][ T9675] device hsr_slave_0 entered promiscuous mode [ 381.359023][ T9675] device hsr_slave_1 entered promiscuous mode [ 381.365709][ T9675] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.373518][ T9675] Cannot create hsr debugfs directory [ 381.411987][ T9697] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.419076][ T9697] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.427624][ T9697] device bridge_slave_0 entered promiscuous mode [ 381.457549][ T9642] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 381.466926][ T9697] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.474608][ T9697] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.482887][ T9697] device bridge_slave_1 entered promiscuous mode [ 381.508208][ T4640] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.528552][ T9642] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 381.554635][ T9697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.575207][ T9642] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 381.584715][ T9697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.611701][ T4640] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.629952][ T9642] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 381.683583][ T4640] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.732280][ T9697] team0: Port device team_slave_0 added [ 381.752590][ T9697] team0: Port device team_slave_1 added [ 381.812578][ T9697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.826896][ T9697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.854939][ T9697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.878637][ T9697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.886474][ T9697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.917166][ T9697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.996132][ T4282] Bluetooth: hci4: command 0x041b tx timeout [ 382.018904][ T9675] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 382.043650][ T9642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.067903][ T9697] device hsr_slave_0 entered promiscuous mode [ 382.080152][ T9697] device hsr_slave_1 entered promiscuous mode [ 382.087034][ T9697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 382.107607][ T9697] Cannot create hsr debugfs directory [ 382.113624][ T9675] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 382.126963][ T9675] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 382.159531][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 382.160118][ T9675] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 382.226426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 382.234933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 382.276376][ T9642] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.327222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 382.343824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 382.356086][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.363243][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.378777][ T4640] tipc: Left network mode [ 382.378831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 382.401366][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 382.431739][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 382.447639][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 382.456348][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.463479][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.563004][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 382.572026][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 382.581093][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 382.591164][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 382.601321][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 382.688090][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 382.696736][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 382.705234][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 382.714923][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 382.746174][ T9642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.760266][ T9642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 382.796625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 382.808733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 382.845181][ T9675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.895128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 382.922343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 382.963133][ T9675] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.999458][ T9697] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 383.012413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 383.036623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 383.058131][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.065314][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.085833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 383.110166][ T9697] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 383.152033][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 383.180185][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 383.191610][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.198710][ T8688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.208465][ T9697] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 383.218147][ T9697] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 383.269591][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 383.278360][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 383.298120][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 383.308757][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 383.356626][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 383.367296][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 383.385017][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 383.398589][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 383.417554][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 383.428034][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 383.447895][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 383.471287][ T9675] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.490982][ T9675] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 383.505759][ T9642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.547491][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 383.579405][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 383.962936][ T9697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.003582][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 384.018099][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 384.044894][ T9697] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.068575][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 384.077591][ T4640] device hsr_slave_0 left promiscuous mode [ 384.101722][ T4640] device hsr_slave_1 left promiscuous mode [ 384.120744][ T4640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.128197][ T4640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.142584][ T4640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.169671][ T4640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.189015][ T4640] device bridge_slave_1 left promiscuous mode [ 384.196363][ T4640] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.213311][ T4640] device bridge_slave_0 left promiscuous mode [ 384.222892][ T4640] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.264804][ T4640] device veth1_macvtap left promiscuous mode [ 384.270949][ T4640] device veth0_macvtap left promiscuous mode [ 384.277081][ T4640] device veth1_vlan left promiscuous mode [ 384.283377][ T4640] device veth0_vlan left promiscuous mode [ 384.471570][ T4289] Bluetooth: hci3: command 0x0419 tx timeout [ 384.894368][ T4640] team0 (unregistering): Port device team_slave_1 removed [ 384.941970][ T4640] team0 (unregistering): Port device team_slave_0 removed [ 384.980067][ T4640] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.019522][ T4640] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.029700][ T4320] infiniband syz1: ib_query_port failed (-19) [ 385.276022][ T4640] bond0 (unregistering): Released all slaves [ 385.379643][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 385.390714][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 385.399747][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.406847][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.415014][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 385.424692][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 385.433275][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.440376][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.449597][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 385.457002][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 385.464644][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 385.473414][ T22] bond0 speed is unknown, defaulting to 1000 [ 385.480031][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 385.498099][ T9675] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.531411][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 385.548709][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 385.572379][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 385.581284][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 385.594492][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 385.604167][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 385.635563][ T9697] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 385.649605][ T9697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 385.666866][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 385.692935][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 385.702653][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 385.720144][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 385.729751][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 385.738660][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 385.766162][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 385.799109][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 385.834130][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 385.860551][ T9642] device veth0_vlan entered promiscuous mode [ 385.869307][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 385.877174][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 385.904532][ T9642] device veth1_vlan entered promiscuous mode [ 385.986003][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 385.999813][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 386.024726][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 386.048139][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 386.076298][ T9642] device veth0_macvtap entered promiscuous mode [ 386.096600][ T9642] device veth1_macvtap entered promiscuous mode [ 386.147807][ T4282] Bluetooth: hci4: command 0x0419 tx timeout [ 386.168424][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.203981][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.214178][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.224943][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.247542][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 386.267317][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.278863][ T9642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.286172][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 386.338414][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 386.350863][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 386.365023][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 386.377445][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.401309][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.427194][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.443351][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.453281][ T9642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 386.476285][ T9642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 386.494021][ T9642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.505152][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 386.528529][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 386.595991][ T9642] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.627129][ T9642] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.635867][ T9642] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.670420][ T9642] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.689011][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 386.708227][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 386.728320][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 386.735816][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 386.756909][ T9697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.802597][ T9675] device veth0_vlan entered promiscuous mode [ 386.854079][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 386.877913][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 386.886432][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 386.927634][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 386.944665][ T9675] device veth1_vlan entered promiscuous mode [ 387.068019][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 387.103684][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 387.122237][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 387.164198][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 387.181466][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.213454][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.225676][ T9675] device veth0_macvtap entered promiscuous mode [ 387.246620][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 