last executing test programs: 366.617927ms ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000008c0)={0xc0, 0x4, 0x0, 0x1}) mknodat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x200, 0xe) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x4, 0x0, &(0x7f0000000280)=0x2) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000080)={0x6b19, 0x6, 0xffff, 0x400e0a, 0x7f, "0a4c00765e000080fffffffffffffff200", 0x9, 0x7}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xff) getresuid(&(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f0000000300)) mount$9p_tcp(&(0x7f00000000c0), &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200), 0x2104800, &(0x7f0000000440)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@loose}, {@posixacl}, {@cachetag={'cachetag', 0x3d, '!@[\x8c:/'}}, {@uname={'uname', 0x3d, '!'}}, {@privport}, {@debug={'debug', 0x3d, 0x101}}, {@version_9p2000}, {@dfltuid={'dfltuid', 0x3d, r3}}], [{@context={'context', 0x3d, 'system_u'}}, {@smackfshat={'smackfshat', 0x3d, 'overlay\x00'}}, {@subj_type={'subj_type', 0x3d, 'fuse\x00'}}, {@appraise_type}, {@dont_hash}]}}) 289.133727ms ago: executing program 0 (id=6): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x4, &(0x7f0000000080)={0x2, 0x4c1e, @multicast1}, 0x10) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x8a}, {{&(0x7f0000000100)=@ieee802154, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)=""/246, 0xf6}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000280)=""/66, 0x42}], 0x3, &(0x7f0000000440)=""/178, 0xbf}, 0x1}, {{&(0x7f00000003c0)=@sco, 0x80, &(0x7f0000000440), 0x1, &(0x7f0000000540)=""/18, 0x12}, 0x6}, {{0x0, 0x0, &(0x7f0000000d80), 0x5}, 0x9ac6}], 0x400000000000045, 0x22, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000100)={0x2, 0x2, 0x2, "3ba27f3053221f9184f21574a6fc71135124c8aebf6115ed722392c6a91fc04c", 0x30313953}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000001540)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70600001fffffff8500000005000000bf09200000000000260901000000000095000000000000002c98000000000000bd9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) 253.786539ms ago: executing program 0 (id=7): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0x7, 0x0, 0x0, 0x9, 0x7, 0x3, 0x8, 0x2, 0x3, 0x3, 0x2, 0x2, 0xa}, 0xe) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) shutdown(r5, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002300)={0x4c, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@binder={0x73622a85, 0x100, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/162, 0xa2, 0x2, 0xe}, @flat=@weak_binder={0x77622a85, 0x1, 0x3}}, &(0x7f0000000480)={0x0, 0x18, 0x40}}}, @acquire], 0x1000, 0x0, &(0x7f0000001300)="c3a84ca3558993e155ec230b7bf9487756be3cec599c5fba94b5e663f4fd0e96221ba8dd5a32c68812baced434a035b751f449e2303d5050d883225c41dfd07fe9bbe093450bd4b3dd64a6ddd0573ff6fc629d0729d819c5d64997baf5e38fd18626dc50c1009f581784eedbc23a8b5b7c37a71b2774fc4f81b26278b17936b0ad590fa0e94d636b542dc94732bce5b48bd2af1d4824ba3b500e64d950a63241bdca20fb1c0ba66c963af6af3cfeae568b25c174fc8b486d9a6df3eb790b247b80ceb0947b72f4ff2a6f1b9c1c36e2ab3dea8d95848557b5f1bd9b312c2789d9d5b1c5a5c672112a96b2dbdc26e649b2324ebc34cfb16947e3247e1574d27caeec0007a4538184a529cf9542faa2440ae2334df0cfc7d2b1fee7769b5833e67d6d6eb2802c6221018b3056a58120b44c7105bab0a82098cc4f137c71d6a2ff533f8d4c585ee6fc9c9e344aa5b05f98e49a93f58b1ddd881efd6e1a3b7f4bd67c478a35d1c7d7db9bec1d43ebe0277739e8d7ec27efb39cd2cd9f28f849018d3a06a6be3c67e9ad86172725b2980a18f0f0221213e6e0fcf1cfcb1d899d1a22299f8f16a3cf0d9e1a3030caf49d7a6c66922df1a15aaadbf4a8a684c10a9835a15f3684fc76efd44ac3eba72e66b2fcbb5e0c48c27ef5078ad97ce0493eb3ba216eafffa7094171f074aecf95bf834cb4bff060f3b2bb0a7ceff358f05b3a338ff57e9397421e79b8e98ae82763429de3cb0c9f4c4c9d6f48047b23f5bfd50deea9e04ab9e876c63da68162753d7e8f792efc4955bcbfcc805fd90610e70ef03422b4ccc3e05293ee0227dcc012449d15f69d0d48e48021dec7da5dc59065805c8de6374a14b0bfdd0a21799534c7c22c3b84768f6e26916f51d38137e9eebe9a5590b54659b63cae8d9b735d987eb8de2e4f89ef7ab839860a3a836792698901acd0b6581fbb94da5676a9ede1dc111e8b3d963f7ce9d37563c8ebc0d72d4cf38d6f7eb3a2fa03f279968147fc96f4b1d90751ab70723f55fd266459a89c63a9156dad3110e2605cb8a3c31306236745f31dcd48cbc47cc2ffd888203bf2c50a7ee0ec7dfe5927a0b7e6a294ee0a91beb4b6f38f238a8b1425dc76623288be1db17ba11abe409c9ab82017402ba2814bd83776cf3f3f2bb7fb41b28f9cc758642af3a110c7ceea62333ab62cf630c12382dee89b744a9a7712803d50928ef28a16fe4160ca68254bad5c1c5767d570638fdad70611e762bdc581bcd2c91b452f9bee05a2f190281da0a77802579e3b2f9f0f415e67f2828cc2090c49ff98d2f86b7aa8e7d57655d7ba55e034c62a4d2395a15bd335a7d9924970b22838b75959a8c10f5e175785bf92a7b4cce84f6634ca79966e673fcdd091a28fcb4889d0fb589844b9941df9567d22d8fd64c08d54cb278193120dd43028d52d612d284d07d40ac19d556adeadf3cacc269ba859583870824627d94ed0463ca8ac2c24abf1f438b2697ef7d54f00cd0bdc152e431c2afa3e1f10c6cb7616986a56f4e5c3effbd8de8011b0309f66cad77213e97b18558be754cbd24bda558b2a11672abfb6a115762bb9ee038302fba8a1932f72be97b64b8efe39b12ac7d151dc2d75c31a44da94bf7cd824083f28f6f9515894732ce443c162be1087f7a6b7601147d25de36bd222b1fbe085b39eca1f8d9dadc99578c38c68f7541cb1171a719a4786db0acceb7084f485e4b3c206e7f0fbe395dd1e517d85a8c6d79213de9dbaa6e9bbc580c0ef24a3ee5a6b040028490