last executing test programs: 25.215944074s ago: executing program 3 (id=17): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x1, 0x22e, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) futex(&(0x7f0000000200)=0x1, 0x6, 0x0, 0x0, 0x0, 0xffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x4d, 0x5, 0x0) shutdown(0xffffffffffffffff, 0x1) getdents64(r0, 0x0, 0x22) 23.843989298s ago: executing program 3 (id=27): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) 23.743259328s ago: executing program 3 (id=29): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x10408a, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 23.611771345s ago: executing program 3 (id=31): renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 23.399805139s ago: executing program 3 (id=35): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@pcr={'pcr', 0x3d, 0x6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x4fed0) lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000000)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) getdents(r0, 0x0, 0x1517f) 20.291217351s ago: executing program 3 (id=47): set_mempolicy(0x2, &(0x7f0000000040)=0x4, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 12.803706786s ago: executing program 0 (id=71): openat(0xffffffffffffff9c, 0x0, 0x42, 0x184) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f00000000c0)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) fchdir(0xffffffffffffffff) 10.585143665s ago: executing program 0 (id=76): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) syz_ublk_setup_io_uring(0x49ef, &(0x7f00000001c0)={0x0, 0x800030a6, 0x8, 0xfffffffd, 0x2b1}, &(0x7f0000000180), &(0x7f0000000040), &(0x7f0000000380)) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) inotify_init1(0x800) r2 = timerfd_create(0x0, 0x0) close_range(r2, r2, 0x0) ppoll(&(0x7f0000000740)=[{0xffffffffffffffff, 0x1310}, {r2, 0x8190}, {0xffffffffffffffff, 0x80}], 0x0, 0x0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x9, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x3ff, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) unshare(0x8040480) mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0) r3 = inotify_init() r4 = inotify_add_watch(r3, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r3, r4) sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_int(r1, 0x0, 0xa, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) gettid() setpriority(0x2, 0x0, 0x7) 7.691665002s ago: executing program 2 (id=85): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0xf0, 0x29, 0x1, 0xfffffffe, 0x102, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0xa0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x3c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x7, 0x1000000000000192, 0x9ba3, 0xffff, 0x8251f, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0x5}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x3, 0x0, 0x60}}, 0xf0}}, 0x844) 7.678864515s ago: executing program 4 (id=86): mount$tmpfs(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000280), 0x2000001, &(0x7f0000000500)=ANY=[@ANYBLOB]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/net/veth0/queues/tx-1/xps_cpus\x00', 0x2, 0x0) io_setup(0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r0, &(0x7f0000000200)='3', 0x1) 7.483855235s ago: executing program 2 (id=87): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x39, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x62, 0x36, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x38}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000740)={0x0, "001122334b0c66778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbddddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x65, 0x36, 0x30, 0x63, 0x36, 0x30, 0x30, 0x64, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x36, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x62, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x64, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x36]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x140}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x0) 7.440027034s ago: executing program 4 (id=88): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000000400000000000000c341e2"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r1}, 0x0, &(0x7f00000001c0)='%pi6 \x00'}, 0x20) openat$ppp(0xffffffffffffff9c, 0x0, 0x80000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$eJzs3bFra1UcB/DfTdMkT5FEcBLBCzo4PV7f6pIifVDMpGRQBy22BUmCkEKhVYydXF0cXV0Ewc1/wsX/QHAV3CxYuHKTe03SpiFB06rv81l6eu755vzOyS0lQ8794KVB7zCN44tPf45GI4lKO9pxmUQrKlH6POa0vwwA4L/sMsvit2xinVwSEY3NlQUAbNDa//+/33hJAMCGvf3Ou2/udjp7b6VpI54Mvjjt5p/s858RDyJi9zg+in4cxaNoxlVE9pdJ+0mWZaNqmmvFq4PRaTdPDt7/sXj93V8bMc7vRDNa4675/H5nbyedmMmP8jqeKeZv5/nH0YwXFsy/39l7vCAf3Vq89spM/Q+jGT99GB9HPw7HRUzyUYn4bCdN38i++v2T9/Ly8nwyOu3Wx+Omsq27f3cAAAAAAAAAAAAAAAAAAAAAAPi/elicnVOP8fk9eVdx/s7WVf7LdqSl1vz5PJN8Ur7QtfOBRll8XZ7P8yhN06wYOM1X48VqVO9n1QAAAAAAAAAAAAAAAAAAAPDvcnJ23jvo94+G/0ijPA2g/Fr/qvGLaz3tmTEvx/J4fTpXpWgumSu2yjFJxNLC8kWsvPY/imMPVt2oasz2PH9bzd9+t/Jb8M3ta38wf2l72f78jUatmObsvFfeXb2DZPEe1qPsaZQ3yQ+zY2qx6qS3XcrWuP2GJ7WFl5prb0Lt2XFjtGRMJMsKe/2Xyc6d9w6e6x8Nk+urqI13dWF8u2gU8ZtjGqvfz/lfyg2J0zoAAAAAAAAAAAAAAAAAAGCjpl/6neuePK7/Ymm0ktU3WxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3JXp8//XaIyK8AqDazE8ueclAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BT4MwAA//9YnFw0") sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = dup(r3) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x21, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000640)={0x0, 0x23ad697ddad057f0}) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x80000) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.356532882s ago: executing program 2 (id=89): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) 7.21580426s ago: executing program 2 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000140)=0x881) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x50, 0x0, &(0x7f0000000500)=[@enter_looper, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}, 0x400}], 0x8, 0x0, &(0x7f0000000580)="fd4345839a797510"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000a80)='h'}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) 6.354446888s ago: executing program 2 (id=91): r0 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22091406, &(0x7f0000000440)={[{@dioread_lock}, {@quota}, {@delalloc}, {@data_journal}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@nombcache}, {@grpjquota}, {@barrier}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getgroups(0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000240), 0x0, 0x0) r5 = syz_open_procfs(0x0, 0x0) getdents(r5, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, 0x0) ioctl$PIO_UNIMAP(r6, 0x4b67, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x10, r0, 0x0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x13) r8 = syz_open_dev$sndpcmc(&(0x7f00000001c0), 0x0, 0x40001) ioctl$SNDRV_PCM_IOCTL_UNLINK(r8, 0xc0844123, 0x800000000000000) mremap(&(0x7f00004f9000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000474000/0x1000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) 5.952709561s ago: executing program 4 (id=92): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000a80)={[{@auto_da_alloc}]}, 0x0, 0x236, &(0x7f0000000b40)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000700)={@id={0x2, 0x0, @a}, 0x40, 0x0, '\x00', @a}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x41, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000814}, 0x20004000) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfff8) mprotect(&(0x7f0000fec000/0x12000)=nil, 0x12000, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x290, 0x168, 0x10, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x1, 0xb6, 0x0, 0x20}, 0x6000000, 0x228, 0x290, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xffffff00, 0xffffffff, 0xffffffff], @ipv4=@multicast1, [0xffffffff, 0xffff00, 0xffffff00], 0x4d2, 0x0, 0x1, 0x1, 0x0, 0x5}, {@ipv6=@loopback, [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], @ipv4=@local, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 0x4d6, 0x3507, 0x29, 0x1, 0x4, 0x16}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1}, [0xff000000, 0x0, 0xffffffff, 0xffffffff], 0x4d5, 0x3507, 0x0, 0x0, 0x4, 0x4}, {@ipv4=@multicast1, [0xffffffff, 0x0, 0xff, 0xff], @ipv6=@loopback, [0xff000000, 0x0, 0xff000000, 0xffffffff], 0x4d5, 0x3502, 0x21, 0x1, 0x11, 0x14}], 0x1, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@common=@eui64={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x3, '\x00', @a}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r6, &(0x7f0000000280)=""/59, 0x5e) 5.427880519s ago: executing program 1 (id=93): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000042, &(0x7f0000001b00)=ANY=[], 0x2, 0x2d3, &(0x7f0000000780)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000740)={0xeeee8000, 0x102000, 0x1}) 3.43979978s ago: executing program 32 (id=47): set_mempolicy(0x2, &(0x7f0000000040)=0x4, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) write(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 