last executing test programs: 4.773928542s ago: executing program 4 (id=32): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@usrjquota}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f00000005c0)="$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") gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000a40)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000ac0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000b40)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000bc0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000c00), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000d80)='net/dev_mcast\x00') pread64(r3, &(0x7f0000000dc0)=""/102385, 0x18ff1, 0x41e) semget$private(0x0, 0x6, 0x0) 3.832158688s ago: executing program 1 (id=43): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f0000000100)=0x100000001, 0x4) shutdown(0xffffffffffffffff, 0x1) syz_usb_connect(0x0, 0x50, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002e00101405c0ae82100010000000109023e00020100c0000904000003e0010100070581031000010705020240000007058202400000090401", @ANYRES64=r0, @ANYRESOCT=0x0], 0x0) 3.743235617s ago: executing program 4 (id=45): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/212, 0xd4}, 0x9}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 3.633684669s ago: executing program 4 (id=48): bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000780)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 3.483625814s ago: executing program 4 (id=49): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000900)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000980)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f00000016c0)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001700)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f0000001740)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000001780)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.066295777s ago: executing program 1 (id=52): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6ce14f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f8100de08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57a4094fcc2a3709efdd7e5bf88f4cf3cb9aede83a5fb5278162883af0189dc3664d4d", 0xfffffffffffffec4, 0x4008245, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x20a02, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000800)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000900)={'pim6reg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}) recvfrom$inet(r0, &(0x7f0000000400)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r3 = syz_open_dev$sndpcmp(&(0x7f0000000440), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000700)={0x0, 0x1, 0x6, 0x6, 0x2, 0x87a9, 0x1, 0x6, 0x9deb, 0x7fff, 0x684d275}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x200000, 0x200000}) 2.395955405s ago: executing program 2 (id=61): prctl$PR_GET_TID_ADDRESS(0x28, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000700)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000780)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000800), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(r1, 0x4a8e) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001000)={0x1, 0x1, 0xb, 0x17, 0x164, &(0x7f0000001040)}) 2.123163983s ago: executing program 0 (id=63): mount(0x0, 0x0, &(0x7f00000002c0)='nfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100004106cd40cd060f011bd50000000109022400010000800009040bfd0233776100090507dfff"], 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3010040, &(0x7f0000000280), 0x1, 0x5a3, &(0x7f0000000900)="$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") ioctl$SNDRV_PCM_IOCTL_HWSYNC(0xffffffffffffffff, 0x4122, 0x0) 2.089934806s ago: executing program 1 (id=64): syz_mount_image$ext4(&(0x7f0000000cc0)='ext4\x00', &(0x7f0000000d80)='./bus\x00', 0x201080a, &(0x7f0000000e40)={[{@minixdf}, {@errors_remount}]}, 0x1, 0x445, &(0x7f0000000e80)="$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") geteuid() pread64(0xffffffffffffffff, 0x0, 0x0, 0x5) unlinkat(0xffffffffffffffff, 0x0, 0x200) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_setup(0x3fe, 0x0) io_submit(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001440), &(0x7f0000001640)='./file1\x00', 0x8000, &(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691fa9957fff2fb2f411b1c3dba471d1e4132f09405a5b81867a01cf3df73c16a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d1f3c041a6377723b83e57fcac059ad433974df43b08fc19f5b89100cc35aafb9e96dae3d8afe28e887e01475b9ec063d40d1080f70254a3f65a5c620000000000000000"], 0xf, 0x2b1, &(0x7f0000001b40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='./file1\x00', 0x105042, 0xd) ioctl$FIBMAP(r0, 0x1, &(0x7f0000001e40)=0x4) 1.999762196s ago: executing program 1 (id=65): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x8140, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc41a, &(0x7f0000000180)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000240)="$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") syz_mount_image$udf(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x4804497, &(0x7f0000000740)=ANY=[@ANYRES16=r1, @ANYRESOCT=r0, @ANYRESHEX, @ANYRES32=r1, @ANYRES32=r0], 0x68, 0xc54, &(0x7f0000000d40)="$eJzs3V9oXOl9N/DfMyOtRtq8G2028SZvs9uBlMQotfG/2AouQY4VtQHHGyIrdK+ikSU7w8ojI8mNN22D2pIWehO6N6U3RTRZWshFr7q9jNJsIaEUSshFclEQNFn2ohe6CJS2bFTOmWekkSzbs+uVJXs/HzP+njnzO6PnOc/ozBnQMycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIjPfu7CiZPpoFsBADxMlye/dOK0938AeE+54vM/AAAAAAAAAAAAAAAcdimqcSRSDL22kabL+221S83WrdtT4xN7bzaYIkUlqmV9caudPHX6zKfOnhvt5L23f7d9JF6YvHKhfvFnx28uzi0tzc3Wp1rNqwuzcz0/Q3v7hRvvdPvdRsodUL/x0q3Za9eW6qeOn97x8O3hNwaePDJ8/tyxs6Od2qnxiYnJrpq+/nf80+9wtxkeT0Q1GpHireE3UyMiKvHg++I+r539Nlh2YqTsxNT4RNmR+WajtVw8mCq5qhJR79porLOPHsJYPJCxiJWi+UWDR4ruTd5sLDZm5ufqX2wsLjeXmwutVGm3tuhPPSoxmiJWI2J94M6n649qPB8pXjmxkWYiotrZD58sJwbfvz2VfehjD4p21vsjViuPwJgdYgNRjcuR4pevH42rxT7Lt/h4xBeKfC3i1SI/E5GKF8aZiF/s8Tri0dQX1fjXSLGQNtJseTzoHFcufbn++da1ha7a8rjS9xi8PzxMh/zYVItqzJRH/I30zk92AAAAAAAAAAAAAAAAAHi3DUY1vh0p/uS53yvnFUc5L/3950ff9+Jvd88Zf/Y+z1PUHo+IlUpvc3L789ThVCn+7UPH6EktqvGNPP/vjw66MQAAAAAAAAAAAAAAAAAAAO9p1XgxUnzl2NG0Gt3XFG+2rtevNGbm21eF7VxTvHPN9M3Nzc16audYzumcKzlXc67lXM8Zlbx9zrGc0zlXcq7mXMu5njOqefucYzmnc67kXM25lnM9Z/Tl7XOO5ZzOuZJzNedazvWccUiu3QsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DipRDV+FSm+9bWNFCkixiKmo51rAwfdOgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgUEvVOB4p1l6slfdXKxFXIuJXm5ub5e2/Nzc3IzaK5Qd10H0FAAAAAAAAAAAAAAAAAACAQytV42OR4pn/2Uj1iLg9/MbAk0eGz587dna0GtVIRUl3/QuTVy7ULy7cuLk4t7Q0N1ufuvidt/PjapearVu3p8Yn3vWO9GTwzva3mlcXZud6fYL7tH+wdnHh5suLzetfXd7z8aHahZml5cXG1b0fjsGoREx3rxkpGzw1PlE2er7ZaJWbpspdGliJGOu1MwAAAAAAAAAAAAAAAAAAABwaQ6kan4sUP//3M6kzb7yvPef//7XvVbdqX/2D7e8CmN+VHd3fH9DLcuq1oSPlxPv61PjExGTX6r7+O0uLNqVUjWcjxSde+XA5Hz7F0J5z44u6p4q6G2dy3fCvFXUrO6pqI1PjE/XLC61jF+bnF642lhsz83eZgP9Urx0CAAAAAAAAAAAAAAAAAACAbUOpGj+JFP/5d/+WOtedz/P/+9r3uub//1Y5hb5USztzSzm3/6lybn97+f3nR4eef+5u6/dj/n/RppSq8c3tryvYmv8/vau2qPuzSPHmcx8tH0tReaKoa3S6037Ga835uRNF7V9Hil9/q1MbZe31XPvMdu3JonYwUvzlxs7ar+baD27Xnipqj0aKH/zH3rUf2q49XdT+PFL849/WO7VDRe3v59oj27XHry7Mz95vtxbj/91I8Z3Lv5M6fb7r+Hd9/8PKrtxyx5jfe7n38e+0Y+/xH+5at5LH9U8jxemffLgcy3uN/9lI8d3aR3Nde9/P5MefLv/fHv9PRIqf/cvO2mu59gPbtSd77dZBK8b/25Hi+3/1060+5/HPe3Z7hLrH///37cytV8m+jf+9f/+f7lo3nNt19W3ui/eipZe//lJjfn5u8YEXas9HvBvP0+tC8TLd95+VvwMnHmK/LFg4DAv3O3J8b3D/j07st+L9/88jxf8eqabOeUx+/39f+972+d9/fWP7/f/8rtxyQO//H+hadz6ftfT3RdSWb9zsfzaitvTy1481bzSuz12fa506eeLTnz578sTJs/1PdE7utpd63nePg2L8fxQpfvz3P976HLPz/G/v8/+hXbnlgMb/me4+7Tiv6XlXvCcV4/83keLpz/506/Pmvc7/O5//j35sZ279/h3Q+H+wa91wblfzbe4LAAAAAAAAAACAR8lQqsZfRIrf/ePfTJ05RL38/d/srtxyQH//daRr3Wxv8xoiPeCfSfe8kwEADpHi/O9DkeJ7mz/cmsu98/wvfqNT233+dzeH4fr/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwqEtRjT+MFEOvbaS1geJ+W+1Ss3Xr9tT4xN6bDaZIUYlqWV/caidPnT7zqbPnRjt5aeBhduMj8cLklQv1iws3bi7OLS3NzdanWs2rC7NzPT/Dg26/20i5A+s3Xro1e+3aUv3U8dM7Hr49/MbAk0eGz587dna0Uzs1PjEx2VXT1/+Of/od0l3WPxHV+GGkeGv4zfT9gYhKPPi+uM9rZ78Nlp0YKTsxNT5RdmS+2WgtFw+mSq6qRNS7Nhrr7KOHMBYPZCxipWh+0eCRonuTNxuLjZn5ufoXG4vLzeXmQitV2q0t+lOPSoymiNWIWN/jV7I/qvHNSPHKiY30TwMR1c5++OTlyS+dOH3/9lT2oY89KNpZ749YrTwCY3aIDUQ1/iFS/PL1o/GDgYi+aN/i4xFfKPK1iFeL/ExEKl4YZyJ+8VAP7eynvqjGmUixkDbS6wPF8aBzXLn05frnW9cWumo7x5VH/v3hYTrkx6ZaVONH5RF/I/3z7t/roQNqFAAAAAAAAAAAAAAAAADlTNrVSPGVY0dTOT94a05xs3W9fqUxM9+e1teZ+9eZM725ublZT+0cyzmdcyXnas61nOs5o5K3zzmWczrnSs7VnGs513NGNW+fcyzndM6VnKtlDmy1eD2vj768fc6xnNM5V3Ku5lzLuZ4zDsncPQAAAAAAAAAAAAAAAAAA4PFSiWp5FfdvfW0jlVOlxyKmo51rrvP72Pu/AAAA//8L9F/b") prlimit64(0x0, 