last executing test programs: 1m6.500927029s ago: executing program 2 (id=83): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x3, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1m6.47347255s ago: executing program 2 (id=84): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000005c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x7, 0x5, 0x8, 0x4c74, 0xffff7fff, 0x7, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0xffffffff, 0x7, 0x5, 0x80003e, 0x18e, 0x6, 0x6, 0x0, 0x8, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x7, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2009, 0xfffffffc, 0x573a, 0x0, 0x0, 0x5, 0x2f, 0x8, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x7, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x200009, 0x3, 0x3, 0xaa88, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x6, 0x40a, 0x3ff, 0x5, 0xfffffffd, 0x100, 0x4, 0x7, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x3, 0x8, 0x86, 0x1000515, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6cff, 0x6, 0x20000038, 0x200, 0x1fd, 0x80, 0x7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xcc, 0x2, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ef, 0x2006, 0x80a2cd, 0x4, 0x25], [0xc, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0xa620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x8, 0x4, 0x5, 0xca, 0x1, 0xfffff000, 0x10000, 0xf, 0x7e, 0x9, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0xe1c4, 0x0, 0x0, 0x5, 0x7ff, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000e00)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m6.436934921s ago: executing program 2 (id=85): socket$kcm(0x10, 0x2, 0x4) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="00012cbd7000ffdbdf25010000004c0002803c0001800800010004000000080001000200000008000100060000000800"], 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x8044) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="0c00990008000000300000001400040073797a6b616c6c6572420000000000000800050004"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 1m6.158368475s ago: executing program 2 (id=93): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c9f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$eJzs3V1v00oawPHHpV2irNRdLSuEqgJD2ZWKVIKTQFDEldeZpIbEjmwHtVeooimqSGFFWWnbG7Y37K50zofgXJ4Pcb4ROh+BI4+dvuYF6Oup/r+ojGOPPY/TaB6miccCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSk6fmdJTWcWwuD1t7TbO8jK+TegWJEuyJW8iO5nNxIV934697m68k/czKbPpuVXFLkZPuP1//85NrkRH//EQF/k5++80ibW9uvV3q97ruTCuQCunl1+LaG9r0o8FpOQysvClS1UrEfLNYjVfeaOlqOYt1SbqidOAjVvHtPFavVstKF5aDjN2pOU/dXPr5fsu2KelpoayeMAv/B00LkLnrNpuc3TJ1kc1LncfJGfObFKtZOS6m19V63PO4EkkrFr6lUGlepZJdKxWKpVKw8qj56bNuTR1bYh8iRGif3psXv0wn23sDxTGT5X5riiS8dWRI18OFKTUIJpDVke6af///+QI9sd3/+72f5G3ubZ8Tk/1vps1vD8v+QWM7usSlbsi2vZUV60pOuvDv3iM720RAtvngSSSCetMQxa1S2RklVKlIRW17IotSnkl9iXTxpipZIliWSWLR5R7kSihZHYgkkFCXz4so9UVKUqlSlLEq0FGRZAumILw2piWOOsibr5nUvi7KGxbhbqTj0NPL9911XSiPOlvyP4zvJ7hs4li/9/A8AAAAAAC4ty/z1fcr83DTP615T2+cdFgAAAAAAOEHmk//ZpDDfzropFuN/AAAAAAAuG8tcY2eJSF5up0trYpnLpfgjAAAAAAAAl4T5/P9WUpg5UG6LtTtdCuN/AAAAAAAuif+NnWM/al+1fvlVwnDK2mkv/c3aMHPzOhtX0v2uHD5iXJ+xprODmKKSFpOTrp61cmml3UkwP2fF2rg4rL0AnN0A/vMtAVyblB/kTlrnzmparmZb/pS2kq97TV1wg+aTojjO9ESsl+J/vVn/t5jT/7/fmrZyst7rFl6+7a2aWHaSo+xsZBMoHplHcUQs7818C+aai4FnPGUuxMjazVuytt7r2u2lq9mRnY2JdGHiYIsfpke0+VHm0lpz2Yy3+f6WtM1c0maxMOzssyiKxzzzj3I3rXN3/m5aDIiiNC6K0v4oBr8Wx4+iPC6K8jGjAIDzsjYmC1lyJO9+Ry93KLsn3d5XZHf5xuz+UebTOvMzpmOdnBnQo9vjenT7mNnt5yP3QBqWY5N2fzyUVT8lO3wa2m7ULFnJS3jl/cY/5frm1vb99Y2VV91X3TelUrliP7TtRyWZMqeRFeQeAMAA+++xYw3M/6PuwvPlS5K7H2aj6p3Do+os4/1l9ysFBXkpb6Unq7JgrjYw3zgY+P+O/L6vISyMGbXmTZpM7/CyMGJU9wdzlUP/uKWRdQ/GUD6LXwUAAGdmbkweHp3/07H7wphx98FcPnp0nN93tzYAAHA6dPjZysf/tcLQa78oVqtFJ17UKgzcZyr0ag2tPD/Wobvo+A2t2mEQB27QTBaeezUdqajTbgdhrOpBqNpB5C2Z6QNVduv3SLccP/bcqN3UTqSVG/ix48aq5kWuanf+0fSiRR2anaO2dr265zqxF/gqCjqhqwtKRVrvq+jVtB97dS9Z9FU79FpOmFPPg2anpVVNR27oteMgPWC/Lc+vB2HLHLZw3i82AAAXxObW9uuVXq/77hQXBjacO/NTBQAAmTFZGgAAAAAAAAAAAAAAAAAAAAAAXABncf0fC5d8oT8V9EWJh4UTWBjbdXw49c4JwKn6LQAA//8FIlBo") name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000002380)={0x2020}, 0x2020) 1m6.07138109s ago: executing program 2 (id=94): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x10000, &(0x7f0000000040)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRES16, @ANYRESDEC], 0x2, 0x18b, &(0x7f00000003c0)="$eJzskruO00AUhr+xvTe0G0CiSrNbrLgUEK8XEB1bLj1UVJFjQoQDJI4EiVIYIZSCAlHS0KE8CC8ABeIBUqeIqJHRjM84BuUNmK+Yf85ljuec8dNskO0Av1fTmDMMPg2+K0UAHKrSt/RK/Sj6Q/RDKXyTvAfifyvaFNUccRma2XjyrJ2myfAI+GV8lSu7/8ZjaUr9XE1jvfl8sC7QAZ3Ovs3xS/8AKIqiAB41A7himiiqOroRbVwDWqP+y1Y2ntzs9dvdpJs8j/zTu+HtMLwTtZ700iQsV1W7hm1B640v+9TR8S3gndgXaPwVV+urSRy1x+Pq7LadYUOxCXvW6oG0BdN4B/te8JCr7AKvclXzHptbB5iWzlH4YpwEZdIZVW+7JnArfpF2ZiiUPTYn0DX2JHGrKhgtasbpvRx5qZlkHouei85FF6KH//wyQa7X92Jdz2Gb1+3RaHiih1TulN1FlS+6lFN7IP3VT956+MDFr97G2ZqBORwOh8PhcDgcDsd/wp8AAAD//++ZbEc=") sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/24) 1m5.629567212s ago: executing program 2 (id=95): r0 = userfaultfd(0x801) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r3 = socket(0xa, 0x5, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @local}], 0x10) sendto$inet6(r3, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1m5.605974483s ago: executing program 32 (id=95): r0 = userfaultfd(0x801) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x22}}], 0x10) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) r3 = socket(0xa, 0x5, 0x0) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @remote}], 0x10) sendto$inet6(r4, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @local}], 0x10) sendto$inet6(r3, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 55.16204933s ago: executing program 1 (id=150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 54.139756871s ago: executing program 1 (id=158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d00)=[{&(0x7f00000013c0)={0x14, 0x2d, 0x1, 0x70bd2d, 0x25dfdbff, "", [@typed={0x4, 0xcb}]}, 0x14}], 0x1}, 0x4000000) 53.263691065s ago: executing program 1 (id=160): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x24, r4, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) 51.518154704s ago: executing program 1 (id=166): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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") chdir(&(0x7f0000000240)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0xfffffffd, 0x10c0348, 0xc0be, 0x2, 0xf296, 0x2, 0x0, 0x0, 0x10, 0x3}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/icmp_ratelimit\x00', 0x101042, 0x15) 50.645651977s ago: executing program 1 (id=170): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x7fffffff, 0x19401804, 0x2, 0xfffe, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20842, 0x110) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000020, 0x11, r3, 0xa64c000) write$FUSE_NOTIFY_RESEND(r1, &(0x7f00000000c0)={0x14}, 0x14) 49.39346272s ago: executing program 1 (id=177): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r2, 0x0, 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r4, 0x0, 0x6, 0xc) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) 49.036912828s ago: executing program 33 (id=177): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r2, 0x0, 0x6, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r1, 0x0, r4, 0x0, 0x6, 0xc) vmsplice(r2, &(0x7f0000000200)=[{&(0x7f0000001740)='\x00', 0x1}], 0x1, 0x6) 11.31285966s ago: executing program 4 (id=420): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 10.408181245s ago: executing program 5 (id=426): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000000c00)="$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") chdir(&(0x7f0000000240)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000100), 0x1, 0x774, &(0x7f0000000680)="$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") ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x34, r0, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x34}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000000)={[{@block_validity}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@noinit_itable}, {@prjquota}]}, 0x1, 0x496, &(0x7f00000006c0)="$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") mount$binder(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000280), 0x1a00010, &(0x7f0000000300)={[{}, {@stats}, {@stats}], [{@audit}, {@appraise_type}, {@subj_role={'subj_role', 0x3d, 'prjquota'}}, {@euid_lt}, {@subj_role={'subj_role', 0x3d, '\x00'}}, {@obj_role={'obj_role', 0x3d, '^-}{'}}]}) 10.408025475s ago: executing program 4 (id=427): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x4000000000009}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket(0x10, 0x2, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 7.951391909s ago: executing program 6 (id=429): socket$tipc(0x1e, 0x2, 0x0) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x80, &(0x7f00000018c0)=ANY=[], 0x7d, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x84200, 0x2) write$binfmt_script(r0, 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r1, 0xffffffffffffffff, 0xee01) 7.690046943s ago: executing program 4 (id=432): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c757365725f78617474722c6e6f61636c2c63616368655f73747261746567793d64697361626c65642c6e6f757365725f78617474722c6e6f61636c2c00d4a87b439fa421753f060fe37a330d2dfca47c4e52e78d71fc65b972e2bb306bb4a29b1fe3019842462c5fee84a2e6eb90d57b8725e3a2eff0b0b471dac5c01bee53cd8d"], 0xfe, 0x17d, &(0x7f0000000340)="$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") 3.949107561s ago: executing program 5 (id=434): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3.899607473s ago: executing program 6 (id=437): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x5}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="13", 0x1}], 0x1}, 0x48043) write$9p(r1, &(0x7f0000000540)="af72", 0x2) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=' ', 0x1}], 0x1}}], 0x1, 0x4040000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0xfffffff7, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 3.889246684s ago: executing program 4 (id=438): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x11, 0xa, 0x0) sendto$x25(r3, 0x0, 0x0, 0x4004804, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0xf00, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 3.18119811s ago: executing program 6 (id=440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000638477fbac141416ac141416441818034d2f87e5890c6aab845013f2325f1a39018303178da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 3.093052414s ago: executing program 3 (id=443): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3) ioctl(0xffffffffffffffff, 0x8b18, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x38}}, 0x0) 2.806361488s ago: executing program 5 (id=444): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c9944, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file7\x00', 0x1c4) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file7/file0\x00', 0x100000, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0xc8000, 0x120) unshare(0x22020600) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888880, 0x0) syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='binder\x00', 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './mnt\x00'}) 2.749103302s ago: executing program 4 (id=445): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='highspeed', 0x9) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f0000000140)={0xa, 0xa, 0x4, @remote}, 0x1c, 0x0}, 0x922bac8556bdad8e) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000240)="c9", 0x1, 0x4044880, 0x0, 0x0) 2.712416673s ago: executing program 5 (id=447): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4000) 2.605569559s ago: executing program 5 (id=448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.604238229s ago: executing program 3 (id=449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000060000000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010000cf000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.746162652s ago: executing program 6 (id=450): syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8b5cebce7b9b012f0117c0cefe8360fcbe079ce149e8", 0x1b}], 0x2) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x2404c054) 1.477328426s ago: executing program 0 (id=451): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x8000, 0x3, 0xbaa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8684, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xec4b, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 1.420836539s ago: executing program 3 (id=452): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x240, 0x7}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6a) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r0, 0x0, 0xa0028000}, 