387.257510][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 387.280638][ T9675] device veth1_macvtap entered promiscuous mode [ 387.313042][ T4443] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.339752][ T4443] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.350776][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.377789][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.396724][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.411845][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.421972][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.433750][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.443911][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.455624][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.467334][ T9675] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.475822][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 387.502671][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 387.522454][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 387.534141][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 387.555881][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.575443][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.585755][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.596783][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.607089][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.617775][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.627874][ T9675] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 387.639709][ T9675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.666049][ T9675] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.701935][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 387.744948][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 387.778020][ T9675] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.802667][ T9675] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.823511][ T9675] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.850305][ T9675] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.124259][ T27] audit: type=1326 audit(1792740053.062:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9833 comm="syz.6.1560" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00819e159 code=0x7ffc0000 [ 388.549813][ T27] audit: type=1326 audit(1792740053.062:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9833 comm="syz.6.1560" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fe00819e159 code=0x7ffc0000 [ 388.630826][ T27] audit: type=1326 audit(1792740053.062:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9833 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00819e159 code=0x7ffc0000 [ 388.666253][ T27] audit: type=1326 audit(1792740053.062:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9833 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe00819e159 code=0x7ffc0000 [ 388.796649][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.825171][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.890916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 388.916857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 388.944916][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 388.976565][ T9852] binder: 9851:9852 unknown command 0 [ 388.981993][ T9852] binder: 9851:9852 ioctl c0306201 2000000001c0 returned -22 [ 389.031108][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.043723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 389.062390][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.073476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 389.087944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 389.100388][ T9697] device veth0_vlan entered promiscuous mode [ 389.119516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 389.128006][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 389.173725][ T9697] device veth1_vlan entered promiscuous mode [ 389.320026][ T9864] loop0: detected capacity change from 0 to 1024 [ 389.380189][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 389.399674][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 389.471505][ T9864] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 389.499182][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 389.675173][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 389.713208][ T9697] device veth0_macvtap entered promiscuous mode [ 389.726594][ T9697] device veth1_macvtap entered promiscuous mode [ 389.742741][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 389.755335][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 389.810474][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.180612][ T9872] binder: 9871:9872 ioctl c0306201 0 returned -14 [ 390.227221][ T9875] fuse: Unknown parameter 'grou00000000000000000000' [ 390.260262][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.315419][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.325939][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.335859][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.352370][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.370649][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 390.382094][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.432103][ T9697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.456455][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 390.474812][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 390.498225][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 390.536051][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 390.565980][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 390.595908][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.609735][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.620468][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.631070][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.641162][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 390.654185][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 390.674324][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.248359][ T27] audit: type=1326 audit(1792740056.194:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9880 comm="syz.1.1600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed5f19e159 code=0x7ffc0000 [ 391.292721][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.312775][ T9697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.332218][ T27] audit: type=1326 audit(1792740056.194:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9880 comm="syz.1.1600" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fed5f19e159 code=0x7ffc0000 [ 391.373146][ T9697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.382419][ T27] audit: type=1326 audit(1792740056.194:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9880 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed5f19e159 code=0x7ffc0000 [ 391.407563][ T27] audit: type=1326 audit(1792740056.194:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9880 comm=FF exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed5f19e159 code=0x7ffc0000 [ 391.411609][ T9697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.611142][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 391.621498][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 392.812458][ T9697] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.832082][ T9697] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.841557][ T9697] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.862875][ T9697] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.262960][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.338264][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.347631][ T9916] binder: 9914:9916 unknown command 0 [ 393.372585][ T9916] binder: 9914:9916 ioctl c0306201 2000000001c0 returned -22 [ 393.408301][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 393.510859][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.547120][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.605605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 393.845152][ T9930] loop6: detected capacity change from 0 to 1024 [ 393.949457][ T9932] fuse: Unknown parameter 'grou00000000000000000000' [ 394.064412][ T9930] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 394.183721][ T9944] binder: 9941:9944 ioctl c0306201 0 returned -14 [ 394.726454][ T26] nvmet: connect request for invalid subsystem t! [ 394.740076][ T9943] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 394.961116][ T9642] EXT4-fs (loop6): unmounting filesystem. [ 395.518975][ T9972] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 396.685461][ T9977] fuse: Unknown parameter 'group_i00000000000000000000' [ 397.252949][ T9989] loop8: detected capacity change from 0 to 512 [ 397.307495][ T9992] FAULT_INJECTION: forcing a failure. [ 397.307495][ T9992] name failslab, interval 1, probability 0, space 0, times 0 [ 397.382951][ T9989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a826c198, mo2=0002] [ 397.415252][ T9992] CPU: 0 PID: 9992 Comm: syz.7.1628 Not tainted syzkaller #0 [ 397.422684][ T9992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.432752][ T9992] Call Trace: [ 397.436037][ T9992] [ 397.438971][ T9992] dump_stack_lvl+0x188/0x24e [ 397.443676][ T9992] ? show_regs_print_info+0x12/0x12 [ 397.448903][ T9992] ? load_image+0x410/0x410 [ 397.453428][ T9992] ? __might_sleep+0xd0/0xd0 [ 397.458031][ T9992] ? __lock_acquire+0x7c40/0x7c40 [ 397.463085][ T9992] should_fail_ex+0x390/0x4c0 [ 397.467788][ T9992] should_failslab+0x5/0x20 [ 397.472312][ T9992] slab_pre_alloc_hook+0x59/0x300 [ 397.477357][ T9992] kmem_cache_alloc+0x56/0x2f0 [ 397.482133][ T9992] ? copy_fs_struct+0x4b/0x270 [ 397.486919][ T9992] copy_fs_struct+0x4b/0x270 [ 397.491526][ T9992] ksys_unshare+0x397/0x8e0 [ 397.496051][ T9992] ? sighand_ctor+0x40/0x40 [ 397.500571][ T9992] ? lock_chain_count+0x20/0x20 [ 397.505446][ T9992] ? syscall_enter_from_user_mode+0x21/0x80 [ 397.511365][ T9992] __x64_sys_unshare+0x34/0x40 [ 397.516151][ T9992] do_syscall_64+0x4c/0xa0 [ 397.520595][ T9992] ? clear_bhb_loop+0x60/0xb0 [ 397.525304][ T9992] ? clear_bhb_loop+0x60/0xb0 [ 397.530007][ T9992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.535947][ T9992] RIP: 0033:0x7f7fe359e159 [ 397.539978][ T9989] System zones: [ 397.540361][ T9992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.540381][ T9992] RSP: 002b:00007f7fe455a028 EFLAGS: 00000246 [ 397.553226][ T9989] 1-12 [ 397.563494][ T9992] ORIG_RAX: 0000000000000110 [ 397.563507][ T9992] RAX: ffffffffffffffda RBX: 00007f7fe3825fa0 RCX: 00007f7fe359e159 [ 397.563522][ T9992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 397.563535][ T9992] RBP: 00007f7fe3635024 R08: 0000000000000000 R09: 0000000000000000 [ 397.563547][ T9992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 397.563559][ T9992] R13: 00007f7fe3826038 R14: 00007f7fe3825fa0 R15: 00007ffcb1fd5898 [ 397.563586][ T9992] [ 397.759636][ T9989] [ 397.776233][ T9989] EXT4-fs warning (device loop8): ext4_xattr_inode_get:492: inode #11: comm syz.8.1627: ea_inode file size=0 entry size=6 [ 397.810288][ T9989] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 397.831569][ T9989] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #11: comm syz.8.1627: iget: bad extra_isize 90 (inode size 256) [ 397.864450][ T4354] nvmet: connect request for invalid subsystem t! [ 397.883764][ T9998] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 397.886081][ T9989] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.1627: error while reading EA inode 11 err=-117 [ 397.961477][ T9989] EXT4-fs (loop8): 1 orphan inode deleted [ 397.967511][ T9989] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 398.022487][T10008] loop1: detected capacity change from 0 to 1024 [ 398.126843][ T9697] EXT4-fs error (device loop8): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 398.155839][T10008] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 398.407783][ T9697] EXT4-fs error (device loop8): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 90 (inode size 256) [ 398.788494][T10018] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 398.841390][ T9697] EXT4-fs error (device loop8): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 90 (inode size 256) [ 399.223195][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 399.260260][T10026] fuse: Unknown parameter 'group_i00000000000000000000' [ 399.832279][ T9697] EXT4-fs (loop8): unmounting filesystem. [ 400.052712][ T9] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.031287][ T9] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.267666][ T4324] nvmet: connect request for invalid subsystem t! [ 401.283993][T10049] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 401.314293][ T9] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.586531][ T9] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.716018][T10069] loop0: detected capacity change from 0 to 1024 [ 401.982140][T10074] xt_hashlimit: overflow, try lower: 1125899906842624/134217732 [ 402.232882][T10075] loop1: detected capacity change from 0 to 256 [ 402.370509][T10067] fuse: Unknown parameter 'group_i00000000000000000000' [ 402.414827][T10069] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 403.250645][ T4271] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 403.258248][ T4271] FAT-fs (loop1): Filesystem has been set read-only [ 403.308974][ T4271] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 403.342442][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 403.490899][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 403.501910][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 403.510161][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 403.522038][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 