3.39174033s ago: executing program 2 (id=95): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000240), 0x0, 0x19c, &(0x7f0000000000)="$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") 3.39144681s ago: executing program 4 (id=96): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) ioctl$RNDADDENTROPY(r0, 0x4b47, 0x0) 3.363299566s ago: executing program 0 (id=97): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc)=0x1, 0xd, 0x2, 0x0, 0x0, 0x400000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x207, 0x5, 0x4}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffd, 0x39, 0x747d5e13, 0x7ff, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0x1, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x400, 0x1, 0x10002, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da7, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x240, 0x9, 0x1, 0x4199d, 0x6, 0x2, 0xfffffff6, 0xffffffff, 0x4, 0x40000006, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x2, 0xf, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x6, 0xff7ffffc, 0x8, 0x7fff, 0x72c, 0x5, 0x3, 0x8, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0xf, 0x5, 0x0, 0xa, 0x4, 0x1, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffff7fff, 0x6, 0x2000008, 0x7fd, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0xffffffff, 0x5, 0x401, 0xe, 0x3, 0x5, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7ff, 0x1, 0x3], [0x401, 0x8000e584, 0x9806, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0x8, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x2dc000, 0x8, 0x1000, 0x63dd7e7f, 0x10, 0x4, 0xffff, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x7, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x10000000, 0x3, 0x400004, 0x3, 0x4d7e, 0x3, 0x1000000b, 0x3, 0xbf23, 0x6, 0x9, 0x7, 0x0, 0x5, 0xe, 0x6, 0x100fdfd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x3fd, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x5, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x31d2, 0x3fa6, 0x5, 0x0, 0x5, 0x8000, 0x4, 0x9ac, 0x4, 0x3, 0x2, 0x0, 0x284c, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x8, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x5, 0x4, 0xc, 0xe, 0x4, 0xffffffff, 0x7, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x4007, 0xd4, 0xfffbfffd, 0x80a, 0xe, 0x101, 0x4, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, 0x0, 0x0) readv(r4, 0x0, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt(r5, 0xff, 0x1, 0xfffffffffffffffe, 0xf) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000240)={0x1, &(0x7f0000000080)=[{0x6, 0x37, 0x2, 0x9}]}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 1.953135187s ago: executing program 0 (id=98): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000d40)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 1.831518842s ago: executing program 1 (id=99): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000600), &(0x7f0000000640)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x39, 0x30, 0x38, 0x30, 0x30, 0x30, 0x36, 0x31, 0x30, 0x37, 0x30, 0x31]}, &(0x7f0000000100)={0x0, "00112233444566778899aabbccddeeff00112233445566778899aabbccddeeff0011fb2fa087e1a5a490aabbccddeeff001122334455667788d9aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x62, 0x36, 0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x38}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61, 0x30, 0x66, 0x64, 0x30, 0x63, 0x66]}, &(0x7f0000000740)={0x0, "001122334b0c66778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbddddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x35, 0x30, 0x35, 0x30, 0x30, 0x30, 0x39, 0x51, 0x64, 0x62, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x34, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x31, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r2 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x65, 0x36, 0x30, 0x63, 0x36, 0x30, 0x30, 0x64, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x36, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x32, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x62, 0xf]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x44}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x64, 0x30, 0x30, 0x64, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x36]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @desc2}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x140}, 0x48, r0) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r0) keyctl$KEYCTL_MOVE(0x1e, r2, r0, r1, 0x0) 1.831173772s ago: executing program 4 (id=100): syz_usb_connect$uac1(0x5, 0x88, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0x290e, 0xc000, 0x8, 0x23}) open(&(0x7f0000000140)='./bus\x00', 0x42b42, 0x1c0) rename(0x0, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000005, 0x401d031, 0xffffffffffffffff, 0x0) tkill(r1, 0x7) 1.762402566s ago: executing program 1 (id=101): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0xffffffff) write$ppp(r0, &(0x7f0000000500)="80fd0f010004", 0x6) 1.505328699s ago: executing program 1 (id=102): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.367974308s ago: executing program 1 (id=103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000100001000000000000000000000000cc42"], 0x84}}, 0x0) 1.303127011s ago: executing program 1 (id=104): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200700, &(0x7f0000000280)={[{@data_err_ignore}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@inode_readahead_blks}, {@nodelalloc}, {@debug}]}, 0x1, 0x499, &(0x7f00000010c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)=ANY=[]) 1.224837297s ago: executing program 0 (id=105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xc4) setsockopt$inet6_tcp_int(r3, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet6_tcp_buf(r3, 0x6, 0x21, 0x0, &(0x7f0000000180)) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$eJzslM9K80AUxc9M+rX0Q1fuBHFhwbpomqQqbkSKL1DwH+6MNpZqaksbwdaVuPUB3Lr1FboRfBF1JUKXriPJTJuptFUELeL9LW7OZO7c3LmBA4Ig/ixPj68PVy/tcw3ABFJIyPfPWpTDlfzTQnJ/KrN+276+v1yrzVQH1fT9z38/BuAur8Hrne0/nZLPTfCe3gLHgtQ7YNCl3gPHttQOGHalPlJ0NcjX9cOy6+gHVbcYCCMIZhCsIOTe99e5YCgq/TFlv9FsHduu69S/UXw0v06eY1XpT/1f3dkYyvxMcJhS58CwIfUKEt3ZiJEo95+ORfW1H74/CRIkfpuI/Mm/YZhX/Cmm+EfWq9SyjWYrU67YJafknFhWbtlYNIwlKxsakYgj/C8Z+tN/pf6/IblxFseZ7Xl1U8Te2hJxkOPy0P840nNiHXh/fGg3Yp/JcyxUaW1EOkEQxNiYBYNv+wqT0kX7sArjbpQgCIIgCIIgCIIgiC/zFgAA///dqHHL") r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x900, 0x140) read$FUSE(r4, &(0x7f0000004540)={0x2020}, 0x1a3e) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800080, 0x0) 221.550334ms ago: executing program 4 (id=106): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000080)=""/57, 0x39}, {&(0x7f0000000480)=""/52, 0x34}, {&(0x7f0000000800)=""/194, 0xc2}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000740)=""/171, 0xab}, {&(0x7f0000000200)=""/70, 0x46}, {&(0x7f0000007ec0)=""/4097, 0x1001}, {&(0x7f0000003ac0)=""/4107, 0x100b}, {&(0x7f0000002640)=""/228, 0xe4}], 0xa}, 0x6}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x4000029}, {{0x0, 0x0, 0x0}, 0xb5}], 0x4, 0x40010120, 0x0) 0s ago: executing program 0 (id=107): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x123}, [@ldst={0x3, 0x0, 0x6, 0x2, 0x1, 0xffffffffffffffad, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. [ 47.658880][ T4172] cgroup: Unknown subsys name 'net' [ 47.798321][ T4172] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 48.951734][ T4172] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 50.562489][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 50.719041][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.726728][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.734621][ T4189] device bridge_slave_0 entered promiscuous mode [ 50.756765][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.764117][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.772184][ T4189] device bridge_slave_1 entered promiscuous mode [ 50.780246][ T4198] chnl_net:caif_netlink_parms(): no params data found [ 50.816098][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 50.835503][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.848340][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 50.879137][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.893853][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 50.951949][ T4189] team0: Port device team_slave_0 added [ 50.964713][ T4189] team0: Port device team_slave_1 added [ 50.991126][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.998472][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.006300][ T4198] device bridge_slave_0 entered promiscuous mode [ 51.036413][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.043622][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.051205][ T4188] device bridge_slave_0 entered promiscuous mode [ 51.064314][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.071405][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.079682][ T4198] device bridge_slave_1 entered promiscuous mode [ 