0xe, &(0x7f00000019c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001a00)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001a40)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001ac0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000001b40), 0x651, 0x0) recvmmsg(r3, &(0x7f0000001b80), 0x10106, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000001c00)={0x2, 0x6e24, @empty}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000001c40)='net/wireless\x00') read$FUSE(r5, &(0x7f0000001c80)={0x2020}, 0x2020) 1.95511592s ago: executing program 3 (id=66): syz_open_dev$sndctrl(0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000940)='.\x00', 0x0, 0x22) fchown(r2, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, 0x0, 0xffffffd3) ioctl$DM_TABLE_LOAD(r1, 0xc138fd09, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x168, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}, [@error={0x0, 0x400, 0x0, 0x30}]}) ioctl$DM_DEV_SUSPEND(r1, 0xc138fd06, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, @by_name={0x0, {'syz', 0x0, '2\x00'}}}) syz_open_procfs(0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4004800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.933170452s ago: executing program 3 (id=67): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x6, &(0x7f0000000200)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000300), &(0x7f0000000340)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000380), 0x0) 1.907951445s ago: executing program 3 (id=68): process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000240)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0x7439, 0x0) 1.56650244s ago: executing program 2 (id=69): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x982, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000002c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x800, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) ioctl$DM_TABLE_STATUS(r0, 0xc138fd0c, &(0x7f0000000dc0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x8a10, 0x0, 0x0, @by_dev={r1}}) 1.509805996s ago: executing program 2 (id=70): unshare(0x22020600) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x18410, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0], 0xfe, 0x4b9, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000840)='2', 0xfdef, 0xe7c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000000000081) fchdir(0xffffffffffffffff) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) 1.509728616s ago: executing program 3 (id=71): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x48) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x800006, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}]}}) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='mounts\x00') read$FUSE(r1, &(0x7f0000000580)={0x2020}, 0x2020) 1.482840818s ago: executing program 3 (id=72): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$fuse(&(0x7f00000026c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002540)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000002580)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000025c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000002600)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000002680), 0x651, 0x0) recvmmsg(r2, &(0x7f00000026c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002700)=0x6) r4 = fsopen(&(0x7f0000002740)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="05002bbd7000fddbdf254400000008000300", @ANYRES32, @ANYBLOB="0a00180003031103030300"], 0x44}}, 0x0) 1.408327806s ago: executing program 2 (id=73): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x6) pipe2(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00000008c0)=[{&(0x7f0000000900)='|', 0x1}, {&(0x7f0000000940)="a7", 0x1}, {&(0x7f00000009c0)='b', 0x1}], 0x3, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xfbaaf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000300), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000340), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="9a835d3f1d04fe8a0942fb56762e2fd9d3a253c8c378500f49b15a812535d8cdeac8b792be1030498a503056150109b49af50c5feb584ea39f381adbdeb4bd6dda60c6c97532176a7a231e708ed9a6bc03bb7e66eefe30e4004c1aae8383aa387bb14e4ac6829017894e465dc682171a8a4e5276e6a5d23b48cf4bc9366fd07f49458cd473b86f6b2ce0ccc39d7db31e5494aaa38cf67201a16187b5f1149e97c541ae49e05a8b6eb30fab2062186312a9db4db12eab1af3120fb9227196b54e8fbe0d9ee48d88a380df05b75c9efadc56da57ad59ead8f3d3e5c208c0d031dfe233f9a0e8512546f090fca9d43ed026d9a8e554e913c2d16264f741abfe265e9f5caf1ca307f50ea6c95bc0622b5442f84df231070a82fd84d8f968332aee3153a22daa18c3afbfb86db03de0069e0c18c353b8f9a2045a8cad5ae660a3b23ca89d4d1ad84455c705ea025f71646f84cd6e876e901d5e151b70116b9c235ec733cdbc0437b1cf8314518d769b67f9ffdc0b9aa7cde33cf4b368d6ccb85c8209922e35205b706080dbc2cc000f9d71517ede743e6154452e7a9fe74f007d9b7ef0faed426d48cac735f92e8034de55627af12e657284b2c74e", &(0x7f0000000780), 0x200, r5}, 0x38) r6 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ffc000/0x4000)=nil) shmat(r6, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r7 = socket$inet(0x2, 0xa, 0x90f) ioctl$sock_inet_SIOCSARP(r7, 0x8955, &(0x7f0000000440)={{0x2, 0x4e27, @broadcast}, {0x306, @broadcast}, 0x48, {0x2, 0xc104, @multicast2}, 'gretap0\x00'}) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r8, &(0x7f0000000340)='./file0\x00', r8, 0x0, 0x64) ioctl$EVIOCGMASK(r8, 0x80104592, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="aa", 0x1}], 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000000}, 0xc800) recvmmsg(r10, &(0x7f0000000880), 0x700, 0x2, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f0000000080)=[{&(0x7f00000000c0)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) 943.703613ms ago: executing program 1 (id=74): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000280)="f149300d5f039fdeffbccae168b3965548db07b5ce548f159fd7fae294ebe253795fd0afe6ce14f43f03f5afd0f7d651054a65cc4a7328ae56ee23758ce00bb14e25ab52efc66cd70e4e00190600000000000000fb964e22e3989c0c0f47fa834d227bf0e2fd5a0c19057f8100de08cc7c027544a0a55c0e64f99f8aa14863cab861264c5db0bc57781a1c63ff6cf876f0643a8bceb1c484a2afed6a6f754377b523b0008fe36144aebe90e021779c0e4350fb5fd5a4291bb9d8d05a57a4094fcc2a3709efdd7e5bf88f4cf3cb9aede83a5fb5278162883af0189dc3664d4d", 0xfffffffffffffec4, 0x4008245, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000007c0), 