403.537726][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 403.557626][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 403.601154][ T4271] bond0: (slave syz_tun): Releasing backup interface [ 404.005694][T10106] FAULT_INJECTION: forcing a failure. [ 404.005694][T10106] name failslab, interval 1, probability 0, space 0, times 0 [ 404.041568][T10106] CPU: 1 PID: 10106 Comm: syz.6.1659 Not tainted syzkaller #0 [ 404.049074][T10106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.059128][T10106] Call Trace: [ 404.062402][T10106] [ 404.065324][T10106] dump_stack_lvl+0x188/0x24e [ 404.070011][T10106] ? show_regs_print_info+0x12/0x12 [ 404.075209][T10106] ? load_image+0x410/0x410 [ 404.079718][T10106] ? __might_sleep+0xd0/0xd0 [ 404.084308][T10106] ? __lock_acquire+0x7c40/0x7c40 [ 404.089340][T10106] should_fail_ex+0x390/0x4c0 [ 404.094032][T10106] should_failslab+0x5/0x20 [ 404.098525][T10106] slab_pre_alloc_hook+0x59/0x300 [ 404.103545][T10106] ? kvmalloc_node+0x6c/0x180 [ 404.108225][T10106] __kmem_cache_alloc_node+0x4f/0x270 [ 404.113601][T10106] ? kvmalloc_node+0x6c/0x180 [ 404.118285][T10106] __kmalloc_node+0xa2/0x240 [ 404.122895][T10106] kvmalloc_node+0x6c/0x180 [ 404.127400][T10106] alloc_fdtable+0x106/0x2c0 [ 404.131992][T10106] dup_fd+0x743/0xa20 [ 404.135976][T10106] ? _raw_spin_unlock+0x24/0x40 [ 404.140824][T10106] ? copy_fs_struct+0x1bf/0x270 [ 404.145673][T10106] ksys_unshare+0x458/0x8e0 [ 404.150178][T10106] ? sighand_ctor+0x40/0x40 [ 404.154677][T10106] ? lock_chain_count+0x20/0x20 [ 404.159528][T10106] ? syscall_enter_from_user_mode+0x21/0x80 [ 404.165422][T10106] __x64_sys_unshare+0x34/0x40 [ 404.170180][T10106] do_syscall_64+0x4c/0xa0 [ 404.174597][T10106] ? clear_bhb_loop+0x60/0xb0 [ 404.179271][T10106] ? clear_bhb_loop+0x60/0xb0 [ 404.183953][T10106] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 404.189845][T10106] RIP: 0033:0x7fe00819e159 [ 404.194252][T10106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.213858][T10106] RSP: 002b:00007fe008fa2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 404.222266][T10106] RAX: ffffffffffffffda RBX: 00007fe008425fa0 RCX: 00007fe00819e159 [ 404.230237][T10106] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 404.238199][T10106] RBP: 00007fe008235024 R08: 0000000000000000 R09: 0000000000000000 [ 404.246165][T10106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.254127][T10106] R13: 00007fe008426038 R14: 00007fe008425fa0 R15: 00007fffca646ab8 [ 404.262103][T10106] [ 404.265128][ C1] vkms_vblank_simulate: vblank timer overrun [ 404.358858][ T4354] nvmet: connect request for invalid subsystem t! [ 404.374231][T10107] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "t" [ 404.576629][T10095] chnl_net:caif_netlink_parms(): no params data found [ 404.713261][T10115] loop6: detected capacity change from 0 to 1024 [ 405.273167][T10127] loop7: detected capacity change from 0 to 256 [ 405.589543][T10115] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 405.678904][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 405.685935][ T4289] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 405.693370][ T9675] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 405.696372][ T4289] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 405.701295][ T9675] FAT-fs (loop7): Filesystem has been set read-only [ 405.709644][ T4289] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 405.715006][ T9675] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 405.735104][ T4288] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 405.847783][ T4288] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 405.855589][ T4288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.352331][T10095] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.361882][T10095] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.383088][T10095] device bridge_slave_0 entered promiscuous mode [ 406.425486][T10095] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.445678][T10095] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.466508][T10095] device bridge_slave_1 entered promiscuous mode [ 406.730306][T10095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.770167][ T9] device hsr_slave_0 left promiscuous mode [ 406.811993][ T9] device hsr_slave_1 left promiscuous mode [ 406.844636][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.867127][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.902900][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.917079][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.926255][ T9] device bridge_slave_1 left promiscuous mode [ 406.945545][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.965582][ T9] device bridge_slave_0 left promiscuous mode [ 406.987183][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.035501][ T9] device veth1_macvtap left promiscuous mode [ 407.047370][ T9] device veth0_macvtap left promiscuous mode [ 407.053505][ T9] device veth1_vlan left promiscuous mode [ 407.078205][ T9] device veth0_vlan left promiscuous mode [ 407.138751][ T9642] EXT4-fs (loop6): unmounting filesystem. [ 407.267183][ T4289] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 407.290080][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 407.322065][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 407.349520][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 407.358362][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 407.365673][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 407.720470][ T9] team0 (unregistering): Port device team_slave_1 removed [ 407.741485][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 407.764193][ T9] team0 (unregistering): Port device team_slave_0 removed [ 407.802976][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.843469][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.979321][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 408.118850][ T9] bond0 (unregistering): Released all slaves [ 408.213453][T10095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.305777][T10095] team0: Port device team_slave_0 added [ 408.362996][T10095] team0: Port device team_slave_1 added [ 408.468140][T10163] FAULT_INJECTION: forcing a failure. [ 408.468140][T10163] name failslab, interval 1, probability 0, space 0, times 0 [ 408.480909][T10163] CPU: 1 PID: 10163 Comm: syz.0.1670 Not tainted syzkaller #0 [ 408.488388][T10163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.498454][T10163] Call Trace: [ 408.501741][T10163] [ 408.504683][T10163] dump_stack_lvl+0x188/0x24e [ 408.509391][T10163] ? show_regs_print_info+0x12/0x12 [ 408.514616][T10163] ? load_image+0x410/0x410 [ 408.519142][T10163] ? __might_sleep+0xd0/0xd0 [ 408.523752][T10163] ? __lock_acquire+0x7c40/0x7c40 [ 408.528800][T10163] should_fail_ex+0x390/0x4c0 [ 408.533507][T10163] should_failslab+0x5/0x20 [ 408.538029][T10163] slab_pre_alloc_hook+0x59/0x300 [ 408.543080][T10163] kmem_cache_alloc+0x56/0x2f0 [ 408.547868][T10163] ? copy_fs_struct+0x4b/0x270 [ 408.552665][T10163] copy_fs_struct+0x4b/0x270 [ 408.557279][T10163] ksys_unshare+0x397/0x8e0 [ 408.561811][T10163] ? sighand_ctor+0x40/0x40 [ 408.566333][T10163] ? lock_chain_count+0x20/0x20 [ 408.571215][T10163] ? syscall_enter_from_user_mode+0x21/0x80 [ 408.577130][T10163] __x64_sys_unshare+0x34/0x40 [ 408.581910][T10163] do_syscall_64+0x4c/0xa0 [ 408.586347][T10163] ? clear_bhb_loop+0x60/0xb0 [ 408.591054][T10163] ? clear_bhb_loop+0x60/0xb0 [ 408.595751][T10163] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 408.601670][T10163] RIP: 0033:0x7f025b79e159 [ 408.606086][T10163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.625691][T10163] RSP: 002b:00007f025c6f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 408.634107][T10163] RAX: ffffffffffffffda RBX: 00007f025ba25fa0 RCX: 00007f025b79e159 [ 408.642079][T10163] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 408.650047][T10163] RBP: 00007f025b835024 R08: 0000000000000000 R09: 0000000000000000 [ 408.658010][T10163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.665973][T10163] R13: 00007f025ba26038 R14: 00007f025ba25fa0 R15: 00007fff93c01c18 [ 408.673957][T10163] [ 408.677033][ C1] vkms_vblank_simulate: vblank timer overrun [ 408.899942][T10095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.962744][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.198451][T10095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.290392][T10130] chnl_net:caif_netlink_parms(): no params data found [ 409.326089][T10095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.333948][T10095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.359871][ C1] vkms_vblank_simulate: vblank timer overrun [ 409.377563][T10167] loop0: detected capacity change from 0 to 1024 [ 409.388801][T10095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.415736][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 409.482493][T10167] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 409.498302][T10095] device hsr_slave_0 entered promiscuous mode [ 409.515055][T10095] device hsr_slave_1 entered promiscuous mode [ 409.839037][ T4282] Bluetooth: hci4: command 0x040f tx timeout [ 410.055606][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 410.405285][T10130] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.415299][T10130] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.435978][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 410.446152][T10130] device bridge_slave_0 entered promiscuous mode [ 410.518610][T10130] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.535315][T10130] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.543445][T10130] device bridge_slave_1 entered promiscuous mode [ 410.608946][T10190] loop0: detected capacity change from 0 to 1024 [ 410.651300][ T9] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.697380][T10190] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 410.805154][T10156] chnl_net:caif_netlink_parms(): no params data found [ 410.924764][T10130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.069495][T10130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.420536][T10130] team0: Port device team_slave_0 added [ 411.428609][T10130] team0: Port device team_slave_1 added [ 411.451296][T10130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.458414][T10130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.505380][T10130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.571965][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 411.632941][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 411.643454][ T9] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.733462][T10130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.757394][T10130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.801180][T10130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.824187][T10213] loop0: detected capacity change from 0 to 512 [ 411.850979][T10213] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a826c198, mo2=0002] [ 411.860025][T10213] System zones: 1-12 [ 411.866387][T10213] EXT4-fs warning (device loop0): ext4_xattr_inode_get:492: inode #11: comm syz.0.1678: ea_inode file size=0 entry size=6 [ 411.894479][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 411.900394][T10213] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.1678: iget: bad extra_isize 90 (inode size 256) [ 411.924200][ T9] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.952642][T10213] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.1678: error while reading EA inode 11 err=-117 [ 411.967307][T10213] EXT4-fs (loop0): 1 orphan inode deleted [ 411.973102][T10213] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 412.057749][T10130] device hsr_slave_0 entered promiscuous mode [ 412.065227][T10130] device hsr_slave_1 entered promiscuous mode [ 412.075320][T10130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.097826][T10130] Cannot create hsr debugfs directory [ 412.134403][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 412.141889][ T4280] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 412.144604][ T9] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.164558][ T4280] EXT4-fs error (device loop0): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 90 (inode size 256) [ 412.189387][ T4280] EXT4-fs error (device loop0): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 90 (inode size 256) [ 412.224504][T10156] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.231619][T10156] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.240932][T10156] device bridge_slave_0 entered promiscuous mode [ 412.269122][T10156] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.278530][T10156] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.290836][T10156] device bridge_slave_1 entered promiscuous mode [ 412.393077][T10156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.426280][T10095] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 412.442648][T10156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.468485][T10095] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 412.480326][T10095] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 412.511569][T10095] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 412.552077][T10156] team0: Port device team_slave_0 added [ 412.575766][ T4280] EXT4-fs (loop0): unmounting filesystem. [ 412.587456][T10156] team0: Port device team_slave_1 added [ 412.686935][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.045035][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.094334][T10156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.111497][T10156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.137440][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.242142][T10156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.255626][T10232] loop6: detected capacity change from 0 to 1024 [ 413.308240][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.345368][T10232] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 413.356125][T10156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.363084][T10156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.389006][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.443720][T10156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 413.497016][T10156] device hsr_slave_0 entered promiscuous mode [ 413.534804][T10156] device hsr_slave_1 entered promiscuous mode [ 413.561761][T10156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.573744][T10156] Cannot create hsr debugfs directory [ 413.610767][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 413.621760][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 413.630344][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 413.654870][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 413.778531][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 413.792484][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 413.804606][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 414.231726][ T4282] Bluetooth: hci1: command 0x0419 tx timeout [ 414.257084][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.276805][ T9642] EXT4-fs (loop6): unmounting filesystem. [ 414.365999][T10095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.457754][T10247] loop6: detected capacity change from 0 to 1024 [ 414.492002][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 414.501184][T10247] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 414.501798][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 414.524918][T10095] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.439510][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 415.448712][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 415.468056][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.475192][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.485777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 415.495985][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 415.504021][ T9642] EXT4-fs (loop6): unmounting filesystem. [ 415.522333][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.529505][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.548392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 415.571889][T10240] chnl_net:caif_netlink_parms(): no params data found [ 415.633448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 415.642042][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 415.651621][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 415.661456][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 415.670401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 415.701505][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 415.714210][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 415.732988][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 415.742371][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 415.751416][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 415.787890][T10095] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 415.809842][T10095] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 415.858490][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 415.867069][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 415.884551][T10240] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.891645][T10240] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.900098][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 415.916043][T10240] device bridge_slave_0 entered promiscuous mode [ 415.999368][T10240] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.017103][T10240] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.026146][T10240] device bridge_slave_1 entered promiscuous mode [ 416.039558][ T9] tipc: Left network mode [ 416.113613][T10240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.270410][T10240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.293759][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 416.301300][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 416.328283][T10095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.350333][T10240] team0: Port device team_slave_0 added [ 417.420717][T10240] team0: Port device team_slave_1 added [ 417.610029][T10293] loop6: detected capacity change from 0 to 512 [ 417.660492][T10293] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a826c198, mo2=0002] [ 417.678612][T10293] System zones: 1-12 [ 417.742917][T10293] EXT4-fs warning (device loop6): ext4_xattr_inode_get:492: inode #11: comm syz.6.1689: ea_inode file size=0 entry size=6 [ 417.788715][T10293] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #11: comm syz.6.1689: iget: bad extra_isize 90 (inode size 256) [ 417.813017][T10293] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1689: error while reading EA inode 11 err=-117 [ 417.836461][T10240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.836498][T10293] EXT4-fs (loop6): 1 orphan inode deleted [ 417.849369][T10293] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 417.883514][T10240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.961954][T10240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.977996][ T9642] EXT4-fs error (device loop6): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 418.001345][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 418.031848][ T9642] EXT4-fs error (device loop6): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 90 (inode size 256) [ 418.050366][ T9642] EXT4-fs error (device loop6): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 90 (inode size 256) [ 418.168920][T10240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.176258][T10240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.203125][T10240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.379071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 418.389014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 418.488077][ T9642] EXT4-fs (loop6): unmounting filesystem. [ 418.514451][T10095] device veth0_vlan entered promiscuous mode [ 418.525756][T10240] device hsr_slave_0 entered promiscuous mode [ 418.534645][T10240] device hsr_slave_1 entered promiscuous mode [ 418.542201][T10240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.550170][T10240] Cannot create hsr debugfs directory [ 418.610171][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 418.621675][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 418.632604][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 418.640435][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 418.703832][T10095] device veth1_vlan entered promiscuous mode [ 418.845975][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 418.855790][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 418.865403][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 418.875381][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 418.891540][T10095] device veth0_macvtap entered promiscuous mode [ 418.923621][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 418.934726][T10095] device veth1_macvtap entered promiscuous mode [ 419.124361][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.135305][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.145886][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.156571][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.167887][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.187557][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.199742][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.217456][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.229720][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.240818][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.252839][T10095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.256652][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 419.282860][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 419.291170][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 419.299904][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 419.300112][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 419.316754][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 419.339905][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 419.348531][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 419.349705][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.367555][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.377700][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.388248][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.398832][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.409325][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.419871][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.430486][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.440407][T10095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.450964][T10095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.463440][T10095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.478832][T10095] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.487957][T10095] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.498338][T10095] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.507659][T10095] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.555966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 419.565138][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 419.582376][T10130] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 419.650323][T10130] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 419.671533][ T9] device hsr_slave_0 left promiscuous mode [ 419.677814][ T9] device hsr_slave_1 left promiscuous mode [ 419.686443][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.694200][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.704455][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.711957][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.719443][ T9] device bridge_slave_1 left promiscuous mode [ 419.725762][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.738274][ T9] device bridge_slave_0 left promiscuous mode [ 419.744662][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.758129][ T9] device hsr_slave_0 left promiscuous mode [ 419.764710][ T9] device hsr_slave_1 left promiscuous mode [ 419.771378][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.778926][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.786791][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.794417][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.802128][ T9] device bridge_slave_1 left promiscuous mode [ 419.808287][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.816812][ T9] device bridge_slave_0 left promiscuous mode [ 419.827050][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.859203][ T9] device veth1_macvtap left promiscuous mode [ 419.865370][ T9] device veth0_macvtap left promiscuous mode [ 419.871935][ T9] device veth1_vlan left promiscuous mode [ 419.878170][ T9] device veth0_vlan left promiscuous mode [ 419.885049][ T9] device veth1_macvtap left promiscuous mode [ 419.891250][ T9] device veth0_macvtap left promiscuous mode [ 419.897280][ T9] device veth1_vlan left promiscuous mode [ 419.903376][ T9] device veth0_vlan left promiscuous mode [ 420.050723][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 420.444696][ T9] team0 (unregistering): Port device team_slave_1 removed [ 420.486214][ T9] team0 (unregistering): Port device team_slave_0 removed [ 420.524405][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.562330][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.838002][ T9] bond0 (unregistering): Released all slaves [ 421.294404][ T9] team0 (unregistering): Port device team_slave_1 removed [ 421.334532][ T9] team0 (unregistering): Port device team_slave_0 removed [ 421.372534][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.413737][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.420135][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 421.679136][ T9] team0 (unregistering): Port device bond0 removed [ 421.707454][ T9] bond0 (unregistering): Released all slaves [ 421.828112][T10130] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 421.836719][T10130] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 421.902577][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.919900][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.949519][T10156] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 421.988544][T10240] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.022314][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 422.032372][T10156] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 422.075686][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.084933][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.091346][T10156] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 422.107780][T10156] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 422.129827][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 422.152866][T10240] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.166845][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 422.262023][T10240] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.383588][T10306] loop9: detected capacity change from 0 to 1024 [ 422.405656][T10240] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.475979][T10130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.484871][T10301] chnl_net:caif_netlink_parms(): no params data found [ 422.518847][T10306] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 