0x38) 1.281602896s ago: executing program 0 (id=453): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000180)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x83) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r3, &(0x7f00000001c0)=""/57, 0x39) 1.281202336s ago: executing program 0 (id=454): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x80}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x600, 0x0) open(&(0x7f0000000a40)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000810}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[], 0x138}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@delsa={0x28, 0x11, 0x1, 0x0, 0x0, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0xa, 0x6c}}, 0x28}}, 0x0) 959.714332ms ago: executing program 0 (id=455): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x400}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x38) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 522.705234ms ago: executing program 3 (id=456): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '~'}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "06"}]}, 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "cf"}]}, 0x24}}, 0x0) 222.605089ms ago: executing program 4 (id=457): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r1, 0x0, 0x8010) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) 221.182999ms ago: executing program 6 (id=458): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c", 0x15) mount$tmpfs(0x0, 0x0, 0x0, 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='m', @ANYRESOCT]) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x15, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187ea"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000780)={{0xffffffffffffffff, 0x0, 0x840, &(0x7f0000000300)={@align=0x5, {0x81, 0x8, 0x45a2, 0xca}}, 0x9e0f, 0x0, &(0x7f0000000380)=0x401}, {[0x3, 0x3, 0x9, 0x8]}, 0xb, 0x0, 0x0}) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="14678e7cfe43f1c263530400a45c3d5f640deb75013b32e70e9f2c826597b80720d420312839de825c89e02798b66e5d0dcbafbe7f8fda6786211ff24dce1793ac714f84e6db0b6fc3654bf67ac230209fdcac1d17acd91f7def2e0c8f261bc3741500b7e2affa5068", 0x69}, {&(0x7f0000002780)="21acaf08334a264ef994c92e7de95d4030", 0x11}], 0x2}, 0x200440c4) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c460104028d040000000000000003000600080000001b00001038000000a20000000804000004002000040007000700000006000000f02a000027060000040000002403f400020000001f0000000700000008000000f7ffffff01000000050000006ecfffff0700000007000000100000000000000003"], 0xb8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0400fd000000a1d6bce4000000", @ANYRES32], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r2}, 0x38) 203.71898ms ago: executing program 3 (id=459): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x4, 0x36, 0x9, 0x33fb1dc717048ae0}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_PREFSRC={0x8, 0x7, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x20004090) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/timer_list\x00', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) 135.975373ms ago: executing program 0 (id=460): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8030000"], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)=ANY=[@ANYBLOB="20000000130001000300"/20, @ANYRES32=r2, @ANYBLOB="0100000001000000"], 0x20}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000780)='veth0\x00', 0x6) bind$inet6(r1, &(0x7f0000000880)={0xa, 0x5000, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f0000000800)={0xa, 0x5000, 0x0, @remote}, 0x1c) write(r1, &(0x7f0000000900)="001122334455", 0x6) 77.630237ms ago: executing program 5 (id=461): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) fcntl$setstatus(r0, 0x4, 0x800) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040f0400010504"], 0x7) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04030b00c800aaaaaaaaaa100100"], 0xe) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040b0b00c8000000000000000000"], 0xe) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="04060300c800"], 0x6) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="04080400c80001"], 0x7) syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="040e0701081400c80010"], 0xa) nanosleep(&(0x7f0000000700)={0x0, 0x10000000}, 0x0) sendto$inet(r0, &(0x7f0000000800)='\x00', 0x1, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000900)={0x0, 0x20000000}, 0x0) 58.816687ms ago: executing program 3 (id=462): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xfe, 0x1d0, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x15, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2}, 0x50) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) 32.696559ms ago: executing program 0 (id=463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 0s ago: executing program 6 (id=464): socket(0x2, 0x80805, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}, 0x1, 0x0, 0x0, 0x93a162fb1f423eb1}, 0x0) recvmmsg(r1, &(0x7f00000058c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002160, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts. [ 28.342504][ T4317] cgroup: Unknown subsys name 'net' [ 28.644954][ T4317] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.942348][ T4317] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.622672][ T4337] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.624605][ T4337] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.626165][ T4337] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.627547][ T4337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.629159][ T4337] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.630395][ T4337] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.631736][ T4337] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.636740][ T4338] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.638152][ T4338] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.640357][ T4338] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.641733][ T4338] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.642358][ T4343] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.643931][ T4338] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.644624][ T4343] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.645850][ T4338] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.647005][ T4343] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.647953][ T4338] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.649289][ T4343] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.650383][ T4338] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.651720][ T4343] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.653848][ T4338] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.654742][ T4343] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.656033][ T4338] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.657772][ T4338] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.659754][ T4343] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.660067][ T4338] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.662935][ T4338] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.667520][ T4331] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.668825][ T4331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.676735][ T4345] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.776212][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 29.814651][ T4341] chnl_net:caif_netlink_parms(): no params data found [ 29.843181][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 29.849025][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 29.857032][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.858372][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.860074][ T4329] device bridge_slave_0 entered promiscuous mode [ 29.865487][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.866665][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.868326][ T4329] device bridge_slave_1 entered promiscuous mode [ 29.871077][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 29.895429][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.896731][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.898341][ T4330] device bridge_slave_0 entered promiscuous mode [ 29.900108][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.901313][ T4341] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.903359][ T4341] device bridge_slave_0 entered promiscuous mode [ 29.906456][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.907798][ T4341] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.909536][ T4341] device bridge_slave_1 entered promiscuous mode [ 29.919428][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.920658][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.922205][ T4330] device bridge_slave_1 entered promiscuous mode [ 29.930005][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.931646][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.933414][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.935147][ T4339] device bridge_slave_0 entered promiscuous mode [ 29.944424][ T4341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.946919][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.948467][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.949793][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.951388][ T4339] device bridge_slave_1 entered promiscuous mode [ 29.958968][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.960092][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.961515][ T4334] device bridge_slave_0 entered promiscuous mode [ 29.964336][ T4341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.971260][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.975457][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.976807][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.978366][ T4334] device bridge_slave_1 entered promiscuous mode [ 29.987429][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.989991][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.996437][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.000692][ T4329] team0: Port device team_slave_0 added [ 30.010467][ T4329] team0: Port device team_slave_1 added [ 30.012811][ T4341] team0: Port device team_slave_0 added [ 30.014680][ T4341] team0: Port device team_slave_1 added [ 30.018685][ T4339] team0: Port device team_slave_0 added [ 30.025576][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.028077][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.030291][ T4330] team0: Port device team_slave_0 added [ 30.031886][ T4339] team0: Port device team_slave_1 added [ 30.037716][ T4330] team0: Port device team_slave_1 added [ 30.046742][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.047817][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.051842][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.054709][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.055895][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.060150][ T4341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.064834][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.065980][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.070078][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.077006][ T4334] team0: Port device team_slave_0 added [ 30.078292][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.079474][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.084500][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.086941][ T4341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.088227][ T4341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.093056][ T4341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.097391][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.098521][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.102943][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.106804][ T4334] team0: Port device team_slave_1 added [ 30.108139][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.109439][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.116911][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.121076][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.122354][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.126545][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.135046][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.136184][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.140225][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.144082][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.145329][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.149688][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.203557][ T4330] device hsr_slave_0 entered promiscuous