067ff4be287be72cda30391018a6a66eec23a24817fa04ea7e72aa7d1c20e3d3e46d8456b493d8628df4275de8aa353e79be6c7b62424412accc766c883a44321d684f846e322dcbd4dd2756527b47979d8588ad72c4e0271228319daac707a5c2bb70cc820aa448d722f78efeb1364d8f3f9f84108e5adf37202c0f81f191bf8e8736c95a499b545022860785eda29514d233938d00ace9ad4694bdf117d7eaec09c51baa9d3fea8901f4af1b792c1a9bdbf67cdf50b904c2044c2add2ae90d26b553bcb07476c4b72f306f1ef5cae8028c4c7d7d98df58e430279ce6e82460aab15b6e1d3fd57e7b24b657095cf02352b7f83e3c1430daec6667e0b16363bf6d588ca06de27e1a630b064784effc01cf9d37af3c95d35c7a55e5871355195b41258db8055b5482839309a59fafac59797ee9a54ca61950ce872e929aa73f2ba1c665f5d258b630ffa5d6af694cb2d131c2e1c3dff7740d614caf54d628b7406cda3800b6b3f5bd6a14a58463bda98c763ffc1ce657614233a66fa441587bbbe302c6a7a8830bffbc3b93f68a44c3dc7eaddac1eff23918a9503f66c5473096c6e771e7758e0d09a11eb02b5350562429ebb752f3bba842f47f7ea2264ca7b3cc1134b4e22c0dddb2676cfecbf3ad850880c6ab1f7c13570cf74efae92828c203fbf7a1365d7c7a7b80ad3cbaa9bf70a25eff04aa150d67beff1735b6ae62897a85764c6a523011e36bd0d366b277d0e53b9f49c289022c22ce34e2e97dc9d6ee58e4b3d7f325489e4567573e3cf981b901c25c7f0d9a9ce0cecf3a141eaf6a92c750debd2500a5be37a86c8c7651adc75e1e61f4c492f526965626a1eddcc94136710a4fc7145e4d9a5cb7fb8c9793741f22500acbae64300491c1a557918dea0a96b0b0bec9ff466b04485e8696e56a4f7e38e9fca5a8bc32a82c20de86d134ce2238f41dce0de5d0a681d20cdede1c5f84f4ac65a51f31d2bc6af26b0628df9ab8495da8048f75fc0e6d635c9a26f36b9555434d0b450dee76eee06da33c1c3f5a20f4bac0638982fec4e89bbd3da4478f74b1d34729b1104eae548294ab8a776aa991e9ff8669b3ae32aee2b8fe556102559d2356f2162f86ae0e4fbf9e9638e85fbe495db95b632d53d8a455dc532ad6624ca75c0978c5e25e4f529da433146fef8c548c05b19725d8870431f2128b058ce2ee0fed0c262859cfe035bf06440e8c5472ef05f02cddeb16adffac5688d5ada013139ea42321700d04e7e8b901d737ab5f5e21f749ba316151a11b0cd3afe366ca0f887674fd9eff8db238bbc0454081a03d955e92d21168d3afb8a426920230782b2f5a85258cba895d4ba854604bb892231f33e75710189be77c68dbb79e90ceea3835d5905fc5df187d29ba034dd84f3cc77091e50133a43a21d9f7014a133dc379c3b8f9b41c29228425262f0502beece838713b920ebab6ce8741ca6e554a3cf405d865d48f56a6751f8a25e471ab011969832e5291abd4b82f6cd407cbc1905aa09a5e067c017659c85adc0cbfc911c78a25f29d080ed34003321909f499bc4b04d8ccec76f99dbc8788c77fdf22ffe348dcf98f0c47c11afa958dd10556af01c4351fb758d074de054b3cbda0c56bb1e41b8a5fad069690ea8b5e464535ec3ef0c673de4010bc43e26da26d08676fcdc01ed18a15513b7996da324a1514a5543bb4c983ff459cf0ff1530d1c954c678b9a73d2119522cc15adaa46b0756f65323d5a90c77ba19d176ff9c684d5abe30933a2deee65cc482cc97e2fd3a8df7f8fa28ce05dfba857ee00c3ff567d13bb95a6a3acbb0eaf73ee3aa1adb6aa7de1ebae4dc3dfd04d396593f8b280659d9b2e00445c921198da9e0b4df69318ce00f07d0620eb044d7f0f7898dd8b28c3519ed9f6f36a2393f1aa157df8deff6e2d2d7c8d4472f9caa5db76ddbbaf3f41025feb31b7bcf2fe7e31d99ee549336251612cf8b07decbd65743d2e53c1a630ffa64f198e86bbeacd7f8dbad89550cdee477c669c9b24abad9b54a6aeaaac14badc6269f0ae27202decee7fa955b18446bf3e878a16a4b1031cd955686bcf41aa571099fd021eee1e379c4c2e0f4ece36a9beb274a35f13ad5d322024fca6588fd9cee071a5e18d526a526d2f3225ce334b590c91d7c9895705301e864ad7813469bdc3a26d97f7329a5720e606d82f0863e7fe6f5551e26af9343f5c37d8dc711f61204f4c9e4813c6210ce1be6f0920f8880540b984996a753f3f2b7a87e4460a0ece195b2fa76b1f7f8c3a1068605f8c2d7537b5fc4bd6430c05cd24cccef2b44136ad301d65b319f71dc210520e825fe54879ac27594f77d437e6fffa45f8e9931222ca3b38405b427eaa10daabdb084c30804e9e2187522c4e85d5276c4590a6a5361d8858abe0bde546f74670c4086830305f4703e9a579667d9c85b0b9d48fd7774e92b560ad74b665bed6c05eeea80c0f8a096bcf73eb67273b6509ec776264ad450cc92255121784785b69489b410bc472b1a5cb7945793eb6a822aa343871aee7eb8122c4a855bfd8952cc5f0b5550396c7660624ed653d7b533fbba3d7ba1004771df817a37bf0d2a73e0eaf7af1e7caee3b6082c0e791b76a5312539b67f4a686ccc534f46e13d3590673e896ee2b150386956be27fe3b82423f50630da314565703a10e5babc78a2adbaa00104167e7d56cb4712a99e28adee3d83a442db8b4401f75ac5cacafecefa3576f0b4fd2718bb47b9f32009d3d42c4ab5fe409aa4e28fcb9ccf252c8543549ac21deb1730e72e3422bd7895853948d0b03a20ec225ec635c2445eb0b1fed711e6cc3f55640cf82a9ddbc8770cefd567ad073793ca75d7eb5c2dc3fd7808535168deffffd1f1b96477fcc0c2318d1645aa0432b9ec93de92baf9efcfef3aeee1e9bbc2875298ee9efc1911c08f193f84d58ab2572185e69ea3711b748b4a89e97a564c5d6f17257a2b38c877962b3618dc8fec96c95740a6b3f0f019b7859d9e6c602d3fbe30ddd1f5537bb9ea558e7031ab385cc30c3620ed8bc886bce82d87dd049f308228cf696e4f42f1955413cd1bc15050b4c6901dec53f3680d31cee7c589e4fc5f24af76379af14451e2140443450a0f2cce83dac7462e31723433b9772a36f596efb8d3d8a29d49f8543508dcf9cb1b35969b482c3f8089e794bba8b6f8b3cc137cae3d09fa2a5eaaf6f7c0a5f8ef09919c4c536c1c86d952b7caddb3dd888631ecfd2918abb39824e44ee4f70e141c882a9d9a225c42b708a1521eaedb359201ef7d840b20768b54a0f4c370c133101a08f89b13b27fcf964f782e2de2993d618d5459890b9956d99436014cde039269383a7b8d42bc41d3ff73d25ae8545f476f23baeb2c2fa6c1d930d1d7dd0e142a3f52a27a4b12534e161a7f2586aecf232a135a0e53c844d9fba3d15e9714a3a7a020e60dea3f1498d463c2480ca91b3ef02613ddd4e5abd2614421822d7d8b822ce9e46ba5adc59e5856fc9b32701f13b364eebc4729e655952939e9525c7b5b0729c9b8925e15eba60ed60ae01049998c62e25ad5dda837d6d23e4cf8d33e1115740903d3c5282ca52b6eb159f616224ce406478d255aad7e017fdcf4772c68c0b799f93dd739dc797f1102e3264404b65ebf579bf1c8f050720258cfc858f0c72440c86ad027892bb1da90b016981d12339677db2a8bbf6cb62536647564b33879b1864d08115e2de59fdf4bded583239cb1784d04eecee9451ed78da240f32602ddb3dbfc1fe1b0ba1a8d996561ac19de4fbc8b0ba16d8e9bf009d7ded05409c8b6cc2ac7548e63e51e27abf484bbcd1b4c1ed562d640cfec405235a273737f96d904cded9c316fffb082af6c3bbb60fedf37e65f981a2dc887a8d38e332c49d4527a85cde5ce831d063e8982dea42a719819fa83f469ff7429985a31c4102aa94f364e3eebda05bd98c830f43263c18baba3f418170b41aa6fb3bb6923e4a527ac4c75be"}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000100)=0x4) pwritev(r9, &(0x7f0000000680)=[{&(0x7f0000000040)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003f60000000001010101", 