422.701336][T10301] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.708531][T10301] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.731335][T10301] device bridge_slave_0 entered promiscuous mode [ 422.755139][T10130] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.764907][T10301] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.773289][T10301] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.781712][T10301] device bridge_slave_1 entered promiscuous mode [ 422.806380][T10301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.818447][T10301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.865396][T10301] team0: Port device team_slave_0 added [ 422.895245][T10301] team0: Port device team_slave_1 added [ 422.967949][T10301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.985319][T10301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.011269][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.034122][T10301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.057533][T10301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.073383][T10301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.099273][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.108286][T10301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.121206][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 423.135899][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 423.175646][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 423.185179][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 423.193669][ T7849] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.200791][ T7849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.209055][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 423.222147][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 423.252918][ T7849] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.260303][ T7849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.277229][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 423.302688][T10095] EXT4-fs (loop9): unmounting filesystem. [ 423.311102][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 423.359028][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 423.420223][T10156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.485426][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 423.491853][T10301] device hsr_slave_0 entered promiscuous mode [ 423.500151][T10301] device hsr_slave_1 entered promiscuous mode [ 423.508252][T10301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.515970][T10301] Cannot create hsr debugfs directory [ 423.521538][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 423.531025][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 423.539866][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 423.548167][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 423.556578][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 423.565224][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 423.573854][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 423.583083][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 423.591301][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 423.605698][T10156] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.638143][T10240] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 423.648672][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 423.659288][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 423.668255][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.675372][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.683557][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 423.692434][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 423.700748][ T76] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.707785][ T76] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.715870][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 423.728403][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 423.738507][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 423.756174][T10240] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 423.766260][T10240] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 423.777295][T10130] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 423.814782][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 423.823585][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 423.862277][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 423.924558][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 423.934840][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 423.965275][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 423.995065][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 424.046790][T10240] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 424.134143][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 424.156408][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 424.897852][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 424.932229][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 424.963494][T10156] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 425.075103][T10240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.144923][T10240] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.212666][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 425.232014][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 425.309162][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 425.394593][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 425.479556][ T5670] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.486750][ T5670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.543777][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 425.968094][T10130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.981855][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 425.990018][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 425.999288][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 426.020144][ T5670] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.027315][ T5670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.049419][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 426.059161][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 426.566703][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 426.623449][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 426.727231][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 426.880994][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 426.891210][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 426.905030][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 426.922299][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 426.941592][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 426.973941][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 427.002092][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 427.010863][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 427.066983][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.107152][T10342] loop9: detected capacity change from 0 to 512 [ 427.126344][T10342] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a826c198, mo2=0002] [ 427.135464][T10342] System zones: 1-12 [ 427.159000][T10342] EXT4-fs warning (device loop9): ext4_xattr_inode_get:492: inode #11: comm syz.9.1698: ea_inode file size=0 entry size=6 [ 427.178332][T10342] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #11: comm syz.9.1698: iget: bad extra_isize 90 (inode size 256) [ 427.201025][T10342] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.1698: error while reading EA inode 11 err=-117 [ 427.223981][T10342] EXT4-fs (loop9): 1 orphan inode deleted [ 427.243620][T10240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 427.251181][T10342] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 427.302377][T10095] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 427.303406][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.322385][ C1] vkms_vblank_simulate: vblank timer overrun [ 427.354996][T10095] EXT4-fs error (device loop9): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 90 (inode size 256) [ 427.362498][T10156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.377532][T10095] EXT4-fs error (device loop9): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 90 (inode size 256) [ 427.522339][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 427.543269][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 427.550763][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 427.614976][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.675855][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 427.689026][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 427.704401][T10130] device veth0_vlan entered promiscuous mode [ 427.747447][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.772211][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 427.802382][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 427.830146][T10130] device veth1_vlan entered promiscuous mode [ 427.858944][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 427.875494][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 427.892556][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 427.916632][T10095] EXT4-fs (loop9): unmounting filesystem. [ 428.002505][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 428.011573][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 428.019013][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 428.083160][T10301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 428.145727][T10301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 428.164753][T10301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 428.206220][T10240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.231225][T10130] device veth0_macvtap entered promiscuous mode [ 428.243084][T10301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 428.278288][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 428.294824][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 428.324317][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 428.353516][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 428.382734][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 428.423776][T10130] device veth1_macvtap entered promiscuous mode [ 428.497792][T10156] device veth0_vlan entered promiscuous mode [ 428.551939][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 428.566680][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 428.589193][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 428.605582][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 428.613981][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 428.634258][T10156] device veth1_vlan entered promiscuous mode [ 428.676548][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.687561][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.726776][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.730442][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 428.747588][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 428.756029][ T4282] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 428.763362][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.775323][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.786197][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.796312][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 428.803953][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.814951][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.824464][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 428.827039][T10130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.840632][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 428.905212][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.921140][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.931705][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.942573][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.952538][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.963113][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.972969][T10130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.983520][T10130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.994524][T10130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.002075][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 429.011008][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 429.028659][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 429.038455][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 429.111893][T10130] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.126556][T10130] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.137309][T10130] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.146289][T10130] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.216713][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 429.235563][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 429.248267][T10156] device veth0_macvtap entered promiscuous mode [ 429.289727][T10156] device veth1_macvtap entered promiscuous mode [ 429.317900][T10301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.336255][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 429.348540][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 429.358370][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 429.370301][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 