0x20a02, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000800)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000900)={'pim6reg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}) recvfrom$inet(r0, &(0x7f0000000400)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r3 = syz_open_dev$sndpcmp(&(0x7f0000000440), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000700)={0x0, 0x1, 0x6, 0x6, 0x2, 0x87a9, 0x1, 0x6, 0x9deb, 0x7fff, 0x684d275}) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x200000, 0x200000}) 873.939971ms ago: executing program 4 (id=75): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000000, &(0x7f0000000200)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@user_xattr}, {@dioread_nolock}, {@stripe={'stripe', 0x3d, 0x3}}]}, 0x4, 0x533, &(0x7f0000000540)="$eJzs3WFrJGcdAPD/TLK55C5ttipyFmyLrdwVvd1LY/UUaSuIviqo9f0Zk00It8keyaZeQrEpfgBBRAU/gG8EX/hSkH4EEQr6XlQU0av6Tm9kdiaaze7exssm225+P5js8+wz8/z/z5Cd3Zl92AngwnomIl6JiKmIeD4iFsrn03KJg2LJ13s3K7wZWfbaX5NI8ufuv7Fy2Fden46IK+VmsxHxtS9HfDPpjbuzt39nudlsbJf1envzbn1nb//GxubyemO9sbW0tPjziHjx1s0yanaqcVYj4qUv/vEH3/3Jl1765Se/9bvbf77+7Tytz3+4yDsiVk4VYICi70pnXxzK99H2WQQbk3w8lalxZwEAwEnkn/E/EBEf63z+X4ipzqc5AAAAYJJkL8/Hv5KIDAAAAJhYaUTMR5LWyrkA85GmtVoxh/dDcTlttnban1hr7W6t5m0R1aikaxvNxs1yrnA1KsnaxuONxXKObVFvNl44Vl+KiCci4vsLc516baXVXB33xQ8AAAC4IK483X3+/4+FtFMGAAAAJkx1YAUAAACYFE75AQAAYPI5/wcAAICJ9pVXX82X7PA+3quv7+3eab1+Y7Wxc6e2ubtSW2lt362t/7NcfXNYf81W6+6nYmv3Xr09E+36zt7+7c3W7lb79kbXLbABAACAc/TE02//NomIg8/NdZYofwcQoMsfxp0AMEpT404AGJvpcScAjE1l6BqOEDDpkiHtvZN3imuF8auzyQcAABi9ax/p/f5/pmwbfm0AeD8z1wcALp7ub/fmxpYHcP4qXTMATzQbsLg8cPWsMgLO2+PFw6VB7QN/vOME3/8X1xiy7JESAwAARma+syRprTwHmI80rdUiHosHWTUqydpGs3GzbPvNQuVSXl/sbJkMnTMMAAAAAAAAAAAAAAAAAAAAAAAAABSyLIkMAAAAmGgR6Z+Szq/5R1xbeG6+++rAsbt+/fi1H95bbre3FyNmkr8tRHkzwPaPyudfyNwSAAAAAMZrLv9TnKeXj4vjTgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACASfPu/TdWDpfzjPuXL0REtV/86ZjtPM5GJSIu/z2J6SPbJRExNYL4B29FxNV+8ZN4kGVZtcyiX/y5M45f7eya/vHTiLgygvhwkb2dH39e6ff6S+OZzmP/119evjSC+IOPf+l/j39TA44/jx2r9ygTfPKdn9VnBsV/K+LJ6f7Hn8P4SRG/K0ReeXbY4IoO4htf39/v236ky37xj8aqtzfv1nf29m9sbC6vN9YbW0tLi5++9ZlbL966WV/baDbKv33DfO+jv3gwKMV8/JcHxK92j79n/z83bPwdWfz7nXv3P1hUKv3iX3+2//vv1QHx0/K97+NlOW+/dlg+KMpHPfXTXz/1sPGvDhj/7JDxXz/R+OOzz3/1O7/v29KzNwCA87Czt39nudlsbD+kMHuCdf6vQsRp+3l5pPm8FwoxfJ3Z90iqZ1HI3iz+H0/Xzyk37ylkp9l8OkaQxkzP63QqHrXDJOIg7+uE/5AAAMCE+d+H/r7fIAEAAAAAAAAAAAAAAAAAAADn4BF/lmw2Ik688vGYB+MZKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAQ/0nAAD//6H+0dA=") r0 = openat(0xffffffffffffff9c, &(0x7f0000001480)='./bus\x00', 0x183042, 0x15) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7fff, 0x2000007, 0x401d031, r0, 0x0) setresuid(0x0, 0xee01, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 811.505217ms ago: executing program 4 (id=76): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000580)=0x7) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f00000005c0)=0x5, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000640)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000780), 0x651, 0x0) recvmmsg(r1, &(0x7f00000007c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x581800, 0x0) ioctl$SNDRV_PCM_IOCTL_XRUN(0xffffffffffffffff, 0x4148, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(0xffffffffffffffff, 0x4144, 0x0) readv(r3, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000880)) getpid() r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/asound/seq/clients\x00', 0x0, 0x0) close(r5) umount2(0x0, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 356.664123ms ago: executing program 2 (id=77): syz_mount_image$udf(&(0x7f0000001040), &(0x7f0000001080)='./file0\x00', 0x0, &(0x7f00000010c0), 0x1, 0x1030, &(0x7f0000001100)="$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") 257.969763ms ago: executing program 0 (id=78): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) 208.715219ms ago: executing program 2 (id=79): prctl$PR_GET_TID_ADDRESS(0x28, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000680)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000700)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000780)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000800), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000880)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) ftruncate(r1, 0x4a8e) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000001000)={0x1, 0x1, 0xb, 0x17, 0x164, &(0x7f0000001040)}) 202.372659ms ago: executing program 0 (id=80): syz_mount_image$ext4(&(0x7f0000000980)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8410, &(0x7f0000000ac0), 0x2, 0x24b, &(0x7f0000000b00)="$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") openat(0xffffffffffffff9c, 0x0, 0x4c142, 0x0) r0 = open(&(0x7f0000000300)='./file2\x00', 0x24842, 0x80) write$binfmt_elf32(r0, 0x0, 0x6200) 106.024789ms ago: executing program 0 (id=81): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000740)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000780)="120000001c0000010011223344556600000101010101010101010101010101010100", 0x22) write(r0, &(0x7f00000007c0), 0x0) 105.887009ms ago: executing program 0 (id=82): syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000a00)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@noblock_validity}, {@nombcache}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@inlinecrypt}, {@grpid}, {@nobarrier}, {@nouid32}]}, 0x3, 0x56f, &(0x7f0000000b00)="$eJzs3V1rHNUbAPBnNknf//+mUIp6IYFeWKndNIkvFYTWS9FiQe/rkkxDyaZbspvSxELbC3vjjRRBxIL4Abz3svgF/BQFLRQpQS+8icxmtl2T3bxst2br/H4wyTkzk5w5e+Y5+8zOLhtAYY1lP0oRL0fEV0nE4bZtw5FvHFvbb+XxjelsSWJ19ZPfk0jyda39k/z3wbzyUkT8/EXEydLGdutLy3OVajVdyOvjjfmr4/Wl5VOX5yuz6Wx6ZXJq6sxbU5PvvvN2T/3a22Hd6xf+/Pbj+x+c+fL4yjc/PjxyN4lzcSjf1t6PZ3CrvTIWY/ljMhLn1u040YfGBkmy2wdAT4byOB+JbA44HEN51AP/fTcjYhUoqET8Q0G18oDWtX2froNfGI/eX7sA2tj/4bXXRmJf89rowEryjyuj7Hp3tA/tZ2389Nu9u9kSW7wOcbMP7QG03LodEaeHhzfOf0k+//XudPPF482tb6Nozz+wm+5n+c8bnfKf0pP8JzrkPwc7xG4vto7/0sM+NNNVlv+91zH/fTJ1jQ7ltf81c76R5NLlano6Iv4fESdiZG9W3+x+zpmVB6vdtrXnf9mStd/KBfPjeDi87mbWTKVReZY+t3t0O+KVp/lvEhvm/33NXHf9+GePx4VttnEsvfdqt21b979d/zPg1R8iXus4/k/vaCWb358cb54P462zYqM/7hz7pVv7O+t//2Xjf2Dz/o8m7fdr6ztv4/t9f6XdtvV6/u9JPm2W9+TrrlcajYWJiD3JRxvXTz7921a9tX/W/xPHN5//Op3/+yPis232/87RO113HYTxn9nR+O+88ODDz7/r1v72xv/NZulEvmY78992D/BZHjsAAAAAAAAYNKWIOBRJqfykXCqVy2vv7zgaB0rVWr1x8lJt8cpMND8rOxojpdad7sNt74eYyN8P26pPrqtPRcSRiPh6aH+zXp6uVWd2u/MAAAAAAAAAAAAAAAAAAAAwIA52+fx/5teh3T464Lnzld9QXFvGfz++6QkYSJ7/objEPxSX+IfiEv9QXOIfikv8Q3GJfygu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAB9deH8+WxZXXl8Yzqrz1xbWpyrXTs1k9bnyvOL0+Xp2sLV8mytNltNy9O1vVv9v2qtdnViMhavjzfSemO8vrR8cb62eKVx8fJ8ZTa9mI78K70CAAAAAAAAAAAAAAAAAACAF0t9aXmuUq2mCwpdC2djIA6j50Ky1SifzU+GnpoY3v0OKjyHwi5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5u8AAAD//6ltM2g=") r0 = openat(0xffffffffffffff9c, &(0x7f0000001080)='./file1\x00', 0x183042, 0x25) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000001100)=ANY=[@ANYBLOB="9211bdcd121c69ab55e700"]) 65.163783ms ago: executing program 0 (id=83): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000000)={[{@quota}, {@noload}, {@init_itable}]}, 0x4, 0x4d1, &(0x7f0000000500)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x22020600) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file1\x00'}, 0x6e) 30.166617ms ago: executing program 3 (id=84): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000380)='./mytrace\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0], 0x1, 