0x2e}], 0x1, 0x6, 0x0) pwritev(r9, &(0x7f0000000180)=[{&(0x7f0000000140)="00214500001400000000400600000a0000010a0000020050000000000001000000015d1003e800000000", 0x2a}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x4, 0x5}, {}, {0xa, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0xffffffb2, &(0x7f0000000180)={&(0x7f00000026c0)=@delqdisc={0x2c, 0x25, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x1, 0xfff1}, {0x1}, {0xe, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x48000) 99.651481ms ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80080a, &(0x7f0000000940)={[{@bsdgroups}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@noblock_validity}]}, 0x1, 0x7b2, &(0x7f00000009c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3}, 0x30, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) landlock_restrict_self(r6, 0xe) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x5, 0xffffffff9080edc4, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0xacfa}}, 0x50) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) 91.53605ms ago: executing program 2 (id=3): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f00000005c0)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x4}}, {@noauto_da_alloc}]}, 0x6, 0x635, &(0x7f0000001140)="$eJzs3c9rHNcdAPDv7GplyVYru5RSm5YKerChWNa6pm57qe0e4oMhhvgQQg4WluQIr39gyRApBsuQQwIJhJBrCL7kH8g9+J5bCCS55RxwQnBIQhK8YWZn5dVqV5ItadfSfD6w2nkzo33vO6O3896M3kwAhTWW/ihFHIx4dDGJGG1ZNhKNhWP5eg+/u30pfSVRr7/wbRJJPq+5fpK/78sTQxHx6ZmIP5RX5zu3sHhlslZvuBNxbP7qjWNzC4tHZ69OXp6+PH2tevzfJ05O/Kd6orolce7L38+ee/4vb7/+yr9mPqsdTeJUXKi8NhVtcWyVsRiLR3mIrfMHIuJkOtFhu+w0uyCEQivnf4+ViPhTjEY5SzWMxuxbfS0csK3q5Yg6UFCJ+g8F1WwHNPv2G+sHX9jmVknvPDjd6ACtjn+gcW4khrK+0d6HSUvPaCA7t7F/C/JP8/j19qH301esOA/x4/LeGdiCfLpZuhsRf+4Uf5KVbX8WaRp/aUU5koiYiIjBvHz/30QZkpbp7TgPs5anjb8UEafy93T+ma45rL33xtrSvY4fgGK6fzo/kC+lqcfHv7Tt0Wz/xKr2T+PaUPux62n0+/jXvf3XPN4PZefIS21H8rTNcr7zR1baZ3z15tl3u+Xf2v5LX2n+zbZgLzy4G3GoLf430mDz9k8af9Jh/6erXDy1sTye+/ybs92W9Tv++r2Iwx37P49bpelU+/XJ4XxZ9UT12MxsbXqi8bNjHh9/8vKH3fLvd/zp/t/bJf6W/V9q/710m9zYYB4fnb93tduykXXjL309mDT6m4P5nFcn5+dvViMGk3P5Ko0LWdn842uXpblO8zPS+I/8vXP9X/H3f3fl5ww3vzI34MaLVx52W7b2/u/cd2i5mPyovsEydJPGP7X+/l9V/9N57yyn7qyZxw8v3fprt2VrxT+8ydgAAAAAAACgaErZNdikNL48XSqNjzfGy/4x9pZq1+fm/zFz/da1qYgj2f9DVkrNK92jjXSSpqv5/8M208fb0v+MiAMR8V55OEuPX7pem+p38AAAAAAAAAAAAAAAAAAAAPCM2JeP/28+p/r7cmP8P1AQ2/mAOeDZpv5DcWX1f9UjnjYi2fKyAL2V1X9VGQpJ+x+KS/2H4lL/objUfygu9R+KS/2H4lL/AQAAAGBXOvC3+18mEbH03+HslRrMlz3ViCBgx6j0uwBA35T7XQCgb5Yv/WvsQ+FsqP3/c35zwO0vDtAHHe/+kTUO6mtX/vvuGwIAAAAAAAAAAAAAvXL4YOfx/4mxwbDrGfYHxbWJ8f9uHQA7nFv/Q3Hp4wPrjeIf6rbA+H8AAAAAAAAAAAAA6JmR7JWUxvOxwCNRKo2PR/wuIvZHJZmZrU1PRMTvI+KLcmVPmq72u9AAAAAAAAAAAAAAAAAAAACwy8wtLF6ZrNWmb7ZO/LJqzu6eaD4FdZ2Vh/Nttpm8/hdP+FuR9H6zpIEuz6lEPGmZt3iiZYPv2YJdMDC3sJj8VM8kEUvR9wA7Rdr3iXW/Oga37UsJAAAAAAAAAAAAAAAAAAAKqmXscWeHPuhxiQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg9x4//3/7JvodIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwM/0WAAD//15GOZM=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r4) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000002ff6900000000000100000018f200000000861f4104bfeacdd5a9007d16dcdc2850b536f0", 0x2c, r5) prctl$PR_SCHED_CORE(0x3d, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x9500}, {0xffffffff, 0x0, 0x9, 0xa}]}) 83.734642ms ago: executing program 3 (id=4): prlimit64(0xffffffffffffffff, 0x6, &(0x7f0000000140)={0x3, 0xff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000160e00000020c00148008000140ffffffff"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r3, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f000000acc0)=""/4087, 0xff7}, {&(0x7f0000000400)=""/32, 0x20}], 0x2}, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) prlimit64(r0, 0xb, &(0x7f0000000040)={0xffffffffffffffff, 0x7}, &(0x7f0000000080)) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x8805) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) socket$kcm(0x2, 0xa, 0x2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket(0x23, 0x1, 0x7) 1.108309ms ago: executing program 0 (id=8): openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[], 0x14}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r5, 0x3}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000100)) (async) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[], 0x14}}, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @private=0xa010100}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={r5, 0x3}, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) (async) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) (async) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) socket$inet6_sctp(0xa, 