mode [ 30.243014][ T4330] device hsr_slave_1 entered promiscuous mode [ 30.333338][ T4341] device hsr_slave_0 entered promiscuous mode [ 30.372604][ T4341] device hsr_slave_1 entered promiscuous mode [ 30.412293][ T4341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.413614][ T4341] Cannot create hsr debugfs directory [ 30.453357][ T4329] device hsr_slave_0 entered promiscuous mode [ 30.492509][ T4329] device hsr_slave_1 entered promiscuous mode [ 30.542333][ T4329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.543621][ T4329] Cannot create hsr debugfs directory [ 30.613213][ T4339] device hsr_slave_0 entered promiscuous mode [ 30.662487][ T4339] device hsr_slave_1 entered promiscuous mode [ 30.712321][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.713594][ T4339] Cannot create hsr debugfs directory [ 30.753369][ T4334] device hsr_slave_0 entered promiscuous mode [ 30.792513][ T4334] device hsr_slave_1 entered promiscuous mode [ 30.832332][ T4334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.833698][ T4334] Cannot create hsr debugfs directory [ 30.949990][ T4341] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.995059][ T4341] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.033743][ T4341] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.086385][ T4341] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.136547][ T4330] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.176786][ T4330] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.213613][ T4330] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.253774][ T4330] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.310534][ T4334] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.356202][ T4334] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.397353][ T4334] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.434683][ T4334] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.493159][ T4339] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.550282][ T4339] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.599837][ T4339] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.633540][ T4339] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.692665][ T4343] Bluetooth: hci2: command 0x0409 tx timeout [ 31.692667][ T4337] Bluetooth: hci4: command 0x0409 tx timeout [ 31.692738][ T4337] Bluetooth: hci3: command 0x0409 tx timeout [ 31.693825][ T4343] Bluetooth: hci0: command 0x0409 tx timeout [ 31.694829][ T4337] Bluetooth: hci1: command 0x0409 tx timeout [ 31.709073][ T4341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.717224][ T4329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.739357][ T4329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.773481][ T4329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.818570][ T4329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.849138][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.851183][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.856938][ T4341] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.863457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.865220][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.866983][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.868139][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.872014][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.876669][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.878392][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.880092][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.881282][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.896411][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.904628][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.910430][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.916402][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.921848][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.923544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.924978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.926901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.928523][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.931418][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.939408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.941153][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.943308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.944829][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.953357][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.955222][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.957507][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.962960][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.964209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.965957][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.967624][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.968927][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.977425][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.980735][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.984486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.986376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.987861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.989424][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.990726][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.993708][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.995408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.997017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.998811][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.000584][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.002541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.004250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.005759][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.007417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.009103][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.010759][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.012077][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.014519][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.015967][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.021660][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.023302][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.032908][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.034525][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.036160][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.037779][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.039255][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.040439][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.041743][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.044336][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.047608][ T4334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.049776][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.056622][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.068887][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.070664][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.072078][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.074912][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.076477][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.077924][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.079247][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.080754][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.082910][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.084581][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.085862][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.087681][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.089484][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.094296][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.099859][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.101675][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.106739][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.108298][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.109858][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.111146][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.113143][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.114808][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.116438][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.117682][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.119170][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.127617][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.129489][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.131220][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.133693][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.135390][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.136952][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.138542][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.140394][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.145183][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.146869][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.159961][ T4341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.162139][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.165296][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.166848][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.168766][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.170515][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.172091][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.174806][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.176555][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.178195][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.179859][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.181535][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.184373][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.186058][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.187436][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.188858][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.194790][ T4339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.196913][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.200896][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.202502][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.204031][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.205481][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.206992][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.208856][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.214279][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.215882][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.217917][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.220511][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.227108][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.234716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.236425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.258763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.260525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.275795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.277369][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.279796][ T4341] device veth0_vlan entered promiscuous mode [ 32.291244][ T4341] device veth1_vlan entered promiscuous mode [ 32.313417][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.315003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.316586][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.318081][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.333739][ T4341] device veth0_macvtap entered promiscuous mode [ 32.337414][ T4341] device veth1_macvtap entered promiscuous mode [ 32.364228][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.365829][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.367317][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.368534][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.375483][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.378512][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.381192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.382626][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.383907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.385684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.396151][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.398506][ T4341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.405540][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.407197][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.412128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.414136][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.418258][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.419937][ T4341] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.421470][ T4341] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.423859][ T4341] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.425223][ T4341] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.439902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.441575][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.444123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.445819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.460750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.462555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.464423][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.466160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.467984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.469492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.473593][ T4330] device veth0_vlan entered promiscuous mode [ 32.475773][ T4339] device veth0_vlan entered promiscuous mode [ 32.479273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.480946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.483208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.484715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.505324][ T4330] device veth1_vlan entered promiscuous mode [ 32.508142][ T4339] device veth1_vlan entered promiscuous mode [ 32.509564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.511145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.516895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.518411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.519956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.521503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.526984][ T4334] device veth0_vlan entered promiscuous mode [ 32.539065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.540720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.543209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.545004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.546618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.548534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.550016][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.552448][ T4334] device veth1_vlan entered promiscuous mode [ 32.565528][ T4329] device veth0_vlan entered promiscuous mode [ 32.568920][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.570185][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.571840][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.575127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.576570][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.578194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.579742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.581302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.586737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.588239][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.591265][ T4329] device veth1_vlan entered promiscuous mode [ 32.596808][ T4334] device veth0_macvtap entered promiscuous mode [ 32.599145][ T4339] device veth0_macvtap entered promiscuous mode [ 32.601419][ T4339] device veth1_macvtap entered promiscuous mode [ 32.608793][ T4334] device veth1_macvtap entered promiscuous mode [ 32.620206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.621731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.623479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.626312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.627821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.629387][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.630909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.632810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.634428][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.636358][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.639217][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.641988][ T4330] device veth0_macvtap entered promiscuous mode [ 32.643481][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.644863][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.651218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.653525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.655169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.656745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.660282][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.662070][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.667489][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.670436][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.672791][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.674402][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.676148][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.680769][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.684918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.686604][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.688294][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.689860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.692781][ T4330] device veth1_macvtap entered promiscuous mode [ 32.695926][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.697719][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.699364][ T4334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.701090][ T4334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.703703][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.705407][ T4339] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.706954][ T4339] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.708486][ T4339] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.710198][ T4339] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.715646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.717502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.719163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.726124][ T4334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.727536][ T4334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.728933][ T4334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.730337][ T4334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.739040][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.740908][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.743281][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.745011][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.746605][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.748281][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.750417][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.754920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.756661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.758183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.759696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.766822][ T4329] device veth0_macvtap entered promiscuous mode [ 32.781199][ T4329] device veth1_macvtap entered promiscuous mode [ 32.824417][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.825927][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.827510][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.829297][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.830859][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.846112][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.847582][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.849626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.858688][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.860587][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.862750][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.864692][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.866326][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.868043][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.870396][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.877839][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.879727][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.881364][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.884590][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.886250][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.887977][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.889659][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.891449][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.896969][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.898625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.900230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.901739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.904091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.197985][ T4330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.200724][ T4330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.203210][ T4330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.205110][ T4330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.229493][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.231260][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.233742][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.236082][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.237821][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.239682][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.241582][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.244093][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.246851][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.250869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.254884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.261798][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.263764][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.268250][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.270613][ T4329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.272721][ T4329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.274521][ T4329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.276207][ T4329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.317719][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.319277][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.325727][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.340952][ T4417] loop4: detected capacity change from 0 to 1024 [ 33.377519][ T4417] hfsplus: request for non-existent node 33554434 in B*Tree [ 33.377749][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.380513][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.380778][ T4417] hfsplus: request for non-existent node 33554434 in B*Tree [ 33.382032][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.401212][ T4417] hfsplus: request for non-existent node 33554434 in B*Tree [ 33.407148][ T4417] hfsplus: request for non-existent node 33554434 in B*Tree [ 33.417901][ T4417] hfsplus: request for non-existent node 33554434 in B*Tree [ 33.419138][ T4417] hfsplus: request for non-existent node 33554434 in B*Tree [ 33.434203][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.435844][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.437422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.440888][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.442950][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.445812][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.471737][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.474305][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.475897][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.565659][ T4427] loop3: detected capacity change from 0 to 136 [ 33.568218][ T4426] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 33.580740][ T4427] Attempt to read inode for relocated directory [ 33.772580][ T4337] Bluetooth: hci1: command 0x041b tx timeout [ 33.782844][ T4337] Bluetooth: hci0: command 0x041b tx timeout [ 33.782857][ T4345] Bluetooth: hci3: command 0x041b tx timeout [ 33.784175][ T4343] Bluetooth: hci2: command 0x041b tx timeout [ 33.785009][ T4345] Bluetooth: hci4: command 0x041b tx timeout [ 34.137048][ T4448] Set syz1 is full, maxelem 4 reached [ 34.701822][ T4460] FAULT_INJECTION: forcing a failure. [ 34.701822][ T4460] name failslab, interval 1, probability 0, space 0, times 1 [ 34.717943][ T4460] CPU: 1 PID: 4460 Comm: syz.3.18 Not tainted syzkaller #0 [ 34.719297][ T4460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.721374][ T4460] Call trace: [ 34.721992][ T4460] dump_backtrace+0x1c4/0x1f0 [ 34.722833][ T4460] show_stack+0x2c/0x3c [ 34.723582][ T4460] __dump_stack+0x30/0x40 [ 34.724352][ T4460] dump_stack_lvl+0xf4/0x15c [ 34.725185][ T4460] dump_stack+0x1c/0x5c [ 34.725940][ T4460] should_fail_ex+0x3cc/0x524 [ 34.726936][ T4460] __should_failslab+0xc0/0x11c [ 34.727934][ T4460] should_failslab+0x10/0x28 [ 34.728856][ T4460] __kmem_cache_alloc_node+0x7c/0x318 [ 34.729940][ T4460] kmalloc_trace+0x48/0x94 [ 34.730777][ T4460] sysfs_init_fs_context+0xac/0x374 [ 34.731690][ T4460] alloc_fs_context+0x530/0x778 [ 34.732668][ T4460] fs_context_for_mount+0x34/0x44 [ 34.733640][ T4460] do_new_mount+0xfc/0x804 [ 34.734487][ T4460] path_mount+0x5ac/0xe6c [ 34.735390][ T4460] __arm64_sys_mount+0x4a0/0x5a0 [ 34.736433][ T4460] invoke_syscall+0x98/0x290 [ 34.737308][ T4460] el0_svc_common+0x13c/0x258 [ 34.738245][ T4460] do_el0_svc+0x5c/0x134 [ 34.739107][ T4460] el0_svc+0x58/0x128 [ 34.739914][ T4460] el0t_64_sync_handler+0x84/0xf0 [ 34.740854][ T4460] el0t_64_sync+0x18c/0x190 [ 34.796228][ T4464] loop0: detected capacity change from 0 to 64 [ 34.833944][ T4345] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 34.835560][ T4345] Bluetooth: Wrong link type (-22) [ 34.837631][ T4345] Bluetooth: hci0: hardware error 0x1f [ 34.843118][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 34.852953][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 34.865480][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 35.166812][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 35.182028][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 35.199513][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 35.218760][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 35.297121][ T4477] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 35.396133][ T4480] loop1: detected capacity change from 0 to 16 [ 35.532017][ T4480] erofs: (device loop1): mounted with root inode @ nid 36. [ 35.905596][ T4337] Bluetooth: hci4: command 0x040f tx timeout [ 35.909797][ T4343] Bluetooth: hci1: command 0x040f tx timeout [ 35.911121][ T4342] Bluetooth: hci3: command 0x040f tx timeout [ 35.914278][ T4337] Bluetooth: hci2: command 0x040f tx timeout [ 37.112059][ T4511] netlink: 'syz.0.35': attribute type 1 has an invalid length. [ 37.115490][ T4511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.35'. [ 37.117268][ T4511] bond0: Unable to set up delay as MII monitoring is disabled [ 37.132556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 37.132699][ T4511] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 37.242628][ T4345] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 37.646470][ T4526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 37.705770][ T4530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.41'. [ 37.711567][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.317873][ T4345] Bluetooth: hci2: command 0x0419 tx timeout [ 38.317898][ T4337] Bluetooth: hci1: command 0x0419 tx timeout [ 38.318969][ T4345] Bluetooth: hci3: command 0x0419 tx timeout [ 38.320125][ T4343] Bluetooth: hci4: command 0x0419 tx timeout [ 38.338663][ T4536] fuse: Bad value for 'fd' [ 38.427541][ T4542] netlink: 4 bytes leftover after parsing attributes in process `syz.1.45'. [ 39.680588][ T4563] loop3: detected capacity change from 0 to 256 [ 39.700069][ T4563] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.783401][ T4571] loop0: detected capacity change from 0 to 512 [ 39.790336][ T4571] EXT2-fs (loop0): warning: mounting ext3 filesystem as ext2 [ 39.958534][ T4578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.57'. [ 39.961166][ T4581] loop0: detected capacity change from 0 to 32768 [ 42.124370][ T4627] binder: 4625:4627 tried to acquire reference to desc 0, got 1 instead [ 42.223667][ T4379] binder: undelivered TRANSACTION_COMPLETE [ 42.512449][ T4379] binder: undelivered transaction 5, process died. [ 43.605228][ T4654] binder: 4653:4654 tried to acquire reference to desc 0, got 1 instead [ 43.607961][ T4654] binder: 4653:4654 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 43.610597][ T4654] binder: 4654 RLIMIT_NICE not set [ 43.612396][ T4654] binder: undelivered transaction 10, fd fixups failed [ 43.614381][ T4654] binder: transaction release 10 bad handle 1, ret = -22 [ 43.616239][ T4654] binder: 4653:4654 async transaction 10 fd fixups failed 29201/-12, line 4684 [ 43.618545][ T24] binder: undelivered TRANSACTION_COMPLETE [ 43.627583][ T4656] netlink: 'syz.4.81': attribute type 10 has an invalid length. [ 43.630601][ T4656] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.632454][ T4656] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.645909][ T4656] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.647245][ T4656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.649150][ T4656] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.650442][ T4656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.654241][ T4656] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 43.668989][ T4656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.81'. [ 43.670754][ T4656] device bridge_slave_1 left promiscuous mode [ 43.672056][ T4656] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.714549][ T4656] device bridge_slave_0 left promiscuous mode [ 43.717012][ T4656] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.764876][ T4665] binder: 4664:4665 tried to acquire reference to desc 0, got 1 instead [ 43.796042][ T4667] netlink: 'syz.2.85': attribute type 11 has an invalid length. [ 43.802773][ T7] binder: undelivered TRANSACTION_COMPLETE [ 43.862520][ T7] binder: undelivered transaction 17, process died. [ 43.864402][ T4656] bond0: (slave bridge0): Releasing backup interface [ 43.946699][ T4676] ======================================================= [ 43.946699][ T4676] WARNING: The mand mount option has been deprecated and [ 43.946699][ T4676] and is ignored by this kernel. Remove the mand [ 43.946699][ T4676] option from the mount to silence this warning. [ 43.946699][ T4676] ======================================================= [ 44.083465][ T4687] loop2: detected capacity change from 0 to 164 [ 44.109587][ T4681] sch_tbf: burst 1520 is lower than device lo mtu (65550) ! [ 44.143839][ T4341] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 44.148045][ T4341] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 44.150981][ T4341] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 44.159747][ T4341] ISOFS: unable to read i-node block [ 44.166574][ T4341] ISOFS: unable to read i-node block [ 44.670719][ T4342] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 44.675964][ T4342] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 44.677600][ T4342] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 44.679299][ T4342] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 44.680927][ T4342] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 44.684881][ T4342] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 45.298739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 45.324605][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.437253][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.456253][ T4713] binder: 4712:4713 tried to acquire reference to desc 0, got 1 instead [ 45.458679][ T4713] binder_alloc: 4712: pid 4712 spamming oneway? 2 buffers allocated for a total size of 5120 [ 45.461641][ T24] binder: release 4712:4713 transaction 24 out, still active [ 45.463742][ T24] binder: undelivered TRANSACTION_COMPLETE [ 45.472126][ T24] binder: undelivered transaction 23, process died. [ 45.574508][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.609751][ T4692] chnl_net:caif_netlink_parms(): no params data found [ 46.536633][ T4727] netlink: 'syz.1.104': attribute type 11 has an invalid length. [ 46.732500][ T4342] Bluetooth: hci4: command 0x0409 tx timeout [ 46.755422][ T4729] sched: RT throttling activated [ 46.869945][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.887862][ T4737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.103'. [ 46.904968][ T4692] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.184640][ T4692] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.192552][ T4692] device bridge_slave_0 entered promiscuous mode [ 47.238162][ T4692] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.239710][ T4692] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.241701][ T4692] device bridge_slave_1 entered promiscuous mode [ 47.250676][ T4692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.254360][ T4692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.262148][ T4692] team0: Port device team_slave_0 added [ 47.265083][ T4692] team0: Port device team_slave_1 added [ 47.271447][ T4692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.273069][ T4692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.278083][ T4692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.280996][ T4692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.283435][ T4692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.289082][ T4692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.363844][ T4692] device hsr_slave_0 entered promiscuous mode [ 47.422874][ T4692] device hsr_slave_1 entered promiscuous mode [ 47.563678][ T4692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.565558][ T4692] Cannot create hsr debugfs directory [ 48.435384][ T4692] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 48.834042][ T4342] Bluetooth: hci4: command 0x041b tx timeout [ 48.862580][ T4692] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 49.012741][ T4692] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 49.055601][ T4692] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 49.172655][ T4473] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 49.519698][ T4473] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 49.521480][ T4473] usb 1-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 49.523819][ T4473] usb 1-1: Product: syz [ 49.535699][ T4473] usb 1-1: config 0 descriptor?? [ 49.541669][ T4473] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 49.544995][ T4473] ftdi_sio ttyUSB0: unknown device type: 0xc698 [ 49.771744][ T4692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.798568][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.800254][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.810540][ T4692] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.818662][ T4473] usb 1-1: USB disconnect, device number 2 [ 49.820638][ T4473] ftdi_sio 1-1:0.0: device disconnected [ 49.875679][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.877735][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.879323][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.880648][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.886317][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.902097][ T4831] mmap: syz.3.124 (4831) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.918162][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.920315][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.922140][ T4447] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.923484][ T4447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.011759][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 50.017616][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 50.120141][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 50.300079][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 50.307911][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 50.310027][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 50.311632][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 50.463595][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.466903][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.515608][ T4859] device syzkaller0 entered promiscuous mode [ 50.522076][ T4692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.526512][ T4692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 50.529190][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.530822][ T1715] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.966450][ T4343] Bluetooth: hci4: command 0x040f tx timeout [ 51.304701][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 51.306451][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 51.310082][ T4692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.086218][ T4895] loop3: detected capacity change from 0 to 40427 [ 52.167158][ T11] device hsr_slave_0 left promiscuous mode [ 52.436164][ T4895] F2FS-fs (loop3): invalid crc value [ 52.465704][ T11] device hsr_slave_1 left promiscuous mode [ 52.468158][ T4895] F2FS-fs (loop3): Found nat_bits in checkpoint [ 52.498564][ T4895] F2FS-fs (loop3): Start checkpoint disabled! [ 52.519433][ T4895] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 