51.098229][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.105383][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.113006][ T4188] device bridge_slave_1 entered promiscuous mode [ 51.120562][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.127567][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.153554][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.183568][ T4198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.192716][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.200753][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.208558][ T4185] device bridge_slave_0 entered promiscuous mode [ 51.222488][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.229561][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.255878][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.277526][ T4198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.287335][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.294492][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.302403][ T4185] device bridge_slave_1 entered promiscuous mode [ 51.318110][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.327307][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.335250][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.342858][ T4191] device bridge_slave_0 entered promiscuous mode [ 51.355769][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.362831][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.370809][ T4191] device bridge_slave_1 entered promiscuous mode [ 51.382846][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.411539][ T4198] team0: Port device team_slave_0 added [ 51.447288][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.458559][ T4198] team0: Port device team_slave_1 added [ 51.465901][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.483917][ T4189] device hsr_slave_0 entered promiscuous mode [ 51.490563][ T4189] device hsr_slave_1 entered promiscuous mode [ 51.499759][ T4188] team0: Port device team_slave_0 added [ 51.507166][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.517747][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.532810][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.539888][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.566045][ T4198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.578438][ T4188] team0: Port device team_slave_1 added [ 51.607013][ T4198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.614110][ T4198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.640207][ T4198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.692758][ T4185] team0: Port device team_slave_0 added [ 51.701465][ T4185] team0: Port device team_slave_1 added [ 51.709149][ T4191] team0: Port device team_slave_0 added [ 51.721854][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.729443][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.755786][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.777939][ T4191] team0: Port device team_slave_1 added [ 51.785778][ T4198] device hsr_slave_0 entered promiscuous mode [ 51.792413][ T4198] device hsr_slave_1 entered promiscuous mode [ 51.799626][ T4198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.807536][ T4198] Cannot create hsr debugfs directory [ 51.813811][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.820759][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.846883][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.895246][ T4188] device hsr_slave_0 entered promiscuous mode [ 51.901996][ T4188] device hsr_slave_1 entered promiscuous mode [ 51.909264][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.917163][ T4188] Cannot create hsr debugfs directory [ 51.929475][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.937278][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.963474][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.980235][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.987257][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.013162][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.037561][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.044737][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.071075][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.116908][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.123962][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.150122][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.181851][ T4185] device hsr_slave_0 entered promiscuous mode [ 52.188899][ T4185] device hsr_slave_1 entered promiscuous mode [ 52.195716][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.203408][ T4185] Cannot create hsr debugfs directory [ 52.294916][ T4191] device hsr_slave_0 entered promiscuous mode [ 52.302060][ T4191] device hsr_slave_1 entered promiscuous mode [ 52.309496][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.317202][ T4191] Cannot create hsr debugfs directory [ 52.454003][ T1108] Bluetooth: hci3: command 0x0409 tx timeout [ 52.463070][ T1108] Bluetooth: hci0: command 0x0409 tx timeout [ 52.474797][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 52.480948][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 52.483964][ T4189] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 52.491267][ T1108] Bluetooth: hci1: command 0x0409 tx timeout [ 52.513844][ T4189] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 52.523617][ T4189] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 52.535599][ T4189] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 52.548955][ T4198] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.569705][ T4198] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.578557][ T4198] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.591656][ T4198] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.636986][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 52.646705][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 52.669327][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 52.686390][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 52.759885][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 52.768620][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.797895][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.810612][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.819870][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.838381][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.848802][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.860184][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.878762][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 52.897652][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 52.907444][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 52.916613][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 52.928535][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.937896][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.946953][ T631] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.954207][ T631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.967081][ T4198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.999314][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.031133][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.039135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.050410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.059924][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.067019][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.077154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.084970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.093105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.103841][ T4198] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.113529][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.122745][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.131557][ T631] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.138668][ T631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.156721][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.165215][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.174214][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.182770][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.191616][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.201981][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.210688][ T631] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.217790][ T631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.234202][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.244959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.259523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.268793][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.278353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.286828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.312652][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.326349][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.337517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.346359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.354993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.363217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.371895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.388990][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.398736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.411728][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.426827][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.445255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.454707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.463466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.472090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.481075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.492729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.501330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.519755][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.534668][ T4198] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.542735][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.557605][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.570119][ T1536] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.577337][ T1536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.586361][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.594260][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.601876][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.610526][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.618941][ T1536] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.626042][ T1536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.635572][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.647592][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.694186][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.704124][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.712577][ T631] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.719714][ T631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.729733][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.739726][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.749714][ T631] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.756885][ T631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.765149][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.773938][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.782484][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.791258][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.801951][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.810769][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.819866][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.828508][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.837392][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.846586][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.856317][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.864541][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.879556][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.889139][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.918970][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.936681][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.944903][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.952403][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.967758][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.977780][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.986746][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.995426][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.003930][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.020471][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.036952][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.049676][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.061213][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.077089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.090383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.118141][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.134726][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.150782][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.161025][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 54.172547][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 54.180895][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.190054][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.197956][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 54.207383][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 54.217479][ T1536] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.224569][ T1536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.232348][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 54.241387][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.250069][ T1536] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.257188][ T1536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.273029][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 54.281472][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.289777][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.306588][ T4189] device veth0_vlan entered promiscuous mode [ 54.324998][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.354736][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.362622][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 54.371662][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 54.384140][ T4198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.400052][ T4189] device veth1_vlan entered promiscuous mode [ 54.431398][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.440592][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 54.452123][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 54.461152][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 54.471280][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 54.480246][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.488173][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.495909][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.503578][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.511015][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 54.529862][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 54.541652][ T4225] Bluetooth: hci1: command 0x041b tx timeout [ 54.542239][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 54.551898][ T4225] Bluetooth: hci2: command 0x041b tx timeout [ 54.557576][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.560415][ T4225] Bluetooth: hci4: command 0x041b tx timeout [ 54.575131][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.581478][ T4225] Bluetooth: hci0: command 0x041b tx timeout [ 54.586764][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.604346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.612546][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.622050][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.633185][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.647938][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.658257][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.684711][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.693194][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.740252][ T4189] device veth0_macvtap entered promiscuous mode [ 54.761728][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.771550][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.781222][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.790059][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.799101][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.820224][ T4189] device veth1_macvtap entered promiscuous mode [ 54.840932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.852269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.867128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.878529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.890094][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.901206][ T4185] device veth0_vlan entered promiscuous mode [ 54.909359][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.918277][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.929533][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.938555][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.967185][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.975571][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.986860][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.000435][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.008785][ T4188] device veth0_vlan entered promiscuous mode [ 55.017658][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.027915][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.036709][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.044959][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.053133][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.061997][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.072093][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.080549][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.092013][ T4185] device veth1_vlan entered promiscuous mode [ 55.105628][ T4189] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.115526][ T4189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.124680][ T4189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.133813][ T4189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.146035][ T4198] device veth0_vlan entered promiscuous mode [ 55.155823][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.164917][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.172801][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 55.180743][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 55.211248][ T4188] device veth1_vlan entered promiscuous mode [ 55.226622][ T4198] device veth1_vlan entered promiscuous mode [ 55.245761][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.254985][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.262876][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.271311][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.283919][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.292736][ T4185] device veth0_macvtap entered promiscuous mode [ 55.305400][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.320334][ T4188] device veth0_macvtap entered promiscuous mode [ 55.344175][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.355400][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.364262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.372672][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.386162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.399850][ T4185] device veth1_macvtap entered promiscuous mode [ 55.436386][ T4188] device veth1_macvtap entered promiscuous mode [ 55.457014][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.465436][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.474104][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.482644][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.491326][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.500061][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.526097][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.536936][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.549476][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.562004][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.573135][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.583925][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.594502][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.605431][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.618184][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.630537][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.634163][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.638610][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.651125][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.664694][ T4198] device veth0_macvtap entered promiscuous mode [ 55.676032][ T4191] device veth0_vlan entered promiscuous mode [ 55.682604][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.690875][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.699810][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.709024][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.717744][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.727097][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.736136][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.744877][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.753502][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.761641][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.770657][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.778464][ T1536] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.790807][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.801979][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.812779][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.823963][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.837285][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.846608][ T4198] device veth1_macvtap entered promiscuous mode [ 55.859273][ T4191] device veth1_vlan entered promiscuous mode [ 55.877606][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.886518][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.898469][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.908785][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.918309][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.927228][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.959646][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.969774][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.979508][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.988792][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.016019][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.024944][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.049083][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.066793][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.077346][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.087642][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.099768][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.109860][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.120546][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.131604][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.165655][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.181885][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.192464][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.206402][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.217385][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.228540][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.238635][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.249370][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.259479][ T4198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.271076][ T4198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.283974][ T4198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.294381][ T4198] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.303066][ T4198] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.313995][ T4198] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.322693][ T4198] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.335865][ T4191] device veth0_macvtap entered promiscuous mode [ 56.376117][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.392310][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.402474][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.434628][ T4191] device veth1_macvtap entered promiscuous mode [ 56.451681][ T631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.474584][ T631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.499053][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.501895][ T4268] FAULT_INJECTION: forcing a failure. [ 56.501895][ T4268] name failslab, interval 1, probability 0, space 0, times 1 [ 56.511574][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.534296][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.546257][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.554175][ T4268] CPU: 1 PID: 4268 Comm: syz.1.6 Not tainted syzkaller #0 [ 56.556481][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.563167][ T4268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.575230][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.583645][ T4268] Call Trace: [ 56.583654][ T4268] [ 56.583661][ T4268] dump_stack_lvl+0x188/0x250 [ 56.594039][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.596739][ T4268] ? show_regs_print_info+0x20/0x20 [ 56.599652][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.604307][ T4268] ? load_image+0x410/0x410 [ 56.604329][ T4268] ? __might_sleep+0xf0/0xf0 [ 56.604345][ T4268] ? __lock_acquire+0x7b50/0x7b50 [ 56.604363][ T4268] ? lockdep_init_map_type+0x98/0x900 [ 56.604385][ T4268] should_fail+0x383/0x4b0 [ 56.604408][ T4268] should_failslab+0x5/0x20 [ 56.604423][ T4268] slab_pre_alloc_hook+0x51/0xc0 [ 56.604439][ T4268] ? security_inode_alloc+0x30/0x110 [ 56.604456][ T4268] kmem_cache_alloc+0x3d/0x280 [ 56.604476][ T4268] security_inode_alloc+0x30/0x110 [ 56.604495][ T4268] inode_init_always+0x8e5/0xc90 [ 56.604518][ T4268] new_inode_pseudo+0x8e/0x210 [ 56.604546][ T4268] new_inode+0x25/0x1d0 [ 56.604568][ T4268] shmem_get_inode+0x304/0xa40 [ 56.604598][ T4268] shmem_mknod+0x55/0x1b0 [ 56.604612][ T4268] ? shmem_create+0x12/0x30 [ 56.604629][ T4268] ? shmem_getattr+0x530/0x530 [ 56.604647][ T4268] path_openat+0x120a/0x2fb0 [ 56.604689][ T4268] ? do_filp_open+0x400/0x400 [ 56.604723][ T4268] do_filp_open+0x1df/0x400 [ 56.604747][ T4268] ? vfs_tmpfile+0x300/0x300 [ 56.604780][ T4268] ? _raw_spin_unlock+0x24/0x40 [ 