0x1c4, &(0x7f0000000400)="$eJzslDuvElEQx/9nX2SNCbbaaCIJWLgv1EhhQSwtNNFo7CCyEHQRA1sAFXwKa2sLa2JD4sfQQq1MfHRWJq45u2fd4wa5AfaSm9z5FWf/e2YYZoZhQBDEqeXzp58f31QrJtdnUUFJ3H9RMx9F8l+Wf11537/79qXz48NydaeRC2ds+/0agFVTRSjeoyiKZHtFPB9ASbWOVmZ/BAZL6BYUPBTaB8NjoZ9Kesj9LavbD3zryTDocOHww+WHx496Pr/vC4aOlB+T7OPp7Fk7CPzR/uI2T3udaVOD4/yaCm5J+cm/V9obJ+sfXChwha6D4b7QN1FKe5O0RKr/gpbFV4+n/gLE18ICMmDO6/vHZGKHgOfLR/joOAmtK1yk/5J94+gYT81s8A9ZhShhvtWnWDwk38zDplqUeG3mZn5nke2n6BVDVdpPmrQ/7HDwwh5PZ1f7g3bP7/nPPa9+w7nmONc9O15EdvcdNqDBjPfTGSm+/h9fgxmYtMNw5Cbn33dvUkI48tZtXCPefwpql5Os2ZodHI/JOXaJP2oq8DtK2JQ3QRAEQRAEQRAEQRAEQRDE9lwEW0R5GsjfePdi7z8BAAD//0+0Zfw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file2\x00', 0x80000, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) read$hiddev(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 0s ago: executing program 1 (id=85): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1c8) mkdirat(0xffffffffffffff9c, 0x0, 0x387) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0) truncate(0x0, 0xe2) setrlimit(0x7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) sync() kernel console output (not intermixed with test programs): [ 9.939826][ T3996] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 9.978991][ T182] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.986531][ T182] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. syzkaller login: [ 29.289271][ T4318] cgroup: Unknown subsys name 'net' [ 29.521059][ T4318] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.777027][ T4318] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 30.462435][ T4336] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 30.464606][ T4336] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 30.473108][ T4337] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 30.475461][ T4338] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 30.476873][ T4338] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 30.478529][ T4338] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 30.481346][ T4345] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 30.483378][ T4345] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 30.485102][ T4345] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 30.485739][ T4346] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 30.486740][ T4345] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 30.488932][ T4346] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 30.491279][ T4345] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 30.491738][ T4346] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 30.494085][ T4343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 30.494659][ T4346] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 30.495597][ T4345] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 30.497050][ T4346] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 30.498357][ T4345] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 30.500224][ T4346] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 30.502612][ T4346] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 30.504084][ T4346] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 30.505649][ T4346] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 30.507135][ T4346] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 30.510724][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 30.533457][ T4332] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.534988][ T4332] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.536471][ T4332] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.538545][ T4330] rdma_rxe: rxe_register_device failed with error -23 [ 30.540025][ T4330] rdma_rxe: failed to add rxe_eth0 [ 30.555318][ T4331] rdma_rxe: rxe_register_device failed with error -23 [ 30.556863][ T4331] rdma_rxe: failed to add rxe_eth0 [ 30.561475][ T4332] infiniband rxe0: set active [ 30.562659][ T3903] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.563920][ T4332] infiniband rxe0: added rxe_eth0 [ 30.565884][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 30.567784][ T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 30.571899][ T4332] RDS/IB: rxe0: added [ 30.572887][ T4332] smc: adding ib device rxe0 with port count 1 [ 30.574178][ T4332] smc: ib device rxe0 port 1 has pnetid [ 30.575095][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 30.575712][ T3903] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.576825][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 30.580324][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 30.590758][ T4340] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.619179][ T4330] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.643367][ T4331] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.667915][ T4332] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.723815][ T4342] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.732892][ T4340] chnl_net:caif_netlink_parms(): no params data found [ 30.799248][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 30.816175][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.819765][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.821774][ T4340] device bridge_slave_0 entered promiscuous mode [ 30.850594][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.852187][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.854064][ T4340] device bridge_slave_1 entered promiscuous mode [ 30.884017][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.885605][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.887581][ T4330] device bridge_slave_0 entered promiscuous mode [ 30.896513][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 30.900499][ T4340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.903784][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.905062][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.910129][ T4330] device bridge_slave_1 entered promiscuous mode [ 30.925700][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.938443][ T4340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.946462][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.953066][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 30.993578][ T4330] team0: Port device team_slave_0 added [ 30.998816][ T4340] team0: Port device team_slave_0 added [ 31.002791][ T4340] team0: Port device team_slave_1 added [ 31.004061][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.005554][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.007373][ T4331] device bridge_slave_0 entered promiscuous mode [ 31.010592][ T4330] team0: Port device team_slave_1 added [ 31.011928][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.013361][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.015031][ T4331] device bridge_slave_1 entered promiscuous mode [ 31.029895][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.032666][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.039961][ T4331] team0: Port device team_slave_0 added [ 31.044040][ T4342] chnl_net:caif_netlink_parms(): no params data found [ 31.051318][ T4331] team0: Port device team_slave_1 added [ 31.061262][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.062635][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.067708][ T4340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.070873][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.072404][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.074202][ T4332] device