429.413245][T10156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.436545][T10156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.449776][T10156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.460929][T10156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.470839][T10156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.481696][T10156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.491555][T10156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.502187][T10156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.512135][T10156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.522670][T10156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.534262][T10156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.547240][T10156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.558630][T10156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.569107][T10156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.579613][T10156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.589607][T10156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.600138][T10156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.610158][T10156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.620693][T10156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.630559][T10156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.642017][T10156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.653332][T10156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.669984][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 429.684352][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 429.694024][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 429.702695][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 429.735504][T10156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.749257][T10156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.758441][T10156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.767410][T10156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.801176][T10301] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.813080][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 429.821602][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 429.829238][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 429.838482][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 429.848200][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.855324][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.863874][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 429.872773][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 429.881319][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 429.889582][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 429.897462][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 429.925296][ T5670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.947734][ T5670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.960573][T10240] device veth0_vlan entered promiscuous mode [ 429.980655][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 429.989029][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 429.999451][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 430.011338][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.018464][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.036653][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 430.090920][T10240] device veth1_vlan entered promiscuous mode [ 430.109760][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 430.119639][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 430.159343][T10301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 430.170277][T10301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 430.236861][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 430.248446][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.256484][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.281893][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 430.298551][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 430.308590][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 430.317420][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 430.326398][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 430.336390][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 430.345786][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 430.354847][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 430.363089][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 430.371473][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 430.403148][T10361] chnl_net:caif_netlink_parms(): no params data found [ 430.608214][T10240] device veth0_macvtap entered promiscuous mode [ 430.668249][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 430.685989][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 430.695593][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 430.708667][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 430.724047][T10240] device veth1_macvtap entered promiscuous mode [ 430.801709][ T8692] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.810379][ T8692] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.858100][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.869096][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.879423][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.890193][ T4282] Bluetooth: hci4: command 0x0409 tx timeout [ 430.892200][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.906670][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.917313][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.927269][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.938928][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.949069][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.959567][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.969887][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.980454][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.992293][T10240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.000247][T10361] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.008057][T10361] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.016794][T10361] device bridge_slave_0 entered promiscuous mode [ 431.025637][T10361] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.032720][T10361] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.041391][T10361] device bridge_slave_1 entered promiscuous mode [ 431.064215][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 431.075033][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 431.088329][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 431.125269][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.144452][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.169621][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.183605][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.201106][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.223035][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.241014][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.263970][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.280253][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.300275][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.311730][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.327250][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.340268][T10240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.376505][ T9] device hsr_slave_0 left promiscuous mode [ 431.472876][ T9] device hsr_slave_1 left promiscuous mode [ 431.517746][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 431.558745][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.622283][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.661157][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.707435][ T9] device bridge_slave_1 left promiscuous mode [ 431.748450][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.804524][ T9] device bridge_slave_0 left promiscuous mode [ 431.845999][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.007429][ T9] device veth1_macvtap left promiscuous mode [ 432.013575][ T9] device veth0_macvtap left promiscuous mode [ 432.030375][ T9] device veth1_vlan left promiscuous mode [ 432.043211][ T9] device veth0_vlan left promiscuous mode [ 432.225867][T10385] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1704'. [ 432.321970][T10387] loop3: detected capacity change from 0 to 512 [ 432.338230][T10387] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a826c198, mo2=0002] [ 432.356281][T10387] System zones: 1-12 [ 432.388275][T10387] EXT4-fs warning (device loop3): ext4_xattr_inode_get:492: inode #11: comm syz.3.1705: ea_inode file size=0 entry size=6 [ 432.405675][T10387] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #11: comm syz.3.1705: iget: bad extra_isize 90 (inode size 256) [ 432.419549][T10387] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.1705: error while reading EA inode 11 err=-117 [ 432.433238][T10387] EXT4-fs (loop3): 1 orphan inode deleted [ 432.439094][T10387] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 432.499013][T10130] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 432.538692][T10130] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 90 (inode size 256) [ 432.559063][T10130] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 90 (inode size 256) [ 432.799356][ T9] team0 (unregistering): Port device team_slave_1 removed [ 432.837922][ T9] team0 (unregistering): Port device team_slave_0 removed [ 432.876088][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.914968][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.940662][ T4288] Bluetooth: hci4: command 0x041b tx timeout [ 433.175784][ T9] team0 (unregistering): Port device bond0 removed [ 433.204689][ T9] bond0 (unregistering): Released all slaves [ 433.289768][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 433.298838][ T8692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 433.311832][T10240] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.323482][T10240] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.332554][T10240] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.341522][T10240] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.355080][T10361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.376513][ T5670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.384675][ T5670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.449268][T10361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.459819][ T5670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 433.469556][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 433.478057][ T4640] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 433.536763][T10301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.612523][T10361] team0: Port device team_slave_0 added [ 433.623578][T10361] team0: Port device team_slave_1 added [ 433.642322][T10130] EXT4-fs (loop3): unmounting filesystem. [ 433.679257][T10361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.686627][T10361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.723310][T10361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.767812][T10361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.774825][T10361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.802060][T10361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.840054][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 433.861229][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 433.872897][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 433.891356][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 433.903348][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 433.920311][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 433.939202][T10301] device veth0_vlan entered promiscuous mode [ 433.987844][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.001471][T10301] device veth1_vlan entered promiscuous mode [ 434.017307][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.029105][T10361] device hsr_slave_0 entered promiscuous mode [ 434.043718][T10361] device hsr_slave_1 entered promiscuous mode [ 434.057054][T10361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.065574][T10361] Cannot create hsr debugfs directory [ 434.076235][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 434.087526][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 434.160911][ T4640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.173459][ T4640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.194942][ T8694] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 434.211862][ T8694] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 434.229437][ T8694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 434.250065][ T8694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 434.273122][T10301] device veth0_macvtap entered promiscuous mode [ 434.334548][T10301] device veth1_macvtap entered promiscuous mode [ 434.412455][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.451079][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.504627][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.534228][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.566769][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.715701][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.763653][ T4282] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 434.771864][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.784008][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 434.792420][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 434.841161][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.331413][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 435.880601][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.914799][ T4286] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 435.922391][ T4289] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 435.934710][ T4286] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 435.961921][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.994568][T10407] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1711'. [ 