52.532599][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.534176][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.536418][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.539004][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.542301][ T11] device bridge_slave_1 left promiscuous mode [ 52.544872][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.575762][ T11] device bridge_slave_0 left promiscuous mode [ 52.577083][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.692596][ T11] device veth1_macvtap left promiscuous mode [ 52.694172][ T11] device veth0_macvtap left promiscuous mode [ 52.695417][ T11] device veth1_vlan left promiscuous mode [ 52.696600][ T11] device veth0_vlan left promiscuous mode [ 52.972461][ T4342] Bluetooth: hci4: command 0x0419 tx timeout [ 53.262272][ T4378] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 53.444175][ T4378] usb 1-1: config 0 has no interfaces? [ 53.445158][ T4378] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 53.446650][ T4378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.452055][ T4378] usb 1-1: config 0 descriptor?? [ 53.672263][ T4734] usb 1-1: USB disconnect, device number 3 [ 54.418562][ T4959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.420287][ T4959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.134516][ T11] team0 (unregistering): Port device team_slave_1 removed [ 55.518395][ T4969] binder: 4968:4969 tried to acquire reference to desc 0, got 1 instead [ 55.522056][ T4376] binder_debug: 2 callbacks suppressed [ 55.522062][ T4376] binder: release 4968:4969 transaction 29 out, still active [ 55.524368][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 55.535186][ T4376] binder: send failed reply for transaction 29, target dead [ 55.574533][ T11] team0 (unregistering): Port device team_slave_0 removed [ 55.743121][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.339125][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.874284][ T11] bond0 (unregistering): Released all slaves [ 58.263229][ T4995] Injecting memory failure for pfn 0x11fbe2 at process virtual address 0x20001000 [ 58.288400][ T4995] Memory failure: 0x11fbe2: recovery action for clean unevictable LRU page: Recovered [ 58.290304][ T4995] Injecting memory failure for pfn 0x12cd45 at process virtual address 0x20002000 [ 58.291808][ T4995] Memory failure: 0x12cd45: recovery action for clean unevictable LRU page: Recovered [ 58.300314][ T4995] Injecting memory failure for pfn 0x103a20 at process virtual address 0x20003000 [ 58.301964][ T4995] Memory failure: 0x103a20: recovery action for clean unevictable LRU page: Recovered [ 58.403776][ T5002] binder: tried to use weak ref as strong ref [ 58.633904][ T5002] binder: 4999:5002 Acquire 1 refcount change on invalid ref 0 ret -22 [ 58.634693][ T5004] binder: 4999:5004 got transaction to invalid handle, 1 [ 58.640694][ T5004] binder: 5004:4999 cannot find target node [ 58.641902][ T5004] binder: 4999:5004 transaction async to 0:0 failed 39/29201/-22, size 72-24 line 3062 [ 58.649287][ T5000] binder: 4999:5000 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 58.651256][ T5000] binder: 4999:5000 IncRefs 0 refcount change on invalid ref 1 ret -22 [ 58.657240][ T5000] binder: 4999:5000 unknown command 0 [ 58.658184][ T5000] binder: 4999:5000 ioctl c0306201 20000980 returned -22 [ 58.662145][ T4734] binder: undelivered TRANSACTION_ERROR: 29201 [ 58.679947][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.705635][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.710995][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.727342][ T4692] device veth0_vlan entered promiscuous mode [ 58.734888][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.736821][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.746789][ T4692] device veth1_vlan entered promiscuous mode [ 58.752859][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.754612][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.756753][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.775984][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.777736][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.781174][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.785348][ T4692] device veth0_macvtap entered promiscuous mode [ 58.791018][ T4692] device veth1_macvtap entered promiscuous mode [ 58.823592][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.825469][ T5013] loop1: detected capacity change from 0 to 2048 [ 58.827754][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.834952][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.836705][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.840193][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.846589][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.849330][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.856578][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.863507][ T4692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.867563][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.869460][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.871028][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.875257][ T1582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.880763][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.886114][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.889060][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.897405][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.901492][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.906720][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.930428][ T4692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.935758][ T4692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.943504][ T4692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.946538][ T4692] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.948262][ T4692] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.949726][ T4692] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.951183][ T4692] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.978305][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.983124][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.991547][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.996265][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.996621][ T5013] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 59.000271][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.081594][ T4481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.088467][ T4481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.093317][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.511817][ T5013] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.166: corrupted inode contents [ 59.515187][ T5013] EXT4-fs error (device loop1): ext4_try_add_inline_entry:1372: inode #12: comm syz.1.166: mark_inode_dirty error [ 59.518386][ T5013] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.166: corrupted inode contents [ 59.520835][ T5013] EXT4-fs error (device loop1): ext4_mkdir:3099: inode #12: comm syz.1.166: mark_inode_dirty error [ 59.557350][ T5043] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.166: corrupted inode contents [ 59.561736][ T5043] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz.1.166: corrupted inode contents [ 59.565276][ T5043] EXT4-fs error (device loop1): ext4_try_add_inline_entry:1372: inode #12: comm syz.1.166: mark_inode_dirty error [ 59.830417][ T4330] EXT4-fs error (device loop1): ext4_read_inline_dir:1628: inode #12: block 5: comm syz-executor: path /34/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=80, inode=0, rec_len=0, size=128 fake=0 [ 59.845777][ T4330] EXT4-fs error (device loop1): ext4_do_update_inode:5279: inode #12: comm syz-executor: corrupted inode contents [ 59.859140][ T4330] EXT4-fs error (device loop1): ext4_delete_inline_entry:1836: inode #12: comm syz-executor: mark_inode_dirty error [ 60.250405][ C1] vcan0: j1939_tp_rxtimer: 0x0000000077b366b6: rx timeout, send abort [ 60.729397][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 60.752362][ C1] vcan0: j1939_tp_rxtimer: 0x00000000611229f7: rx timeout, send abort [ 60.753818][ C1] vcan0: j1939_tp_rxtimer: 0x0000000077b366b6: abort rx timeout. Force session deactivation [ 61.230008][ T5086] tipc: Started in network mode [ 61.231254][ T5086] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 61.251700][ T5086] tipc: Enabled bearer , priority 10 [ 61.253701][ C1] vcan0: j1939_tp_rxtimer: 0x00000000611229f7: abort rx timeout. Force session deactivation [ 61.606242][ T4343] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.616906][ T5086] tipc: Enabled bearer , priority 10 [ 61.624338][ T4343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.626387][ T4343] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.628185][ T4343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.630022][ T4343] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.631540][ T4343] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.638331][ T5086] tipc: Bearer : already 2 bearers with priority 10 [ 61.639601][ T5086] tipc: Bearer : trying with adjusted priority [ 61.647415][ T5088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'. [ 61.664331][ T5086] gre0: MTU too low for tipc bearer [ 61.674567][ T5086] tipc: Enabling of bearer rejected, failed to enable media [ 61.765932][ T5103] loop3: detected capacity change from 0 to 512 [ 61.786505][ T5103] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.182: inode has both inline data and extents flags [ 61.809395][ T5103] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.182: couldn't read orphan inode 15 (err -117) [ 61.813625][ T5103] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 62.141026][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 62.160170][ T5119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 62.177234][ T5119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 62.181819][ T5119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 62.325678][ T5090] chnl_net:caif_netlink_parms(): no params data found [ 63.298331][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.305479][ T5090] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.313330][ T5090] device bridge_slave_0 entered promiscuous mode [ 63.326186][ T5146] Zero length message leads to an empty skb [ 63.327348][ T5145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'. [ 63.524626][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.525986][ T5090] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.527911][ T5090] device bridge_slave_1 entered promiscuous mode [ 63.529761][ T4473] tipc: Node number set to 4269801491 [ 63.549226][ T5090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.558833][ T5090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.576314][ T5090] team0: Port device team_slave_0 added [ 63.580366][ T5090] team0: Port device team_slave_1 added [ 63.588091][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.611816][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.618400][ T5090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.622833][ T5090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.624063][ T5090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.695991][ T4343] Bluetooth: hci1: command 0x0409 tx timeout [ 63.702781][ T5090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.743622][ T5090] device hsr_slave_0 entered promiscuous mode [ 64.455096][ T5090] device hsr_slave_1 entered promiscuous mode [ 64.577806][ T2067] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.578948][ T2067] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.621588][ T5160] sctp: failed to load transform for md5: -4 [ 64.626242][ T5164] sctp: failed to load transform for md5: -4 [ 64.632977][ T5090] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.634270][ T5090] Cannot create hsr debugfs directory [ 64.655825][ T5169] sctp: failed to load transform for md5: -4 [ 64.768700][ T5179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.196'. [ 64.988597][ T5189] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.990202][ T5189] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.006363][ T5189] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.007731][ T5189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.009441][ T5189] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.010989][ T5189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.019582][ T5189] team0: Port device bridge0 added [ 65.352347][ T5190] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.354255][ T5190] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.360851][ T5194] tipc: Failed to remove unknown binding: 66,0,0/0:2811599310/2811599312 [ 65.371433][ T5194] tipc: Failed to remove unknown binding: 66,0,0/0:2811599310/2811599311 [ 65.376389][ T5194] tipc: Failed to remove unknown binding: 66,0,0/0:2811599310/2811599312 [ 65.379406][ T5194] tipc: Failed to remove unknown binding: 66,0,0/0:2811599310/2811599311 [ 65.397977][ T5090] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 65.435837][ T5090] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 65.463876][ T5090] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 65.489481][ T5090] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 65.772937][ T4342] Bluetooth: hci1: command 0x041b tx timeout [ 65.950499][ T5090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.977130][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.979167][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.988571][ T5090] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.993906][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.997572][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.999436][ T4642] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.000829][ T4642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.028589][ T5090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.030686][ T5090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.073158][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.078096][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.081949][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.088011][ T4642] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.089332][ T4642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.098988][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.106091][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.110152][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.115717][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.120813][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.266772][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.315341][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.411482][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.424131][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.426016][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.427723][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.429222][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.447879][ T5233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.212'. [ 67.766380][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.768165][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.772041][ T5090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.852414][ T4342] Bluetooth: hci1: command 0x040f tx timeout [ 67.927736][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.929569][ T4642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.933340][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.934925][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.936696][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.938496][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.948448][ T5090] device veth0_vlan entered promiscuous mode [ 67.956107][ T5090] device veth1_vlan entered promiscuous mode [ 67.981230][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.983039][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.984562][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.990318][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.053768][ T5090] device veth0_macvtap entered promiscuous mode [ 68.056316][ T5090] device veth1_macvtap entered promiscuous mode [ 68.066724][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.069830][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.072016][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.085423][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.087173][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.088943][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.101021][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.105548][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.107258][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.109802][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.114054][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.115682][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.117467][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.119065][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.120698][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.127762][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.129458][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.131209][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.134442][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.136387][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.138207][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.139702][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.141336][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.144274][ T5090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.145958][ T5090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.148620][ T5090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.150067][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.151969][ T4810] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.166785][ T5090] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.168388][ T5090] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.169882][ T5090] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.171468][ T5090] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.196347][ T4810] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.200045][ T4810] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.201952][ T286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.210397][ T286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.212178][ T286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.214766][ T4725] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.279234][ T5265] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 68.362367][ T4376] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 68.464287][ T5287] binder: 5285:5287 tried to acquire reference to desc 0, got 1 instead [ 68.466864][ T5287] binder: 5285:5287 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 68.470318][ T5287] binder: 5287 RLIMIT_NICE not set [ 68.471671][ T5287] binder: 5287 RLIMIT_NICE not set [ 68.475766][ T5287] binder: 5287 RLIMIT_NICE not set [ 68.477291][ T5287] binder_alloc: 5285: binder_alloc_buf, no vma [ 68.482832][ T5287] binder: cannot allocate buffer: vma cleared, target dead or dying [ 68.482869][ T5287] binder: 5285:5287 transaction reply to 5285:5287 failed 45/29189/-3, size 0-0 line 3247 [ 68.487231][ T5287] binder: send failed reply for transaction 44 to 5285:5287 [ 68.490968][ T4473] binder: undelivered TRANSACTION_COMPLETE [ 68.492171][ T4473] binder: undelivered TRANSACTION_ERROR: 29189 [ 68.509051][ T4473] binder: undelivered TRANSACTION_ERROR: 29190 [ 68.535326][ T5296] loop6: detected capacity change from 0 to 256 [ 68.554074][ T4376] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 68.556151][ T4376] usb 1-1: config 0 has no interfaces? [ 68.557166][ T4376] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 68.558848][ T4376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.562106][ T4376] usb 1-1: config 0 descriptor?? [ 68.573954][ T5296] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 68.603269][ T5296] syz.6.223: attempt to access beyond end of device [ 68.603269][ T5296] loop6: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 68.614766][ T5296] syz.6.223: attempt to access beyond end of device [ 68.614766][ T5296] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 68.618322][ T5296] syz.6.223: attempt to access beyond end of device [ 68.618322][ T5296] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 68.621130][ T5296] syz.6.223: attempt to access beyond end of device [ 68.621130][ T5296] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 68.624380][ T5296] syz.6.223: attempt to access beyond end of device [ 68.624380][ T5296] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 68.627014][ T5296] syz.6.223: attempt to access beyond end of device [ 68.627014][ T5296] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 68.629640][ T5296] syz.6.223: attempt to access beyond end of device [ 68.629640][ T5296] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 68.643775][ T5296] syz.6.223: attempt to access beyond end of device [ 68.643775][ T5296] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 68.651984][ T5296] syz.6.223: attempt to access beyond end of device [ 68.651984][ T5296] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 68.659026][ T5296] syz.6.223: attempt to access beyond end of device [ 68.659026][ T5296] loop6: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 68.805500][ T4734] usb 1-1: USB disconnect, device number 4 [ 69.619212][ T282] cfg80211: failed to load regulatory.db [ 69.942630][ T4343] Bluetooth: hci1: command 0x0419 tx timeout [ 70.111548][ T5322] svc: failed to register lockdv1 RPC service (errno 111). [ 70.126178][ T5322] lockd_up: makesock failed, error=-111 [ 70.160282][ T5336] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 70.452662][ T5357] netlink: 32 bytes leftover after parsing attributes in process `syz.4.234'. [ 71.163527][ T5374] device vlan2 entered promiscuous mode [ 71.173575][ T5374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.238'. [ 71.177027][ T5374] device hsr_slave_0 left promiscuous mode [ 71.192190][ T5376] binder: 5375:5376 tried to acquire reference to desc 0, got 1 instead [ 71.262920][ T5376] binder: 5375:5376 ioctl c0306201 200003c0 returned -14 [ 71.267377][ T24] binder: release 5375:5376 transaction 50 out, still active [ 71.276475][ T24] binder: send failed reply for transaction 50, target dead [ 72.795933][ T5398] tipc: Started in network mode [ 72.799950][ T5398] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 72.801383][ T5398] tipc: Enabled bearer , priority 0 [ 72.813183][ T5400] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 73.201697][ T5417] loop3: detected capacity change from 0 to 64 [ 74.359964][ T4473] tipc: Node number set to 43690 [ 74.589138][ T5429] 9pnet: p9_errstr2errno: server reported unknown error ÈVmI®LÓâ—… [ 75.423004][ T5450] tipc: Started in network mode [ 75.424082][ T5450] tipc: Node identity aa3a, cluster identity 4711 [ 75.438461][ T5450] tipc: Node number set to 43578 [ 75.542766][ T5459] device syzkaller0 entered promiscuous mode [ 76.702390][ T4381] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 76.824597][ T5496] Bluetooth: MGMT ver 1.22 [ 76.910621][ T4381] usb 1-1: device descriptor read/64, error -71 [ 77.533157][ T4381] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 77.824382][ T4381] usb 1-1: device descriptor read/64, error -71 [ 77.852980][ T5528] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 77.854835][ T5528] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 77.856490][ T5528] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 77.858385][ T5528] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 77.859965][ T5528] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 77.868540][ T5528] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 77.870097][ T5528] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 77.871604][ T5528] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 77.873406][ T5528] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 77.875124][ T5528] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 77.950075][ T4381] usb usb1-port1: attempt power cycle [ 78.280961][ T5539] loop6: detected capacity change from 0 to 131072 [ 78.284590][ T5539] F2FS-fs (loop6): Test dummy encryption mode enabled [ 78.286166][ T5539] F2FS-fs (loop6): invalid crc value [ 78.296243][ T5539] F2FS-fs (loop6): Found nat_bits in checkpoint [ 78.307551][ T5539] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 78.774798][ T4343] Bluetooth: hci2: link tx timeout [ 78.775886][ T4343] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 79.774314][ T5586] Cannot find set identified by id 0 to match [ 80.343981][ T5607] loop3: detected capacity change from 0 to 16 [ 80.359460][ T5607] erofs: (device loop3): mounted with root inode @ nid 36. [ 80.434747][ T5611] loop5: detected capacity change from 0 to 4096 [ 80.445290][ T5611] ntfs3: loop5: Different NTFS' sector size (1024) and media sector size (512) [ 80.466558][ T5611] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 80.473462][ T5596] loop6: detected capacity change from 0 to 32768 [ 80.621415][ T5626] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 80.822428][ T4343] Bluetooth: hci2: command 0x0406 tx timeout [ 81.338814][ T5648] capability: warning: `syz.3.296' uses deprecated v2 