bridge_slave_0 entered promiscuous mode [ 31.076687][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.080162][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.084467][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.087199][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.089297][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.093789][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.098674][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.100013][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.104875][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.107666][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.109275][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.114264][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.120108][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.121483][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.126505][ T4340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.129538][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.130961][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.132894][ T4332] device bridge_slave_1 entered promiscuous mode [ 31.149415][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.152494][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.209220][ T4340] device hsr_slave_0 entered promiscuous mode [ 31.258420][ T4340] device hsr_slave_1 entered promiscuous mode [ 31.299215][ T4332] team0: Port device team_slave_0 added [ 31.303004][ T4332] team0: Port device team_slave_1 added [ 31.310040][ T3996] infiniband rxe0: set active [ 31.318771][ T4342] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.320186][ T4342] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.321768][ T4342] device bridge_slave_0 entered promiscuous mode [ 31.359265][ T4331] device hsr_slave_0 entered promiscuous mode [ 31.418203][ T4331] device hsr_slave_1 entered promiscuous mode [ 31.458069][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.459736][ T4331] Cannot create hsr debugfs directory [ 31.509212][ T4330] device hsr_slave_0 entered promiscuous mode [ 31.548177][ T4330] device hsr_slave_1 entered promiscuous mode [ 31.588025][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.589662][ T4330] Cannot create hsr debugfs directory [ 31.590860][ T3903] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.594613][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.595864][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.600852][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.603304][ T4342] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.604898][ T4342] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.606778][ T4342] device bridge_slave_1 entered promiscuous mode [ 31.631985][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.633354][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.637888][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.645259][ T4342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.652038][ T4342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.682122][ T4342] team0: Port device team_slave_0 added [ 31.729724][ T4332] device hsr_slave_0 entered promiscuous mode [ 31.768717][ T4332] device hsr_slave_1 entered promiscuous mode [ 31.818087][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.819591][ T4332] Cannot create hsr debugfs directory [ 31.829944][ T4342] team0: Port device team_slave_1 added [ 31.866463][ T4331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.920423][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.921644][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.926060][ T4342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.934092][ T4331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.980767][ T4342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.981985][ T4342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.986833][ T4342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.993212][ T4331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.038784][ T4331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.109025][ T4342] device hsr_slave_0 entered promiscuous mode [ 32.150535][ T4342] device hsr_slave_1 entered promiscuous mode [ 32.188123][ T4342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.189639][ T4342] Cannot create hsr debugfs directory [ 32.242133][ T4340] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.282280][ T4340] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.319060][ T4340] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.374453][ T4340] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.419343][ T4330] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.459171][ T4330] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.520834][ T4330] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.559389][ T4330] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.568193][ T4338] Bluetooth: hci1: command 0x0409 tx timeout [ 32.568357][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 32.569496][ T4338] Bluetooth: hci2: command 0x0409 tx timeout [ 32.603591][ T4332] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.648288][ T4347] Bluetooth: hci3: command 0x0409 tx timeout [ 32.651922][ T4332] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.658292][ T4338] Bluetooth: hci4: command 0x0409 tx timeout [ 32.695678][ T4332] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.740780][ T4342] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.780302][ T4332] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.839937][ T4342] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.880343][ T4342] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.919051][ T4342] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.971889][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.974848][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.988375][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.990931][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.996592][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.998909][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.001405][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.009327][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.011322][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.013640][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.014980][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.017236][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.023373][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.030222][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.033614][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.035501][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.036876][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.042620][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.048798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.050673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.052534][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.054252][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.055697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.057600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.061189][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.062427][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.067263][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.073711][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.075743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.085510][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.092134][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.094374][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.096165][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.098739][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.100635][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.107437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.109730][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.111521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.113443][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.115192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.121588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.123412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.125213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.127115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.135286][ T4342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.136909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.140601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.143641][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.151091][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.165061][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.166846][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.170394][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.172484][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.175650][ T4342] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.180955][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.185239][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.189602][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.191478][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.194526][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.205078][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.206936][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.210126][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.211697][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.213435][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.215195][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.217457][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.218975][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.225289][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.229917][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.236242][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.238333][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.240662][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.242027][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.248834][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.250832][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.252715][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.254482][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.262094][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.266047][ T4342] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.269048][ T4342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.274691][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.276243][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.278409][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.280216][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.281806][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.283157][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.284829][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.286717][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.291396][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.293246][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.294890][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.296748][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.300536][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.310084][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.311999][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.313896][ T1610] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.315481][ T1610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.317260][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.330381][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.332393][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.334734][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.336638][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.345044][ T4330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.346979][ T4330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.352883][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.354745][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.356654][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.358542][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.360433][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.362208][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.364115][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.365942][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.367433][ T1610] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.368937][ T1610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.385788][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.387747][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.390280][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.392044][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.394357][ T1610] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.395525][ T1610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.397307][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.400387][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.402178][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.404049][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.405869][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.407823][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.411791][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.413533][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.415332][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.417240][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.419586][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.421748][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.424670][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.426497][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.429062][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.435615][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.439211][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.441117][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.444584][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.445937][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.453014][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.454624][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.460381][ T4340] device veth0_vlan entered promiscuous mode [ 33.464422][ T4342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.470830][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.473012][ T4340] device veth1_vlan entered promiscuous mode [ 