435.999997][T10409] loop5: detected capacity change from 0 to 512 [ 436.011138][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.023692][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.031119][T10409] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a826c198, mo2=0002] [ 436.035397][T10301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.094890][T10409] System zones: 1-12 [ 436.130574][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 436.150395][T10409] EXT4-fs warning (device loop5): ext4_xattr_inode_get:492: inode #11: comm syz.5.1712: ea_inode file size=0 entry size=6 [ 436.163806][T10409] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: inode #11: comm syz.5.1712: iget: bad extra_isize 90 (inode size 256) [ 436.180271][T10409] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.1712: error while reading EA inode 11 err=-117 [ 436.203095][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 436.284158][T10409] EXT4-fs (loop5): 1 orphan inode deleted [ 436.303091][T10409] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 436.395630][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.427223][T10240] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 436.445839][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.494319][T10240] EXT4-fs error (device loop5): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 90 (inode size 256) [ 436.597424][T10240] EXT4-fs error (device loop5): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 90 (inode size 256) [ 436.728010][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 436.896092][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.057314][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.083701][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.104300][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.127830][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.137756][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.148239][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.158204][T10301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 437.168718][T10301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 437.180164][T10301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.244106][T10401] chnl_net:caif_netlink_parms(): no params data found [ 437.331108][T10301] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.357697][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 437.365259][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 437.376815][T10301] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.406583][T10301] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.431548][T10301] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.556108][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 437.602052][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 437.611232][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 437.713166][T10401] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.720487][T10401] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.728177][T10401] device bridge_slave_0 entered promiscuous mode [ 437.746866][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.754878][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.783025][T10401] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.791621][T10401] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.801037][T10401] device bridge_slave_1 entered promiscuous mode [ 437.813054][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 437.871271][T10401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.883582][T10401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.893649][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.914047][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.934656][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.968152][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 437.976855][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 438.073940][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.255494][T10401] team0: Port device team_slave_0 added [ 438.288153][T10401] team0: Port device team_slave_1 added [ 438.893358][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.918758][T10401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.944366][T10401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.028665][T10401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.143583][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.170323][T10401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.180389][T10401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.230780][T10401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 439.435235][T10401] device hsr_slave_0 entered promiscuous mode [ 439.499427][T10401] device hsr_slave_1 entered promiscuous mode [ 439.581834][T10401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.693184][T10240] EXT4-fs (loop5): unmounting filesystem. [ 439.753008][T10401] Cannot create hsr debugfs directory [ 439.941067][T10361] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 440.003952][T10361] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 440.031884][ T4288] Bluetooth: hci1: command 0x041b tx timeout [ 440.100318][T10361] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 440.170079][T10361] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 440.323014][ T9] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.460231][ T9] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.588118][ T9] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.737314][T10465] loop2: detected capacity change from 0 to 128 [ 440.764854][ T9] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.883447][T10361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.955359][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 440.968687][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 441.064552][T10361] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.211107][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 441.301043][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 441.425695][ T8688] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.432915][ T8688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.758495][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 441.774802][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 441.783224][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 441.791960][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 441.800880][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 441.816047][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 441.824709][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 441.833588][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 441.856094][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.863339][ T8688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.004418][T10401] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 442.034403][T10401] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 442.089965][ T4288] Bluetooth: hci1: command 0x040f tx timeout [ 442.110260][T10401] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 442.149983][T10401] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 442.165899][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 442.231290][T10486] loop4: detected capacity change from 0 to 256 [ 442.238795][T10486] FAT-fs (loop4): "posix" option is obsolete, not supported now [ 442.378980][T10485] Bluetooth: MGMT ver 1.22 [ 442.400727][T10485] Bluetooth: hci0: unsupported parameter 255 [ 442.431947][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 442.588521][T10485] Bluetooth: hci0: unsupported parameter 255 [ 442.914635][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 442.950948][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 443.025116][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 443.045638][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 443.116367][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 443.136786][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 443.174887][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 443.193443][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 443.216512][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 443.235440][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 443.834763][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 444.152955][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 444.675671][T10401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.329794][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 445.348535][ T7849] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.485525][T10401] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.640827][T10533] FAULT_INJECTION: forcing a failure. [ 445.640827][T10533] name failslab, interval 1, probability 0, space 0, times 0 [ 445.667500][T10533] CPU: 1 PID: 10533 Comm: syz.4.1737 Not tainted syzkaller #0 [ 445.675019][T10533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.685092][T10533] Call Trace: [ 445.688387][T10533] [ 445.691329][T10533] dump_stack_lvl+0x188/0x24e [ 445.696016][T10533] ? show_regs_print_info+0x12/0x12 [ 445.701215][T10533] ? load_image+0x410/0x410 [ 445.705720][T10533] ? __might_sleep+0xd0/0xd0 [ 445.710304][T10533] ? __lock_acquire+0x7c40/0x7c40 [ 445.715335][T10533] should_fail_ex+0x390/0x4c0 [ 445.720022][T10533] should_failslab+0x5/0x20 [ 445.724523][T10533] slab_pre_alloc_hook+0x59/0x300 [ 445.729547][T10533] kmem_cache_alloc+0x56/0x2f0 [ 445.734305][T10533] ? mas_alloc_nodes+0x2ec/0x880 [ 445.739241][T10533] mas_alloc_nodes+0x2ec/0x880 [ 445.744010][T10533] mas_preallocate+0x162/0x3b0 [ 445.748784][T10533] __vma_adjust+0x2ff/0x1d00 [ 445.753381][T10533] ? validate_mm+0x2e0/0x2e0 [ 445.757978][T10533] ? up_write+0x1b6/0x410 [ 445.762315][T10533] ? anon_vma_clone+0x475/0x4c0 [ 445.767166][T10533] __split_vma+0x3a2/0x4f0 [ 445.771582][T10533] mprotect_fixup+0x5dc/0x840 [ 445.776268][T10533] ? change_protection+0x3980/0x3980 [ 445.781550][T10533] ? apparmor_file_mprotect+0xf4/0x110 [ 445.787007][T10533] ? bpf_lsm_file_mprotect+0x5/0x10 [ 445.792206][T10533] ? security_file_mprotect+0x7e/0xb0 [ 445.797572][T10533] do_mprotect_pkey+0x7ff/0xba0 [ 445.802428][T10533] ? do_futex+0x310/0x320 [ 445.806752][T10533] ? prot_none_test+0x10/0x10 [ 445.811438][T10533] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 445.817429][T10533] __x64_sys_mprotect+0x7c/0x90 [ 445.822278][T10533] do_syscall_64+0x4c/0xa0 [ 445.826692][T10533] ? clear_bhb_loop+0x60/0xb0 [ 445.831369][T10533] ? clear_bhb_loop+0x60/0xb0 [ 445.836043][T10533] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.841930][T10533] RIP: 0033:0x7f213159e159 [ 445.846338][T10533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.865934][T10533] RSP: 002b:00007f21324ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 445.874338][T10533] RAX: ffffffffffffffda RBX: 00007f2131825fa0 RCX: 00007f213159e159 [ 445.882305][T10533] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000000000 [ 445.890267][T10533] RBP: 00007f2131635024 R08: 0000000000000000 R09: 0000000000000000 [ 445.898231][T10533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.906192][T10533] R13: 00007f2131826038 R14: 00007f2131825fa0 R15: 00007ffee3e99ff8 [ 445.914166][T10533] [ 445.918847][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 445.950150][T10477] chnl_net:caif_netlink_parms(): no params data found [ 445.980021][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 445.997076][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 446.016574][ T4443] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.023687][ T4443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.033556][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 446.067509][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 446.093709][ T4443] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.100869][ T4443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.132798][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 446.180052][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 446.206128][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 447.139114][T10477] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.180920][T10477] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.190768][T10477] device bridge_slave_0 entered promiscuous mode [ 447.207255][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 447.283263][T10477] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.290827][T10477] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.300351][T10477] device bridge_slave_1 entered promiscuous mode [ 447.330519][T10361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.364048][T10401] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 447.414319][T10401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 447.446335][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 447.463190][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 447.484050][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 447.513422][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 447.538764][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 447.567762][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 447.595202][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 447.631356][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 447.664479][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 447.904183][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 447.972511][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 448.062017][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 448.937981][T10577] 0x000000000006-0x000000020000 : "" [ 448.957929][T10577] ftl_cs: FTL header corrupt! [ 449.687279][T10477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 