56.621054][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.630116][ T4268] ? alloc_fd+0x59e/0x650 [ 56.630145][ T4268] do_sys_openat2+0x14b/0x500 [ 56.630162][ T4268] ? __lock_acquire+0x7b50/0x7b50 [ 56.630182][ T4268] ? do_sys_open+0xe0/0xe0 [ 56.630196][ T4268] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 56.630218][ T4268] ? lock_chain_count+0x20/0x20 [ 56.630241][ T4268] __x64_sys_openat+0x135/0x160 [ 56.630263][ T4268] do_syscall_64+0x4c/0xa0 [ 56.630280][ T4268] ? clear_bhb_loop+0x30/0x80 [ 56.630298][ T4268] ? clear_bhb_loop+0x30/0x80 [ 56.630318][ T4268] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 56.630336][ T4268] RIP: 0033:0x7fe57a84b159 [ 56.630354][ T4268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.630367][ T4268] RSP: 002b:00007fe578aa3028 EFLAGS: 00000246 [ 56.636942][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.639429][ T4268] ORIG_RAX: 0000000000000101 [ 56.646390][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.649788][ T4268] RAX: ffffffffffffffda RBX: 00007fe57aad2fa0 RCX: 00007fe57a84b159 [ 56.655848][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.658668][ T4268] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 56.664621][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.668848][ T4268] RBP: 00007fe57a8e206b R08: 0000000000000000 R09: 0000000000000000 [ 56.668863][ T4268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.668873][ T4268] R13: 00007fe57aad3038 R14: 00007fe57aad2fa0 R15: 00007fffe76f3e48 [ 56.668897][ T4268] [ 56.906337][ T4225] Bluetooth: hci0: command 0x040f tx timeout [ 56.912754][ T4225] Bluetooth: hci4: command 0x040f tx timeout [ 56.929369][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.934136][ T4225] Bluetooth: hci2: command 0x040f tx timeout [ 56.958541][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.961828][ T4225] Bluetooth: hci3: command 0x040f tx timeout [ 56.970353][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.975891][ T4225] Bluetooth: hci1: command 0x040f tx timeout [ 56.990897][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.006849][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.018121][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.027990][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.038539][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.050253][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.074718][ T631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.082566][ T631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.089121][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.101357][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.110459][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.124838][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.134719][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.144147][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.152849][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.196079][ T631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.210208][ T631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.236019][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.285519][ T631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.302288][ T631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.312390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.344815][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.366263][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.403110][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.459533][ T4277] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 57.514131][ T4243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.528218][ T4243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.531191][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.547555][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.565377][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.573112][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.662661][ T631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.687177][ T631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.702667][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 57.899544][ T4300] loop0: detected capacity change from 0 to 512 [ 57.951759][ T4305] device bridge_slave_1 left promiscuous mode [ 57.991255][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.055559][ T4305] device bridge_slave_0 left promiscuous mode [ 58.077357][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.400080][ T4314] loop1: detected capacity change from 0 to 512 [ 58.496860][ T4314] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.541888][ T4320] loop3: detected capacity change from 0 to 128 [ 58.803146][ T4331] ======================================================= [ 58.803146][ T4331] WARNING: The mand mount option has been deprecated and [ 58.803146][ T4331] and is ignored by this kernel. Remove the mand [ 58.803146][ T4331] option from the mount to silence this warning. [ 58.803146][ T4331] ======================================================= [ 58.866383][ T4332] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 58.945947][ T4230] Bluetooth: hci4: command 0x0419 tx timeout [ 58.953794][ T4230] Bluetooth: hci0: command 0x0419 tx timeout [ 59.028458][ T4230] Bluetooth: hci1: command 0x0419 tx timeout [ 59.049295][ T4230] Bluetooth: hci3: command 0x0419 tx timeout [ 59.071494][ T4230] Bluetooth: hci2: command 0x0419 tx timeout [ 59.170645][ T26] audit: type=1800 audit(1790543357.330:2): pid=4346 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.23" name="syzkaller0" dev="sda1" ino=2047 res=0 errno=0 [ 59.836613][ T4351] loop4: detected capacity change from 0 to 128 [ 60.206608][ T4371] loop1: detected capacity change from 0 to 1024 [ 60.323316][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 60.343323][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 60.353299][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 60.363304][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 60.373299][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 60.383301][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 60.393297][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 60.403296][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 60.413295][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 60.423292][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 62.218819][ T4380] loop3: detected capacity change from 0 to 1024 [ 62.292796][ T4380] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 62.468187][ T4393] loop1: detected capacity change from 0 to 128 [ 62.488542][ T4393] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 62.520752][ T4380] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,inode_readahead_blks=0x0000000000000001,bsdgroups,noblock_validity,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,delalloc,init_itable=0xffffff. Quota mode: none. [ 62.801468][ T4380] FAULT_INJECTION: forcing a failure. [ 62.801468][ T4380] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 62.815427][ T4380] CPU: 1 PID: 4380 Comm: syz.3.35 Not tainted syzkaller #0 [ 62.822645][ T4380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.832732][ T4380] Call Trace: [ 62.836024][ T4380] [ 62.838964][ T4380] dump_stack_lvl+0x188/0x250 [ 62.843657][ T4380] ? show_regs_print_info+0x20/0x20 [ 62.848875][ T4380] ? load_image+0x410/0x410 [ 62.853397][ T4380] ? __lock_acquire+0x7b50/0x7b50 [ 62.858441][ T4380] ? verify_lock_unused+0x140/0x140 [ 62.863660][ T4380] should_fail+0x383/0x4b0 [ 62.868103][ T4380] prepare_alloc_pages+0x1e3/0x5b0 [ 62.873240][ T4380] __alloc_pages+0x11b/0x480 [ 62.877850][ T4380] ? zone_statistics+0x170/0x170 [ 62.882806][ T4380] ? rcu_lock_release+0x5/0x20 [ 62.887586][ T4380] ? alloc_pages+0x452/0x560 [ 62.892203][ T4380] __page_cache_alloc+0xce/0x440 [ 62.897157][ T4380] ? add_to_page_cache_lru+0x4a0/0x4a0 [ 62.902637][ T4380] ? xa_load+0x276/0x2a0 [ 62.906901][ T4380] page_cache_ra_unbounded+0x257/0x8f0 [ 62.912401][ T4380] ? read_cache_pages_invalidate_pages+0x1c0/0x1c0 [ 62.918924][ T4380] ? page_cache_sync_ra+0x136/0x190 [ 62.924141][ T4380] ext4_readdir+0xbb1/0x3ac0 [ 62.928745][ T4380] ? __lock_acquire+0x7b50/0x7b50 [ 62.933806][ T4380] ? ext4_dir_llseek+0x4b0/0x4b0 [ 62.938779][ T4380] ? read_lock_is_recursive+0x10/0x10 [ 62.944169][ T4380] ? mutex_lock_io_nested+0x60/0x60 [ 62.949381][ T4380] ? end_current_label_crit_section+0x14b/0x170 [ 62.955635][ T4380] ? iterate_dir+0x10d/0x550 [ 62.960243][ T4380] ? down_read_killable+0x1ce/0x340 [ 62.965453][ T4380] ? fsnotify_perm+0x254/0x560 [ 62.970234][ T4380] iterate_dir+0x213/0x550 [ 62.974669][ T4380] ? ext4_dir_llseek+0x4b0/0x4b0 [ 62.979629][ T4380] __se_sys_getdents+0xf2/0x260 [ 62.984489][ T4380] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 62.990137][ T4380] ? __x64_sys_getdents+0x80/0x80 [ 62.995166][ T4380] ? fillonedir+0x4c0/0x4c0 [ 62.999699][ T4380] do_syscall_64+0x4c/0xa0 [ 63.004128][ T4380] ? clear_bhb_loop+0x30/0x80 [ 63.008816][ T4380] ? clear_bhb_loop+0x30/0x80 [ 63.013504][ T4380] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 63.019421][ T4380] RIP: 0033:0x7f70c14a6159 [ 63.023843][ T4380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.043455][ T4380] RSP: 002b:00007f70bf6fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 63.051884][ T4380] RAX: ffffffffffffffda RBX: 00007f70c172dfa0 RCX: 00007f70c14a6159 [ 63.059867][ T4380] RDX: 000000000001517f RSI: 0000000000000000 RDI: 0000000000000005 [ 63.067857][ T4380] RBP: 00007f70c153d06b R08: 0000000000000000 R09: 0000000000000000 [ 63.075841][ T4380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.083825][ T4380] R13: 00007f70c172e038 R14: 00007f70c172dfa0 R15: 00007ffd49e35b18 [ 63.091828][ T4380] [ 63.413010][ T4412] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.434234][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 63.570965][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 63.678527][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 63.721261][ T4417] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 63.765881][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 64.976602][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 65.038613][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 65.122718][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 66.193710][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 66.378281][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 66.433864][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 66.472851][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 66.568725][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 66.637568][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 66.692077][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 66.765685][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 66.841611][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 66.918477][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 67.000627][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 67.104624][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 67.140071][ T4456] loop0: detected capacity change from 0 to 1024 [ 67.161129][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 68.467188][ T4191] EXT4-fs error: 1 callbacks suppressed [ 68.467203][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 69.603698][ T4191] EXT4-fs: 1 callbacks suppressed [ 69.603715][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 69.752316][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 69.790412][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 69.856238][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 70.918931][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 71.038009][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 71.092080][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 71.203091][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 71.260504][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.267429][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.275974][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 71.416108][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 71.493917][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 71.572421][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 71.640180][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 71.728415][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 71.794640][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 71.915447][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 71.962571][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 72.060114][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 73.154393][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 74.565519][ T4191] EXT4-fs error: 3 callbacks suppressed [ 74.566700][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 74.622576][ T4191] EXT4-fs: 3 callbacks suppressed [ 74.622591][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 74.685762][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 74.772065][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 74.854355][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 74.954308][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 75.003357][ T4231] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.050067][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 75.140544][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 75.242800][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 75.309386][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 75.373552][ T4231] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 75.416845][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 75.434757][ T4231] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 75.505500][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 75.543313][ T4231] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 75.575508][ T4231] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 75.577098][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 75.647788][ T4231] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 75.667219][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.704948][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 75.744364][ T4510] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 75.778575][ T4510] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 75.848551][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 75.887108][ T4231] keyspan 2-1:1.0: Keyspan 2 port adapter converter detected [ 75.910236][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 75.933984][ T4231] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 84 [ 75.983016][ T4231] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 2 [ 76.021383][ T4231] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 76.068055][ T4231] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 88 [ 76.070110][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 76.150356][ T4231] keyspan 2-1:1.0: found no endpoint descriptor for endpoint 6 [ 76.173628][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 76.183959][ T4231] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 76.301094][ T4191] EXT4-fs error (device loop3): ext4_empty_dir:3168: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 76.369143][ T4533] loop4: detected capacity change from 0 to 256 [ 76.375759][ T7] cfg80211: failed to load regulatory.db [ 76.409454][ T4191] EXT4-fs (loop3): Remounting filesystem read-only [ 77.553884][ T4533] kvm: emulating exchange as write [ 77.891441][ T4544] loop4: detected capacity change from 0 to 128 [ 78.101533][ T4544] EXT4-fs (loop4): mounted filesystem without journal. Opts: auto_da_alloc,,errors=continue. Quota mode: none. [ 78.116537][ T23] usb 2-1: USB disconnect, device number 2 [ 78.150625][ T23] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 78.190677][ T4544] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.192214][ T23] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 78.215668][ T23] keyspan 2-1:1.0: device disconnected [ 78.599282][ T4544] fscrypt: Error allocating hmac(sha512): -2 [ 78.882181][ T4556] loop1: detected capacity change from 0 to 256 [ 78.976869][ T4556] FAT-fs (loop1): bogus logical sector size 0 [ 78.982984][ T4556] FAT-fs (loop1): Can't find a valid FAT filesystem [ 79.068448][ T4559] loop2: detected capacity change from 0 to 512 [ 80.722364][ T4568] input: syz1 as /devices/virtual/input/input5 [ 82.235465][ T4249] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.414075][ T4592] loop2: detected capacity change from 0 to 8 [ 82.432114][ T4249] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.465095][ T4590] loop1: detected capacity change from 0 to 512 [ 82.710128][ T4597] loop0: detected capacity change from 0 to 16 [ 83.480740][ T4597] erofs: (device loop0): mounted with root inode @ nid 36. [ 83.498492][ T4197] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 83.505804][ T4590] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a026c018, mo2=0002] [ 83.523466][ T4590] System zones: [ 83.527049][ T4590] 1-12 [ 83.540115][ T4590] [ 83.562985][ T4596] erofs: (device loop0): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 83.581001][ T26] audit: type=1800 audit(1790543893.745:3): pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.105" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 83.605439][ T4596] syz.0.105 (4596) used greatest stack depth: 20928 bytes left [ 83.648169][ T4592] SQUASHFS error: lzo decompression failed, data probably corrupt [ 83.692478][ T4590] ------------[ cut here ]------------ [ 83.699341][ T4592] SQUASHFS error: Failed to read block 0x91: -5 [ 83.709441][ T4592] SQUASHFS error: Unable to read metadata cache entry [8f] [ 83.713338][ T4590] EA inode 11 i_nlink=0 [ 83.716809][ T4590] WARNING: CPU: 1 PID: 4590 at fs/ext4/xattr.c:1006 ext4_xattr_inode_update_ref+0x4fe/0x560 [ 83.718695][ T4592] SQUASHFS error: Unable to read inode 0x11f SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 83.721426][ T4590] Modules linked in: [ 83.765813][ T4249] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.885904][ T4590] [ 83.888275][ T4590] CPU: 1 PID: 4590 Comm: syz.1.104 Not tainted syzkaller #0 [ 83.958196][ T4249] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.962476][ T4590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 83.984118][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 84.060193][ T4590] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560 [ 84.066872][ T4590] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 15 fe a1 ff 49 8b 34 24 48 c7 c7 00 9a 3d 8a 44 89 fa e8 72 ff 99 07 <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 84.174685][ T4590] RSP: 0018:ffffc900034ff400 EFLAGS: 00010246 [ 84.180811][ T4590] RAX: 9790cd0575136300 RBX: ffff88804d4a0498 RCX: 0000000000080000 [ 84.252051][ T4590] RDX: ffffc90005f99000 RSI: 0000000000062879 RDI: 000000000006287a [ 84.297906][ T4590] RBP: ffffc900034ff4f0 R08: ffffc900034fef27 R09: 1ffff9200069fde4 [ 84.328748][ T4590] R10: dffffc0000000000 R11: fffff5200069fde5 R12: ffff88804d4a02e0 [ 84.340818][ T4590] R13: dffffc0000000000 R14: ffff88804d4a02a0 R15: 0000000000000000 [ 84.356958][ T4590] FS: 00007fe578aa36c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 84.369768][ T4590] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 84.378714][ T4590] CR2: 00007f8bb5323840 CR3: 000000007866b000 CR4: 00000000003506f0 [ 84.387164][ T4590] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 84.413226][ T4590] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 84.421265][ T4590] Call Trace: [ 84.432644][ T4590] [ 84.464368][ T4590] ? ext4_xattr_block_csum+0x560/0x560 [ 84.469924][ T4590] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 84.543051][ T4590] ext4_xattr_inode_dec_ref_all+0x94c/0xf90 [ 84.566952][ T4590] ? errseq_check+0x3c/0x70 [ 84.571652][ T4590] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 84.593812][ T4590] ? __ext4_journal_ensure_credits+0x450/0x450 [ 84.600071][ T4590] ? ext4_get_inode_loc+0xf6/0x120 [ 84.605541][ T4590] ext4_xattr_delete_inode+0xada/0xca0 [ 84.611053][ T4590] ? ext4_expand_extra_isize_ea+0x18c0/0x18c0 [ 84.633681][ T4590] ext4_evict_inode+0xc0c/0x1050 [ 84.639353][ T4590] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 84.664615][ T4590] ? do_raw_spin_unlock+0x11d/0x230 [ 84.669889][ T4590] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 84.693483][ T4590] evict+0x4b6/0x8b0 [ 84.697438][ T4590] ? __ext4_std_error+0x4b0/0x4b0 [ 84.702488][ T4590] ? proc_nr_inodes+0x320/0x320 [ 84.733342][ T4590] ? do_raw_spin_unlock+0x11d/0x230 [ 84.738635][ T4590] ? _raw_spin_unlock+0x24/0x40 [ 84.753231][ T4590] ? iput+0x6ea/0x880 [ 84.757278][ T4590] ext4_orphan_cleanup+0xc96/0x14f0 [ 84.774921][ T4590] ? _raw_write_unlock+0x24/0x40 [ 84.779915][ T4590] ? ext4_orphan_del+0xc90/0xc90 [ 84.813305][ T4590] ? errseq_check_and_advance+0x62/0x120 [ 84.818995][ T4590] ext4_fill_super+0x8c65/0x93f0 [ 84.833266][ T4590] ? format_decode+0x8b1/0x1330 [ 84.838218][ T4590] ? ext4_mount+0x40/0x40 [ 84.842565][ T4590] ? set_blocksize+0x1f1/0x360 [ 84.879157][ T4590] ? sb_set_blocksize+0xa5/0xe0 [ 84.894263][ T4590] mount_bdev+0x28a/0x3c0 [ 84.898645][ T4590] ? ext4_mount+0x40/0x40 [ 84.902999][ T4590] legacy_get_tree+0xe6/0x180 [ 84.923368][ T4590] ? ext4_errno_to_code+0x160/0x160 [ 84.943286][ T4590] vfs_get_tree+0x88/0x270 [ 84.947769][ T4590] do_new_mount+0x247/0xa40 [ 84.952502][ T4590] __se_sys_mount+0x2e3/0x3d0 [ 84.963047][ T4590] ? __x64_sys_mount+0xc0/0xc0 [ 84.969818][ T4590] ? lockdep_hardirqs_on+0x94/0x140 [ 84.981439][ T4590] ? __x64_sys_mount+0x1c/0xc0 [ 84.987416][ T4590] do_syscall_64+0x4c/0xa0 [ 84.992111][ T4590] ? clear_bhb_loop+0x30/0x80 [ 85.002544][ T4590] ? clear_bhb_loop+0x30/0x80 [ 85.007508][ T4590] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.022893][ T4590] RIP: 0033:0x7fe57a84c3ca [ 85.027801][ T4590] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.053125][ T4590] RSP: 002b:00007fe578aa2e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.061762][ T4590] RAX: ffffffffffffffda RBX: 00007fe578aa2ee0 RCX: 00007fe57a84c3ca [ 85.076579][ T4590] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 00007fe578aa2ea0 [ 85.085949][ T4590] RBP: 0000200000000180 R08: 00007fe578aa2ee0 R09: 0000000000200700 [ 85.098681][ T4590] R10: 0000000000200700 R11: 0000000000000246 R12: 00002000000000c0 [ 85.107968][ T4590] R13: 00007fe578aa2ea0 R14: 0000000000000499 R15: 0000200000000280 [ 85.120790][ T4590] [ 85.125806][ T4590] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 85.133112][ T4590] CPU: 1 PID: 4590 Comm: syz.1.104 Not tainted syzkaller #0 [ 85.140402][ T4590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 85.150462][ T4590] Call Trace: [ 85.153758][ T4590] [ 85.156694][ T4590] dump_stack_lvl+0x188/0x250 [ 85.161390][ T4590] ? show_regs_print_info+0x20/0x20 [ 85.166601][ T4590] ? load_image+0x410/0x410 [ 85.171125][ T4590] panic+0x2f8/0x850 [ 85.175054][ T4590] ? bpf_jit_dump+0xd0/0xd0 [ 85.179578][ T4590] ? ext4_xattr_inode_update_ref+0x4fe/0x560 [ 85.185572][ T4590] __warn+0x248/0x2b0 [ 85.190003][ T4590] ? ext4_xattr_inode_update_ref+0x4fe/0x560 [ 85.196000][ T4590] report_bug+0x1b9/0x2e0 [ 85.200354][ T4590] handle_bug+0x3a/0x70 [ 85.204521][ T4590] exc_invalid_op+0x16/0x40 [ 85.209036][ T4590] asm_exc_invalid_op+0x16/0x20 [ 85.213915][ T4590] RIP: 0010:ext4_xattr_inode_update_ref+0x4fe/0x560 [ 85.220733][ T4590] Code: 40 4c 89 e0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 e7 e8 15 fe a1 ff 49 8b 34 24 48 c7 c7 00 9a 3d 8a 44 89 fa e8 72 ff 99 07 <0f> 0b 49 bd 00 00 00 00 00 fc ff df 4c 8b 74 24 08 4c 8b 64 24 10 [ 85.240351][ T4590] RSP: 0018:ffffc900034ff400 EFLAGS: 00010246 [ 85.246438][ T4590] RAX: 9790cd0575136300 RBX: ffff88804d4a0498 RCX: 0000000000080000 [ 85.254427][ T4590] RDX: ffffc90005f99000 RSI: 0000000000062879 RDI: 000000000006287a [ 85.262415][ T4590] RBP: ffffc900034ff4f0 R08: ffffc900034fef27 R09: 1ffff9200069fde4 [ 85.270487][ T4590] R10: dffffc0000000000 R11: fffff5200069fde5 R12: ffff88804d4a02e0 [ 85.278470][ T4590] R13: dffffc0000000000 R14: ffff88804d4a02a0 R15: 0000000000000000 [ 85.286476][ T4590] ? ext4_xattr_block_csum+0x560/0x560 [ 85.291957][ T4590] ? __ext4_journal_ensure_credits+0x2c/0x450 [ 85.298047][ T4590] ext4_xattr_inode_dec_ref_all+0x94c/0xf90 [ 85.303967][ T4590] ? errseq_check+0x3c/0x70 [ 85.308486][ T4590] ? ext4_xattr_delete_inode+0xca0/0xca0 [ 85.314141][ T4590] ? __ext4_journal_ensure_credits+0x450/0x450 [ 85.320313][ T4590] ? ext4_get_inode_loc+0xf6/0x120 [ 85.325453][ T4590] ext4_xattr_delete_inode+0xada/0xca0 [ 85.330933][ T4590] ? ext4_expand_extra_isize_ea+0x18c0/0x18c0 [ 85.337025][ T4590] ext4_evict_inode+0xc0c/0x1050 [ 85.341990][ T4590] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 85.347897][ T4590] ? do_raw_spin_unlock+0x11d/0x230 [ 85.353106][ T4590] ? ext4_inode_is_fast_symlink+0x390/0x390 [ 85.359014][ T4590] evict+0x4b6/0x8b0 [ 85.362921][ T4590] ? __ext4_std_error+0x4b0/0x4b0 [ 85.367954][ T4590] ? proc_nr_inodes+0x320/0x320 [ 85.372815][ T4590] ? do_raw_spin_unlock+0x11d/0x230 [ 85.378024][ T4590] ? _raw_spin_unlock+0x24/0x40 [ 85.382884][ T4590] ? iput+0x6ea/0x880 [ 85.386886][ T4590] ext4_orphan_cleanup+0xc96/0x14f0 [ 85.392104][ T4590] ? _raw_write_unlock+0x24/0x40 [ 85.397063][ T4590] ? ext4_orphan_del+0xc90/0xc90 [ 85.402022][ T4590] ? errseq_check_and_advance+0x62/0x120 [ 85.407666][ T4590] ext4_fill_super+0x8c65/0x93f0 [ 85.412613][ T4590] ? format_decode+0x8b1/0x1330 [ 85.417523][ T4590] ? ext4_mount+0x40/0x40 [ 85.421863][ T4590] ? set_blocksize+0x1f1/0x360 [ 85.426644][ T4590] ? sb_set_blocksize+0xa5/0xe0 [ 85.431508][ T4590] mount_bdev+0x28a/0x3c0 [ 85.435848][ T4590] ? ext4_mount+0x40/0x40 [ 85.440193][ T4590] legacy_get_tree+0xe6/0x180 [ 85.444881][ T4590] ? ext4_errno_to_code+0x160/0x160 [ 85.450097][ T4590] vfs_get_tree+0x88/0x270 [ 85.454533][ T4590] do_new_mount+0x247/0xa40 [ 85.459051][ T4590] __se_sys_mount+0x2e3/0x3d0 [ 85.463747][ T4590] ? __x64_sys_mount+0xc0/0xc0 [ 85.468525][ T4590] ? lockdep_hardirqs_on+0x94/0x140 [ 85.473731][ T4590] ? __x64_sys_mount+0x1c/0xc0 [ 85.478510][ T4590] do_syscall_64+0x4c/0xa0 [ 85.482942][ T4590] ? clear_bhb_loop+0x30/0x80 [ 85.487628][ T4590] ? clear_bhb_loop+0x30/0x80 [ 85.492318][ T4590] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.498222][ T4590] RIP: 0033:0x7fe57a84c3ca [ 85.502649][ T4590] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.522268][ T4590] RSP: 002b:00007fe578aa2e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.530705][ T4590] RAX: ffffffffffffffda RBX: 00007fe578aa2ee0 RCX: 00007fe57a84c3ca [ 85.538697][ T4590] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 00007fe578aa2ea0 [ 85.546684][ T4590] RBP: 0000200000000180 R08: 00007fe578aa2ee0 R09: 0000000000200700 [ 85.554668][ T4590] R10: 0000000000200700 R11: 0000000000000246 R12: 00002000000000c0 [ 85.562654][ T4590] R13: 00007fe578aa2ea0 R14: 0000000000000499 R15: 0000200000000280 [ 85.570652][ T4590] [ 85.573892][ T4590] Kernel Offset: disabled [ 85.578340][ T4590] Rebooting in 86400 seconds..