capabilities in a way that may be insecure [ 81.522682][ T5650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.297'. [ 81.643166][ T5654] loop5: detected capacity change from 0 to 256 [ 81.696370][ T5654] FAT-fs (loop5): Directory bread(block 64) failed [ 81.711608][ T5654] FAT-fs (loop5): Directory bread(block 65) failed [ 81.713499][ T5654] FAT-fs (loop5): Directory bread(block 66) failed [ 81.714633][ T5654] FAT-fs (loop5): Directory bread(block 67) failed [ 81.715941][ T5654] FAT-fs (loop5): Directory bread(block 68) failed [ 81.717140][ T5654] FAT-fs (loop5): Directory bread(block 69) failed [ 81.718373][ T5654] FAT-fs (loop5): Directory bread(block 70) failed [ 81.719572][ T5654] FAT-fs (loop5): Directory bread(block 71) failed [ 81.720787][ T5654] FAT-fs (loop5): Directory bread(block 72) failed [ 81.757126][ T5654] FAT-fs (loop5): Directory bread(block 73) failed [ 82.837225][ T5679] loop3: detected capacity change from 0 to 256 [ 83.679909][ T5715] loop6: detected capacity change from 0 to 512 [ 83.699525][ T5715] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 84.198692][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.371845][ T5733] netlink: 20 bytes leftover after parsing attributes in process `syz.0.325'. [ 84.384070][ T5733] device geneve2 entered promiscuous mode [ 84.645102][ T5733] IPv6: ADDRCONF(NETDEV_CHANGE): geneve2: link becomes ready [ 84.669743][ T5090] EXT4-fs (loop6): unmounting filesystem. [ 85.236401][ T5745] device syzkaller0 entered promiscuous mode [ 85.382000][ T5751] loop3: detected capacity change from 0 to 32768 [ 87.298638][ T5766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.335'. [ 87.623769][ T5771] loop5: detected capacity change from 0 to 256 [ 87.645668][ T5771] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x0b1b2bd0) [ 87.647611][ T5771] exFAT-fs (loop5): invalid boot region [ 87.648565][ T5771] exFAT-fs (loop5): failed to recognize exfat type [ 88.153191][ T5787] loop3: detected capacity change from 0 to 256 [ 88.911665][ C1] vxcan0: j1939_tp_rxtimer: 0x0000000082140aff: rx timeout, send abort [ 88.972811][ T5801] netlink: 4 bytes leftover after parsing attributes in process `syz.6.345'. [ 89.004295][ T5803] loop5: detected capacity change from 0 to 8 [ 89.017506][ T5803] squashfs image failed sanity check [ 89.361769][ T5813] device syzkaller0 entered promiscuous mode [ 91.498403][ T5841] netlink: 20 bytes leftover after parsing attributes in process `syz.4.361'. [ 91.618921][ T5848] binder: 5847:5848 ioctl c0306201 20000080 returned -14 [ 91.630874][ T5848] binder: 5847:5848 tried to acquire reference to desc 0, got 1 instead [ 91.632348][ T5848] binder: 5847:5848 ioctl c0306201 200003c0 returned -14 [ 91.648066][ T5848] binder_alloc: 5847: binder_alloc_buf failed to map page at 20ffd000 in userspace [ 91.649854][ T5848] binder: cannot allocate buffer: memory allocation failed [ 91.649882][ T5848] binder: 5847:5848 transaction call to 5847:0 failed 55/29201/-12, size 0-0 line 3247 [ 91.663599][ T4376] binder: undelivered TRANSACTION_ERROR: 29201 [ 91.678824][ T5856] loop5: detected capacity change from 0 to 1024 [ 92.160791][ T4725] hfsplus: b-tree write err: -5, ino 25 [ 92.162653][ T4725] hfsplus: b-tree write err: -5, ino 4 [ 92.164275][ T4725] hfsplus: b-tree write err: -5, ino 2 [ 92.166541][ T4725] hfsplus: b-tree write err: -5, ino 26 [ 92.167655][ T4725] hfsplus: b-tree write err: -5, ino 27 [ 92.178286][ T5855] loop3: detected capacity change from 0 to 40427 [ 92.187663][ T5855] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 92.188803][ T5855] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 92.195694][ T5860] net_ratelimit: 8911 callbacks suppressed [ 92.195702][ T5860] IPVS: fo: FWM 3 0x00000003 - no destination available [ 92.200240][ T5855] F2FS-fs (loop3): invalid crc value [ 92.207675][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 92.223641][ T5855] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 92.248730][ T5855] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 92.250080][ T5855] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 92.332039][ T5879] binder: 5878:5879 tried to acquire reference to desc 0, got 1 instead [ 92.341590][ T5879] binder: 5878:5879 got transaction with invalid data ptr [ 92.344216][ T5879] binder: 5878:5879 transaction call to 5878:0 failed 60/29201/-14, size 0-24 line 3350 [ 92.347361][ T4473] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.449325][ T5890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.451012][ T5890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.527890][ T4810] Bluetooth: hci5: Frame reassembly failed (-84) [ 92.529169][ T4810] Bluetooth: hci5: Frame reassembly failed (-84) [ 93.138342][ T5914] futex_wake_op: syz.3.387 tries to shift op by 144; fix this program [ 94.486897][ T5932] loop6: detected capacity change from 0 to 256 [ 94.496922][ T5932] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 94.693321][ T4342] Bluetooth: hci5: command 0x1003 tx timeout [ 94.695759][ T4343] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 95.460071][ T5961] sctp: [Deprecated]: syz.4.398 (pid 5961) Use of int in max_burst socket option. [ 95.460071][ T5961] Use struct sctp_assoc_value instead [ 96.812200][ T5982] loop5: detected capacity change from 0 to 256 [ 96.831923][ T5982] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 97.532225][ C0] net_ratelimit: 43 callbacks suppressed [ 97.765579][ T6007] loop3: detected capacity change from 0 to 256 [ 97.817004][ T6007] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x0b1b2bd0) [ 97.821406][ T6007] exFAT-fs (loop3): invalid boot region [ 97.872444][ T6007] exFAT-fs (loop3): failed to recognize exfat type [ 97.926157][ T4323] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 98.003378][ T6016] sctp: [Deprecated]: syz.6.416 (pid 6016) Use of int in max_burst socket option. [ 98.003378][ T6016] Use struct sctp_assoc_value instead [ 99.828846][ T6041] loop5: detected capacity change from 0 to 2048 [ 99.930901][ T6041] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 103.777780][ C1] net_ratelimit: 39 callbacks suppressed [ 106.241755][ T4692] EXT4-fs (loop5): unmounting filesystem. [ 106.346073][ T6075] fuse: Bad value for 'fd' [ 107.427558][ T6096] cifs: Unknown parameter 'timeo' [ 108.812240][ C0] net_ratelimit: 47 callbacks suppressed [ 109.443031][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.458740][ T6103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.741009][ T6103] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.742979][ T6103] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.744474][ T6103] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.745978][ T6103] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.967452][ T6117] tipc: Enabling of bearer rejected, failed to enable media [ 109.969262][ T6120] device syzkaller0 entered promiscuous mode [ 110.072035][ T6153] loop3: detected capacity change from 0 to 128 [ 110.122113][ T4337] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 110.214060][ T6163] loop3: detected capacity change from 0 to 16 [ 110.219545][ T6161] device syzkaller0 left promiscuous mode [ 110.233649][ T6163] erofs: (device loop3): mounted with root inode @ nid 36. [ 110.254467][ T6163] bio_check_eod: 27536 callbacks suppressed [ 110.254480][ T6163] syz.3.462: attempt to access beyond end of device [ 110.254480][ T6163] loop3: rw=524288, sector=88, nr_sectors = 48 limit=16 [ 110.268488][ T6163] syz.3.462: attempt to access beyond end of device [ 110.268488][ T6163] loop3: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 110.275441][ T6163] ================================================================== [ 110.276823][ T6163] BUG: KASAN: slab-out-of-bounds in z_erofs_transform_plain+0x39c/0x494 [ 110.278400][ T6163] Read of size 4096 at addr ffff0000cbd9a000 by task syz.3.462/6163 [ 110.279893][ T6163] [ 110.280322][ T6163] CPU: 0 PID: 6163 Comm: syz.3.462 Not tainted syzkaller #0 [ 110.281664][ T6163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 110.283490][ T6163] Call trace: [ 110.284080][ T6163] dump_backtrace+0x1c4/0x1f0 [ 110.284935][ T6163] show_stack+0x2c/0x3c [ 110.285702][ T6163] __dump_stack+0x30/0x40 [ 110.286527][ T6163] dump_stack_lvl+0xf4/0x15c [ 110.287386][ T6163] print_address_description+0x88/0x218 [ 110.288445][ T6163] print_report+0x50/0x68 [ 110.289257][ T6163] kasan_report+0xa8/0xfc [ 110.290021][ T6163] kasan_check_range+0x258/0x290 [ 110.290937][ T6163] memcpy+0x48/0x90 [ 110.291635][ T6163] z_erofs_transform_plain+0x39c/0x494 [ 110.292654][ T6163] z_erofs_decompress+0x9c/0xd4 [ 110.293530][ T6163] z_erofs_decompress_queue+0x103c/0x1bf4 [ 110.294563][ T6163] z_erofs_runqueue+0x1540/0x16a8 [ 110.295518][ T6163] z_erofs_read_folio+0x2dc/0x5cc [ 110.296452][ T6163] filemap_read_folio+0x134/0x384 [ 110.297366][ T6163] filemap_fault+0x990/0xe98 [ 110.298203][ T6163] __do_fault+0x11c/0x3d8 [ 110.299017][ T6163] handle_mm_fault+0x1d04/0x3018 [ 110.299953][ T6163] do_page_fault+0x310/0x99c [ 110.300810][ T6163] do_translation_fault+0x94/0xc8 [ 110.301741][ T6163] do_mem_abort+0x70/0x198 [ 110.302563][ T6163] el1_abort+0x3c/0x5c [ 110.303311][ T6163] el1h_64_sync_handler+0x50/0xac [ 110.304203][ T6163] el1h_64_sync+0x64/0x68 [ 110.305007][ T6163] strncpy_from_user+0x264/0x59c [ 110.305867][ T6163] getname_flags+0xec/0x458 [ 110.306654][ T6163] getname+0x28/0x38 [ 110.307367][ T6163] do_sys_openat2+0xdc/0x3fc [ 110.308159][ T6163] __arm64_sys_openat+0x11c/0x150 [ 110.309024][ T6163] invoke_syscall+0x98/0x290 [ 110.309838][ T6163] el0_svc_common+0x13c/0x258 [ 110.310652][ T6163] do_el0_svc+0x5c/0x134 [ 110.311387][ T6163] el0_svc+0x58/0x128 [ 110.312097][ T6163] el0t_64_sync_handler+0x84/0xf0 [ 110.312965][ T6163] el0t_64_sync+0x18c/0x190 [ 110.313764][ T6163] [ 110.314164][ T6163] Allocated by task 1: [ 110.314911][ T6163] kasan_set_track+0x4c/0x80 [ 110.315731][ T6163] kasan_save_alloc_info+0x24/0x30 [ 110.316667][ T6163] __kasan_slab_alloc+0x70/0x88 [ 110.317536][ T6163] slab_post_alloc_hook+0x74/0x430 [ 110.318453][ T6163] kmem_cache_alloc+0x234/0x310 [ 110.319290][ T6163] __kernfs_new_node+0xec/0x5fc [ 110.320160][ T6163] kernfs_new_node+0x120/0x230 [ 110.321018][ T6163] __kernfs_create_file+0x60/0x2e0 [ 110.321935][ T6163] sysfs_add_file_mode_ns+0x1e8/0x2a4 [ 110.322858][ T6163] internal_create_group+0x3e8/0xb24 [ 110.323753][ T6163] sysfs_create_groups+0x60/0x134 [ 110.324629][ T6163] driver_add_groups+0x48/0x58 [ 110.325455][ T6163] bus_add_driver+0x358/0x518 [ 110.326277][ T6163] driver_register+0x200/0x37c [ 110.327182][ T6163] __hid_register_driver+0x11c/0x174 [ 110.328146][ T6163] creative_sb0540_driver_init+0x28/0x34 [ 110.329164][ T6163] do_one_initcall+0x278/0x9f0 [ 110.330025][ T6163] do_initcall_level+0x158/0x214 [ 110.330931][ T6163] do_initcalls+0x58/0xac [ 110.331724][ T6163] do_basic_setup+0x8c/0xa0 [ 110.332497][ T6163] kernel_init_freeable+0x35c/0x4f0 [ 110.333412][ T6163] kernel_init+0x24/0x1d8 [ 110.334169][ T6163] ret_from_fork+0x10/0x20 [ 110.334954][ T6163] [ 110.335380][ T6163] The buggy address belongs to the object at ffff0000cbd9a000 [ 110.335380][ T6163] which belongs to the cache kernfs_node_cache of size 168 [ 110.337927][ T6163] The buggy address is located 0 bytes inside of [ 110.337927][ T6163] 168-byte region [ffff0000cbd9a000, ffff0000cbd9a0a8) [ 110.340175][ T6163] [ 110.340600][ T6163] The buggy address belongs to the physical page: [ 110.341700][ T6163] page:000000005a5573d0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10bd9a [ 110.343478][ T6163] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 110.344792][ T6163] raw: 05ffc00000000200 0000000000000000 dead000000000122 ffff0000c0858a80 [ 110.346230][ T6163] raw: 0000000000000000 0000000000110011 00000001ffffffff 0000000000000000 [ 110.347746][ T6163] page dumped because: kasan: bad access detected [ 110.348881][ T6163] [ 110.349280][ T6163] Memory state around the buggy address: [ 110.350259][ T6163] ffff0000cbd99f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 110.351641][ T6163] ffff0000cbd9a000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 110.353056][ T6163] >ffff0000cbd9a080: 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 00 00 [ 110.354449][ T6163] ^ [ 110.355418][ T6163] ffff0000cbd9a100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 110.356858][ T6163] ffff0000cbd9a180: 00 00 fc fc fc fc fc fc fc fc 00 00 00 00 00 00 [ 110.358261][ T6163] ================================================================== [ 110.377278][ T6163] Disabling lock debugging due to kernel taint [ 113.932287][ C1] net_ratelimit: 51 callbacks suppressed [ 116.252245][ T4343] Bluetooth: hci4: command 0x0406 tx timeout [ 119.062217][ C0] net_ratelimit: 43 callbacks suppressed