449.711749][ C1] Unknown status report in ack skb [ 449.751763][T10477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.774362][T10582] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 450.030859][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 450.380094][T10477] team0: Port device team_slave_0 added [ 450.711137][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 450.825758][ T4443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 451.191291][T10477] team0: Port device team_slave_1 added [ 451.245387][T10401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.349500][T10477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.378891][T10477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.431289][T10477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.497574][T10611] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 451.520278][T10611] gadgetfs: probe of gadget.0 failed with error -12 [ 451.557211][T10611] udc dummy_udc.1: failed to start USB Gadget filesystem: -12 [ 451.564897][T10611] gadgetfs: probe of gadget.1 failed with error -12 [ 451.579436][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 451.595399][T10611] ================================================================== [ 451.603490][T10611] BUG: KASAN: use-after-free in gadgetfs_bind+0xcf/0x820 [ 451.607398][ T8688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 451.610524][T10611] Write of size 8 at addr ffff88805480b0c0 by task syz.4.1754/10611 [ 451.610544][T10611] [ 451.610550][T10611] CPU: 1 PID: 10611 Comm: syz.4.1754 Not tainted syzkaller #0 [ 451.610570][T10611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 451.610580][T10611] Call Trace: [ 451.610587][T10611] [ 451.610594][T10611] dump_stack_lvl+0x188/0x24e [ 451.657317][T10611] ? __lock_acquire+0x7c40/0x7c40 [ 451.662369][T10611] ? show_regs_print_info+0x12/0x12 [ 451.667591][T10611] ? load_image+0x410/0x410 [ 451.672116][T10611] ? __virt_addr_valid+0x467/0x540 [ 451.677248][T10611] ? gadgetfs_bind+0xcf/0x820 [ 451.681947][T10611] print_report+0xa8/0x210 [ 451.686382][T10611] kasan_report+0x10b/0x140 [ 451.690909][T10611] ? gadgetfs_bind+0xcf/0x820 [ 451.695611][T10611] gadgetfs_bind+0xcf/0x820 [ 451.700145][T10611] ? kernfs_put+0x442/0x480 [ 451.704658][T10611] ? is_valid_config+0x1a0/0x1a0 [ 451.709611][T10611] gadget_bind_driver+0x2af/0x760 [ 451.714639][T10611] ? gadget_match_driver+0x130/0x130 [ 451.719920][T10611] really_probe+0x24a/0xb40 [ 451.724417][T10611] ? pm_runtime_barrier+0x147/0x1c0 [ 451.729607][T10611] __driver_probe_device+0x1f5/0x390 [ 451.734886][T10611] driver_probe_device+0x4f/0x420 [ 451.739903][T10611] __driver_attach+0x43d/0x6c0 [ 451.744658][T10611] ? driver_attach+0x40/0x40 [ 451.749241][T10611] bus_for_each_dev+0x182/0x1f0 [ 451.754083][T10611] ? kobject_add+0x230/0x230 [ 451.758674][T10611] ? bus_remove_file+0xd0/0xd0 [ 451.763425][T10611] ? do_raw_spin_unlock+0x11d/0x230 [ 451.768617][T10611] bus_add_driver+0x324/0x5d0 [ 451.773286][T10611] driver_register+0x32d/0x430 [ 451.778043][T10611] usb_gadget_register_driver_owner+0xf5/0x260 [ 451.784198][T10611] dev_config+0xe45/0x1260 [ 451.788614][T10611] ? rcu_read_lock_any_held+0xb0/0x130 [ 451.794066][T10611] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 451.799352][T10611] ? end_current_label_crit_section+0x14b/0x170 [ 451.805598][T10611] ? ep0_read+0x1880/0x1880 [ 451.810109][T10611] ? common_file_perm+0x171/0x1c0 [ 451.815133][T10611] ? ep0_read+0x1880/0x1880 [ 451.819632][T10611] vfs_write+0x2dc/0x9a0 [ 451.823875][T10611] ? file_end_write+0x250/0x250 [ 451.828722][T10611] ? __fget_files+0x28/0x460 [ 451.833309][T10611] ? __fget_files+0x3fc/0x460 [ 451.837982][T10611] ? __fdget_pos+0x2ae/0x360 [ 451.842568][T10611] ? ksys_write+0x70/0x260 [ 451.846984][T10611] ksys_write+0x14d/0x260 [ 451.851311][T10611] ? __ia32_sys_read+0x80/0x80 [ 451.856074][T10611] ? lockdep_hardirqs_on+0x94/0x140 [ 451.861272][T10611] do_syscall_64+0x4c/0xa0 [ 451.865684][T10611] ? clear_bhb_loop+0x60/0xb0 [ 451.870358][T10611] ? clear_bhb_loop+0x60/0xb0 [ 451.875030][T10611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 451.880920][T10611] RIP: 0033:0x7f213159e159 [ 451.885324][T10611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.904918][T10611] RSP: 002b:00007f21324ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 451.913324][T10611] RAX: ffffffffffffffda RBX: 00007f2131825fa0 RCX: 00007f213159e159 [ 451.921286][T10611] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000003 [ 451.929248][T10611] RBP: 00007f2131635024 R08: 0000000000000000 R09: 0000000000000000 [ 451.937207][T10611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.945166][T10611] R13: 00007f2131826038 R14: 00007f2131825fa0 R15: 00007ffee3e99ff8 [ 451.953135][T10611] [ 451.956146][T10611] [ 451.958453][T10611] Allocated by task 10156: [ 451.962852][T10611] kasan_set_track+0x4b/0x70 [ 451.967441][T10611] __kasan_kmalloc+0x8e/0xa0 [ 451.972024][T10611] gadgetfs_fill_super+0x30d/0x610 [ 451.977135][T10611] get_tree_single+0xb5/0x160 [ 451.981802][T10611] vfs_get_tree+0x88/0x270 [ 451.986207][T10611] do_new_mount+0x247/0xa40 [ 451.990699][T10611] __se_sys_mount+0x2e3/0x3d0 [ 451.995367][T10611] do_syscall_64+0x4c/0xa0 [ 451.999781][T10611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.005667][T10611] [ 452.007977][T10611] Freed by task 10611: [ 452.012024][T10611] kasan_set_track+0x4b/0x70 [ 452.016612][T10611] kasan_save_free_info+0x27/0x40 [ 452.021622][T10611] ____kasan_slab_free+0x126/0x1f0 [ 452.026728][T10611] slab_free_freelist_hook+0x133/0x1b0 [ 452.032176][T10611] __kmem_cache_free+0xb6/0x200 [ 452.037016][T10611] gadgetfs_bind+0x6d2/0x820 [ 452.041603][T10611] gadget_bind_driver+0x2af/0x760 [ 452.046622][T10611] really_probe+0x24a/0xb40 [ 452.051117][T10611] __driver_probe_device+0x1f5/0x390 [ 452.056390][T10611] driver_probe_device+0x4f/0x420 [ 452.061404][T10611] __driver_attach+0x43d/0x6c0 [ 452.066158][T10611] bus_for_each_dev+0x182/0x1f0 [ 452.070996][T10611] bus_add_driver+0x324/0x5d0 [ 452.075658][T10611] driver_register+0x32d/0x430 [ 452.080411][T10611] usb_gadget_register_driver_owner+0xf5/0x260 [ 452.086561][T10611] dev_config+0xe45/0x1260 [ 452.090973][T10611] vfs_write+0x2dc/0x9a0 [ 452.095210][T10611] ksys_write+0x14d/0x260 [ 452.099532][T10611] do_syscall_64+0x4c/0xa0 [ 452.103945][T10611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.109835][T10611] [ 452.112145][T10611] Last potentially related work creation: [ 452.117844][T10611] kasan_save_stack+0x3a/0x60 [ 452.122514][T10611] __kasan_record_aux_stack+0xb2/0xc0 [ 452.127873][T10611] kvfree_call_rcu+0x103/0x890 [ 452.132633][T10611] neigh_periodic_work+0x3f2/0xd70 [ 452.137736][T10611] process_one_work+0x8ab/0x1160 [ 452.142664][T10611] worker_thread+0xaf5/0x12a0 [ 452.147328][T10611] kthread+0x29d/0x330 [ 452.151384][T10611] ret_from_fork+0x1f/0x30 [ 452.155794][T10611] [ 452.158104][T10611] The buggy address belongs to the object at ffff88805480b000 [ 452.158104][T10611] which belongs to the cache kmalloc-1k of size 1024 [ 452.172146][T10611] The buggy address is located 192 bytes inside of [ 452.172146][T10611] 1024-byte region [ffff88805480b000, ffff88805480b400) [ 452.185494][T10611] [ 452.187804][T10611] The buggy address belongs to the physical page: [ 452.194210][T10611] page:ffffea0001520200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805480a800 pfn:0x54808 [ 452.205652][T10611] head:ffffea0001520200 order:3 compound_mapcount:0 compound_pincount:0 [ 452.213962][T10611] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 452.221934][T10611] raw: 00fff00000010200 ffffea0001fdee08 ffffea0001522808 ffff888017441dc0 [ 452.230505][T10611] raw: ffff88805480a800 000000000010000f 00000001ffffffff 0000000000000000 [ 452.239069][T10611] page dumped because: kasan: bad access detected [ 452.245471][T10611] page_owner tracks the page as allocated [ 452.251168][T10611] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3627, tgid 3627 (klogd), ts 71994454897, free_ts 19639166773 [ 452.271905][T10611] post_alloc_hook+0x173/0x1a0 [ 452.276665][T10611] get_page_from_freelist+0x206b/0x2180 [ 452.282206][T10611] __alloc_pages+0x1ec/0x4f0 [ 452.286790][T10611] alloc_slab_page+0x5d/0x180 [ 452.291457][T10611] new_slab+0x87/0x2d0 [ 452.295517][T10611] ___slab_alloc+0xbc5/0x1240 [ 452.300182][T10611] __kmem_cache_alloc_node+0x126/0x270 [ 452.305628][T10611] kmalloc_trace+0x26/0xe0 [ 452.310047][T10611] syslog_print+0x100/0x630 [ 452.314557][T10611] do_syslog+0x817/0x900 [ 452.318796][T10611] __x64_sys_syslog+0x78/0x90 [ 452.323465][T10611] do_syscall_64+0x4c/0xa0 [ 452.327886][T10611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.333774][T10611] page last free stack trace: [ 452.338428][T10611] free_unref_page_prepare+0x8e5/0x9e0 [ 452.343884][T10611] free_unref_page+0x2e/0x3f0 [ 452.348553][T10611] free_contig_range+0x9d/0x150 [ 452.353395][T10611] destroy_args+0xef/0xa0e [ 452.357803][T10611] debug_vm_pgtable+0x33c/0x38e [ 452.362645][T10611] do_one_initcall+0x257/0x800 [ 452.367403][T10611] do_initcall_level+0x13d/0x1ed [ 452.372335][T10611] do_initcalls+0x4b/0x8a [ 452.376658][T10611] kernel_init_freeable+0x401/0x5ab [ 452.381850][T10611] kernel_init+0x19/0x1b0 [ 452.386169][T10611] ret_from_fork+0x1f/0x30 [ 452.390579][T10611] [ 452.392886][T10611] Memory state around the buggy address: [ 452.398500][T10611] ffff88805480af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 452.406548][T10611] ffff88805480b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 452.414594][T10611] >ffff88805480b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 452.422638][T10611] ^ [ 452.428771][T10611] ffff88805480b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 452.436821][T10611] ffff88805480b180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 452.444863][T10611] ================================================================== [ 452.464327][T10477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.485601][T10477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.621616][T10477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.710271][T10611] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 452.717510][T10611] CPU: 0 PID: 10611 Comm: syz.4.1754 Not tainted syzkaller #0 [ 452.724976][T10611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 452.735037][T10611] Call Trace: [ 452.738318][T10611] [ 452.741248][T10611] dump_stack_lvl+0x188/0x24e [ 452.745948][T10611] ? memcpy+0x3c/0x60 [ 452.749936][T10611] ? show_regs_print_info+0x12/0x12 [ 452.755157][T10611] ? load_image+0x410/0x410 [ 452.759685][T10611] panic+0x2d3/0x710 [ 452.763592][T10611] ? bpf_jit_dump+0xd0/0xd0 [ 452.768109][T10611] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 452.774099][T10611] ? _raw_spin_unlock+0x40/0x40 [ 452.778959][T10611] ? print_memory_metadata+0x314/0x400 [ 452.784431][T10611] check_panic_on_warn+0x80/0xa0 [ 452.789377][T10611] ? gadgetfs_bind+0xcf/0x820 [ 452.794071][T10611] end_report+0x66/0x110 [ 452.798330][T10611] kasan_report+0x118/0x140 [ 452.802848][T10611] ? gadgetfs_bind+0xcf/0x820 [ 452.807543][T10611] gadgetfs_bind+0xcf/0x820 [ 452.812063][T10611] ? kernfs_put+0x442/0x480 [ 452.816577][T10611] ? is_valid_config+0x1a0/0x1a0 [ 452.821617][T10611] gadget_bind_driver+0x2af/0x760 [ 452.826665][T10611] ? gadget_match_driver+0x130/0x130 [ 452.831959][T10611] really_probe+0x24a/0xb40 [ 452.836476][T10611] ? pm_runtime_barrier+0x147/0x1c0 [ 452.841691][T10611] __driver_probe_device+0x1f5/0x390 [ 452.846989][T10611] driver_probe_device+0x4f/0x420 [ 452.852065][T10611] __driver_attach+0x43d/0x6c0 [ 452.856853][T10611] ? driver_attach+0x40/0x40 [ 452.861459][T10611] bus_for_each_dev+0x182/0x1f0 [ 452.866319][T10611] ? kobject_add+0x230/0x230 [ 452.870918][T10611] ? bus_remove_file+0xd0/0xd0 [ 452.875700][T10611] ? do_raw_spin_unlock+0x11d/0x230 [ 452.880913][T10611] bus_add_driver+0x324/0x5d0 [ 452.885612][T10611] driver_register+0x32d/0x430 [ 452.890385][T10611] usb_gadget_register_driver_owner+0xf5/0x260 [ 452.896559][T10611] dev_config+0xe45/0x1260 [ 452.900992][T10611] ? rcu_read_lock_any_held+0xb0/0x130 [ 452.906464][T10611] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 452.911761][T10611] ? end_current_label_crit_section+0x14b/0x170 [ 452.918021][T10611] ? ep0_read+0x1880/0x1880 [ 452.922538][T10611] ? common_file_perm+0x171/0x1c0 [ 452.927580][T10611] ? ep0_read+0x1880/0x1880 [ 452.932098][T10611] vfs_write+0x2dc/0x9a0 [ 452.936357][T10611] ? file_end_write+0x250/0x250 [ 452.941225][T10611] ? __fget_files+0x28/0x460 [ 452.945832][T10611] ? __fget_files+0x3fc/0x460 [ 452.950531][T10611] ? __fdget_pos+0x2ae/0x360 [ 452.955142][T10611] ? ksys_write+0x70/0x260 [ 452.959573][T10611] ksys_write+0x14d/0x260 [ 452.963924][T10611] ? __ia32_sys_read+0x80/0x80 [ 452.968712][T10611] ? lockdep_hardirqs_on+0x94/0x140 [ 452.973934][T10611] do_syscall_64+0x4c/0xa0 [ 452.978367][T10611] ? clear_bhb_loop+0x60/0xb0 [ 452.983064][T10611] ? clear_bhb_loop+0x60/0xb0 [ 452.987762][T10611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 452.993673][T10611] RIP: 0033:0x7f213159e159 [ 452.998090][T10611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.017706][T10611] RSP: 002b:00007f21324ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 453.026135][T10611] RAX: ffffffffffffffda RBX: 00007f2131825fa0 RCX: 00007f213159e159 [ 453.034118][T10611] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000003 [ 453.042098][T10611] RBP: 00007f2131635024 R08: 0000000000000000 R09: 0000000000000000 [ 453.050078][T10611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 453.058059][T10611] R13: 00007f2131826038 R14: 00007f2131825fa0 R15: 00007ffee3e99ff8 [ 453.066053][T10611] [ 453.069339][T10611] Kernel Offset: disabled [ 453.073649][T10611] Rebooting in 86400 seconds..