0x801, 0x84) (async) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x4, 0xd7}, 0x0) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) 0s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x1b6c, 0x80, 0x1024002, 0x804d}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) syz_io_uring_complete(r5, r6) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x5, 0x0, r8, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xf60, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r10 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@nodelalloc}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0x1, 0x573, &(0x7f0000000cc0)="$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") renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x4) r11 = openat(r10, &(0x7f0000000000)='./file1\x00', 0x88040, 0x72) fcntl$setlease(r11, 0x400, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) ioctl$XFS_IOC_FSGROWFSDATA(r11, 0x4010586e, &(0x7f0000000140)={0x0, 0x4}) write(r9, &(0x7f0000000480)="44757e2b57e56000", 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.210' (ED25519) to the list of known hosts. [ 28.953964][ T4693] cgroup: Unknown subsys name 'net' [ 29.093757][ T4693] cgroup: Unknown subsys name 'cpuset' [ 29.096081][ T4693] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.254738][ T4693] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 30.135982][ T4707] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.137476][ T4707] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.137675][ T4707] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.138015][ T4707] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.138241][ T4707] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.159709][ T4706] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.162877][ T4714] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.164499][ T4714] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.173731][ T4717] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.174893][ T4719] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.176789][ T4717] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.178477][ T4717] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.179940][ T4719] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.180443][ T4717] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.184299][ T4717] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.184632][ T4717] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.184881][ T4717] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.185030][ T4717] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.185310][ T4717] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.185773][ T4717] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.185980][ T4707] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.187008][ T4717] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.187296][ T4717] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.194485][ T4723] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.197486][ T4722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.515006][ T4703] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.516801][ T4703] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.518646][ T4703] bridge_slave_0: entered allmulticast mode [ 30.520923][ T4703] bridge_slave_0: entered promiscuous mode [ 30.534495][ T4703] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.534575][ T4703] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.534640][ T4703] bridge_slave_1: entered allmulticast mode [ 30.535076][ T4703] bridge_slave_1: entered promiscuous mode [ 30.540295][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.541653][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.541832][ T4708] bridge_slave_0: entered allmulticast mode [ 30.544856][ T4708] bridge_slave_0: entered promiscuous mode [ 30.548076][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.549551][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.551158][ T4708] bridge_slave_1: entered allmulticast mode [ 30.553867][ T4708] bridge_slave_1: entered promiscuous mode [ 30.572412][ T4708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.579577][ T4708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.586350][ T4703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.592706][ T4708] team0: Port device team_slave_0 added [ 30.594931][ T4708] team0: Port device team_slave_1 added [ 30.605420][ T4703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.628296][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.629694][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.632410][ T4708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.649319][ T4703] team0: Port device team_slave_0 added [ 30.653395][ T4708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.654804][ T4708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.659725][ T4708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.670671][ T4703] team0: Port device team_slave_1 added [ 30.676982][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.677061][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.677137][ T4718] bridge_slave_0: entered allmulticast mode [ 30.677627][ T4718] bridge_slave_0: entered promiscuous mode [ 30.678649][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.678673][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.678734][ T4718] bridge_slave_1: entered allmulticast mode [ 30.679182][ T4718] bridge_slave_1: entered promiscuous mode [ 30.698741][ T4703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.700085][ T4703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.700126][ T4703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.706970][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.707862][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.715240][ T4718] team0: Port device team_slave_0 added [ 30.720192][ T4703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.721533][ T4703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.721567][ T4703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.741112][ T4718] team0: Port device team_slave_1 added [ 30.749787][ T4704] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.749895][ T4704] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.749951][ T4704] bridge_slave_0: entered allmulticast mode [ 30.750377][ T4704] bridge_slave_0: entered promiscuous mode [ 30.753166][ T4708] hsr_slave_0: entered promiscuous mode [ 30.753489][ T4708] hsr_slave_1: entered promiscuous mode [ 30.754153][ T4704] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.754174][ T4704] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.754230][ T4704] bridge_slave_1: entered allmulticast mode [ 30.754627][ T4704] bridge_slave_1: entered promiscuous mode [ 30.763526][ T4703] hsr_slave_0: entered promiscuous mode [ 30.763897][ T4703] hsr_slave_1: entered promiscuous mode [ 30.764118][ T4703] debugfs: 'hsr0' already exists in 'hsr' [ 30.764161][ T4703] Cannot create hsr debugfs directory [ 30.780138][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.780167][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.780192][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.781189][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.781197][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.781211][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.791240][ T4704] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.792691][ T4704] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.831102][ T4718] hsr_slave_0: entered promiscuous mode [ 30.833044][ T4718] hsr_slave_1: entered promiscuous mode [ 30.834558][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 30.835761][ T4718] Cannot create hsr debugfs directory [ 30.837958][ T4704] team0: Port device team_slave_0 added [ 30.838775][ T4704] team0: Port device team_slave_1 added [ 30.857792][ T4710] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.857890][ T4710] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.857996][ T4710] bridge_slave_0: entered allmulticast mode [ 30.858425][ T4710] bridge_slave_0: entered promiscuous mode [ 30.859237][ T4710] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.859263][ T4710] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.859308][ T4710] bridge_slave_1: entered allmulticast mode [ 30.859707][ T4710] bridge_slave_1: entered promiscuous mode [ 30.867746][ T4710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.874350][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.875954][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.880527][ T4704] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.884563][ T4704] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.885951][ T4704] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.890799][ T4704] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.893688][ T4710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.919436][ T4710] team0: Port device team_slave_0 added [ 30.920321][ T4710] team0: Port device team_slave_1 added [ 30.934153][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.934178][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.934192][ T4710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.934788][ T4710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.934794][ T4710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.934807][ T4710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.976032][ T4710] hsr_slave_0: entered promiscuous mode [ 30.977499][ T4710] hsr_slave_1: entered promiscuous mode [ 30.978842][ T4710] debugfs: 'hsr0' already exists in 'hsr' [ 30.980012][ T4710] Cannot create hsr debugfs directory [ 30.984887][ T4704] hsr_slave_0: entered promiscuous mode [ 30.985197][ T4704] hsr_slave_1: entered promiscuous mode [ 30.985382][ T4704] debugfs: 'hsr0' already exists in 'hsr' [ 30.985391][ T4704] Cannot create hsr debugfs directory [ 31.044456][ T4708] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.047607][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.057851][ T4708] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.060204][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.061964][ T4708] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.064716][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.073901][ T4708] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.076272][ T4708] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.098671][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.098728][ T4708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.099007][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.099047][ T4708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.101345][ T4703] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.103615][ T4703] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.103978][ T4703] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.105910][ T4703] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.117751][ T4703] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.118852][ T4703] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.125126][ T4703] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.127456][ T4703] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.136792][ T4718] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.139186][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.140969][ T4718] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.143837][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.152781][ T4703] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.152833][ T4703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.152921][ T4703] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.152959][ T4703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.154367][ T4718] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.156640][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.156925][ T4718] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.159319][ T4718] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.169909][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.184795][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.186413][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.187865][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.189304][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.200512][ T4710] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.203846][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.205712][ T4710] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.208234][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.209942][ T4710] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.212174][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.215495][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.219834][ T4710] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.222408][ T4710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.233867][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.233921][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.234329][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.234350][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.268315][ T4703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.271459][ T4704] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.275386][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.277748][ T4704] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.280062][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.280466][ T4704] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.284264][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.286434][ T4704] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.288621][ T4704] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.295287][ T4703] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.305193][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.305239][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.305605][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.305626][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.355727][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.376730][ T4710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.390143][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.397938][ T4710] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.402121][ T4704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.406440][ T3449] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.406487][ T3449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.416138][ T4704] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.421183][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.421231][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.423701][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.423723][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.441813][ T4704] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.444339][ T4704] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.449740][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.449797][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.452040][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.452065][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.456429][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.456476][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.464654][ T4718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.466883][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.477530][ T4710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.482480][ T4710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.543991][ T4703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.618795][ T4708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.640650][ T4708] veth0_vlan: entered promiscuous mode [ 31.654373][ T4708] veth1_vlan: entered promiscuous mode [ 31.674075][ T4708] veth0_macvtap: entered promiscuous mode [ 31.679505][ T4708] veth1_macvtap: entered promiscuous mode [ 31.689202][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.710324][ T4708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.725430][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.742065][ T4703] veth0_vlan: entered promiscuous mode [ 31.752144][ T4710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.756375][ T4704] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.760041][ T4718] veth0_vlan: entered promiscuous mode [ 31.774384][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.774420][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.775886][ T4703] veth1_vlan: entered promiscuous mode [ 31.784980][ T4718] veth1_vlan: entered promiscuous mode [ 31.797832][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.801580][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 31.806708][ T4703] veth0_macvtap: entered promiscuous mode [ 31.809124][ T4703] veth1_macvtap: entered promiscuous mode [ 31.815054][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.815170][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.815203][ T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.821224][ T4703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.824032][ T4703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.830340][ T4704] veth0_vlan: entered promiscuous mode [ 31.838391][ T4710] veth0_vlan: entered promiscuous mode [ 31.840340][ T4718] veth0_macvtap: entered promiscuous mode [ 31.842826][ T4718] veth1_macvtap: entered promiscuous mode [ 31.848422][ T4708] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.850007][ T4710] veth1_vlan: entered promiscuous mode [ 31.860455][ T4704] veth1_vlan: entered promiscuous mode [ 31.864589][ T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.867609][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.884464][ T3449] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.884511][ T3449] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.884542][ T3449] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.897148][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.903207][ T1191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.907157][ T4710] veth0_macvtap: entered promiscuous mode [ 31.910564][ T4710] veth1_macvtap: entered promiscuous mode [ 31.917546][ T4885] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 31.928524][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.937672][ T4710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.946066][ T4704] veth0_macvtap: entered promiscuous mode [ 31.956134][ T4704] veth1_macvtap: entered promiscuous mode [ 31.969752][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 31.971263][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.010414][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.025068][ T150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.025135][ T150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.025171][ T150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.025193][ T150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.028225][ T4704] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.050299][ T1191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.050330][ T1191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.058369][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.058408][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.082439][ T1191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.082465][ T1191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.098792][ T1191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.098830][ T1191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.101994][ T3449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.102022][ T3449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.119232][ T1191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.120168][ T1191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.120192][ T1191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.133021][ T1191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.135571][ T1191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.137560][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.137593][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.140515][ T1191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.162399][ T150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.163200][ T150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.163361][ T150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.163392][ T150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.173649][ T4706] Bluetooth: hci0: command tx timeout [ 32.188269][ T4891] loop2: detected capacity change from 0 to 1024 [ 32.193357][ T4894] netlink: 27 bytes leftover after parsing attributes in process `syz.4.5'. [ 32.207991][ T4891] ======================================================= [ 32.207991][ T4891] WARNING: The mand mount option has been deprecated and [ 32.207991][ T4891] and is ignored by this kernel. Remove the mand [ 32.207991][ T4891] option from the mount to silence this warning. [ 32.207991][ T4891] ======================================================= [ 32.224288][ T4891] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 32.240073][ T4894] loop4: detected capacity change from 0 to 2048 [ 32.278107][ T4891] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.3: lblock 2 mapped to illegal pblock 2 (length 1) [ 32.278185][ T4891] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 32.279623][ T4891] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 32.279654][ T4891] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.3: lblock 0 mapped to illegal pblock 48 (length 1) [ 32.279678][ T4891] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 32.279763][ T4891] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 32.279777][ T4891] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.3: Failed to acquire dquot type 0 [ 32.279814][ T4891] loop2: lost filesystem error report for type 5 error -117 [ 32.279986][ T4891] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 32.280003][ T4891] loop2: lost filesystem error report for type 5 error -117 [ 32.280226][ T4891] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.3: mark_inode_dirty error [ 32.280245][ T4891] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 32.280750][ T4891] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 32.280861][ T4891] EXT4-fs (loop2): 1 orphan inode deleted [ 32.281368][ T4891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.322894][ T4706] Bluetooth: hci4: command tx timeout [ 32.323135][ T4706] Bluetooth: hci3: command tx timeout [ 32.323227][ T4706] Bluetooth: hci2: command tx timeout [ 32.323294][ T4706] Bluetooth: hci1: command tx timeout [ 32.576738][ T4905] loop1: detected capacity change from 0 to 1024 [ 32.792667][ T150] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 32.793641][ T150] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 32.793664][ T150] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:5: Failed to release dquot type 0 [ 32.801899][ T4905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.818391][ T4903] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 32.818499][ T4903] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.2: missing EA_INODE flag [ 32.818881][ T4902] ------------[ cut here ]------------ [ 32.818892][ T4902] kernel BUG at kernel/cred.c:376! [ 32.818935][ T4902] Internal error: Oops - BUG: 00000000f2000800 [#1] SMP [ 32.819239][ T4903] EXT4-fs (loop1): Remounting filesystem read-only [ 32.827951][ T4902] Modules linked in: [ 32.828643][ T4902] CPU: 0 UID: 0 PID: 4902 Comm: iou-wrk-4898 Not tainted syzkaller #0 PREEMPT [ 32.830291][ T4902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 32.831260][ T4894] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.834158][ T4902] pstate: 83400005 (Nzcv daif +PAN -UAO +TCO +DIT -SSBS BTYPE=--) [ 32.835543][ T4902] pc : commit_creds+0x888/0x8d4 [ 32.836453][ T4902] lr : commit_creds+0x888/0x8d4 [ 32.837314][ T4902] sp : ffff800098767850 [ 32.838065][ T4902] x29: ffff800098767860 x28: ffff0000c4ebe148 x27: ffff0000c4ebd880 [ 32.839493][ T4902] x26: dfff800000000000 x25: dfff800000000000 x24: ffff7000130ecf18 [ 32.840982][ T4902] x23: ffff0000c4c65ec8 x22: ffff0000c4ebe150 x21: ffff0000c4c56d00 [ 32.842454][ T4902] x20: ffff0000c4c56d00 x19: ffff0000d2680b00 x18: 1fffe00035b9ec28 [ 32.843940][ T4902] x17: 0000000000000003 x16: ffff800088bf7000 x15: ffff0000c4c65600 [ 32.845385][ T4902] x14: 00000000ffff8000 x13: 0000000000000001 x12: 0000000000000000 [ 32.846793][ T4902] x11: 0000000000000000 x10: 0000000000100000 x9 : 000000000000036f [ 32.848194][ T4902] x8 : ffff8000a8465000 x7 : 0000000000000000 x6 : 0000000000000000 [ 32.849645][ T4902] x5 : 0000000000000000 x4 : 0000000000000004 x3 : ffff800080391048 [ 32.851117][ T4902] x2 : 0000000000000000 x1 : ffff0000c4ebd880 x0 : 0000000000000001 [ 32.852587][ T4902] Call trace: [ 32.853187][ T4902] commit_creds+0x888/0x8d4 (P) [ 32.854087][ T4902] smk_write_relabel_self+0x398/0x418 [ 32.855103][ T4902] loop_rw_iter+0x3c0/0x5c0 [ 32.855920][ T4902] io_write+0xd50/0x1364 [ 32.856704][ T4902] __io_issue_sqe+0x134/0x364 [ 32.857551][ T4902] io_issue_sqe+0x94/0x8f0 [ 32.858335][ T4902] io_wq_submit_work+0x4c4/0x690 [ 32.859189][ T4902] io_worker_handle_work+0x640/0xeb8 [ 32.860120][ T4902] io_wq_worker+0x334/0xb44 [ 32.860887][ T4902] ret_from_fork+0x10/0x20 [ 32.861684][ T4902] Code: 91009280 9420ad5a 17fffe51 940b1fa2 (d4210000) [ 32.862914][ T4902] ---[ end trace 0000000000000000 ]--- [ 32.956779][ T4917] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 33.116821][ T4902] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 33.119131][ T4902] SMP: stopping secondary CPUs [ 33.119985][ T4902] Kernel Offset: disabled [ 33.120736][ T4902] CPU features: 0x0,a0000000,00f00020,9c080a02,a84ff6a7 [ 33.121948][ T4902] Memory Limit: none [ 33.370037][ T4902] Rebooting in 86400 seconds..