33.499883][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.501869][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.503702][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.505509][ T1610] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.512070][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.514181][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.529744][ T4340] device veth0_macvtap entered promiscuous mode [ 33.535649][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.537488][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.539602][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.541564][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.554357][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.558474][ T4340] device veth1_macvtap entered promiscuous mode [ 33.563906][ T4331] device veth0_vlan entered promiscuous mode [ 33.571943][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.575215][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.576966][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.579612][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.587016][ T4331] device veth1_vlan entered promiscuous mode [ 33.589617][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.591237][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.593240][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.596436][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.601770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.603809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.605607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.607134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.613927][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.616701][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.621082][ T4340] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.622811][ T4340] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.624644][ T4340] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.626253][ T4340] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.654894][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.656799][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.659599][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.671966][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.673838][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.677797][ T4331] device veth0_macvtap entered promiscuous mode [ 33.682884][ T4331] device veth1_macvtap entered promiscuous mode [ 33.693380][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.695276][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.697108][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.700431][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.702512][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.704140][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.717760][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.720582][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.722332][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.724311][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.726573][ T4330] device veth0_vlan entered promiscuous mode [ 33.743273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.745181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.747204][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.749613][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.757149][ T4342] device veth0_vlan entered promiscuous mode [ 33.760609][ T4330] device veth1_vlan entered promiscuous mode [ 33.765876][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.770509][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.773162][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.775102][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.777007][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.780432][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.782420][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.784251][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.787190][ T4332] device veth0_vlan entered promiscuous mode [ 33.797060][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.799282][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.801037][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.804097][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.806261][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.810586][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.814799][ T4332] device veth1_vlan entered promiscuous mode [ 33.822839][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.824585][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.826317][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.829450][ T4342] device veth1_vlan entered promiscuous mode [ 33.845553][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.847482][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.849848][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.851655][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.855765][ T4331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.857452][ T4331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.862972][ T4331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.864737][ T4331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.872616][ T4330] device veth0_macvtap entered promiscuous mode [ 33.876855][ T4332] device veth0_macvtap entered promiscuous mode [ 33.881218][ T4330] device veth1_macvtap entered promiscuous mode [ 33.882982][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.884846][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.886693][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.889078][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.890935][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.897311][ T4332] device veth1_macvtap entered promiscuous mode [ 33.899892][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.903962][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.911750][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.913595][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.915444][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.921484][ T4342] device veth0_macvtap entered promiscuous mode [ 33.924041][ T4342] device veth1_macvtap entered promiscuous mode [ 33.931075][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.933254][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.935358][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.937657][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.940847][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.943442][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.945156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.947014][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.949681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.952025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.953742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.959610][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.961535][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.963257][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.965454][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.967510][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.970618][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.973447][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.982592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.984579][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.001219][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.003152][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.004686][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.006797][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.010801][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.015048][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.016543][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.023042][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.025129][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.026899][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.029834][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.031527][ T4332] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.033433][ T4332] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.036056][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.037610][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.040046][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.041693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.043578][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.045494][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.049452][ T4330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.053388][ T4330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.055229][ T4330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.056877][ T4330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.066568][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.071749][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.073692][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.075731][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.077748][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.080884][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.082726][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.084499][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.087173][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.094940][ T4332] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.096728][ T4332] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.099270][ T4332] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.100965][ T4332] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.103968][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.105751][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.112367][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.112818][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.113987][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.115797][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.119653][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.121679][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.123617][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.125643][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.127607][ T4342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.130193][ T4342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.132939][ T4342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.134551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.136358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.139484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.190781][ T4342] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.192717][ T4342] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.194559][ T4342] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.196405][ T4342] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.219760][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.221406][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.223148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.236405][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.238684][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.240161][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.282415][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.284144][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.284287][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.287248][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.295637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.297649][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.643933][ T4437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.647308][ T4437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.648242][ T4338] Bluetooth: hci2: command 0x041b tx timeout [ 34.649302][ T4347] Bluetooth: hci0: command 0x041b tx timeout [ 34.650119][ T4338] Bluetooth: hci1: command 0x041b tx timeout [ 34.662733][ T182] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.663924][ T4453] loop0: detected capacity change from 0 to 512 [ 34.673464][ T182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.675162][ T182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.676958][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.680958][ T4437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.682594][ T4437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.684181][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.704130][ T4453] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 34.708752][ T4453] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1: invalid indirect mapped block 256 (level 1) [ 34.712408][ T4453] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1: invalid indirect mapped block 2683928664 (level 1) [ 34.716106][ T4453] EXT4-fs (loop0): 1 truncate cleaned up [ 34.717727][ T4453] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 34.728094][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 34.729502][ T4347] Bluetooth: hci3: command 0x041b tx timeout [ 34.777842][ T4464] loop1: detected capacity change from 0 to 1024 [ 34.833864][ T4465] capability: warning: `syz.3.4' uses deprecated v2 capabilities in a way that may be insecure [ 34.842101][ T4464] hfsplus: catalog record size mismatch (type 4, got 20, expected 24) [ 34.863088][ T4468] loop4: detected capacity change from 0 to 512 [ 34.864835][ T4468] ======================================================= [ 34.864835][ T4468] WARNING: The mand mount option has been deprecated and [ 34.864835][ T4468] and is ignored by this kernel. Remove the mand [ 34.864835][ T4468] option from the mount to silence this warning. [ 34.864835][ T4468] ======================================================= [ 34.874541][ T4468] EXT4-fs: Ignoring removed i_version option [ 35.156473][ T4468] EXT4-fs (loop4): Test dummy encryption mode enabled [ 35.207534][ T4468] EXT4-fs (loop4): 1 truncate cleaned up [ 35.210393][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 35.213182][ T4468] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 35.220931][ T4468] EXT4-fs (loop4): unmounting filesystem. [ 35.247318][ T4475] loop1: detected capacity change from 0 to 512 [ 35.264718][ T4475] ext4: Unknown parameter 'nomblk_io_submit.nouid32' [ 35.301380][ T4482] loop3: detected capacity change from 0 to 512 [ 35.317259][ T4320] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 35.679776][ T4482] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 35.720225][ T4485] rxe_eth0 speed is unknown, defaulting to 1000 [ 35.731901][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 35.829208][ T4502] loop2: detected capacity change from 0 to 4096 [ 35.836219][ T4502] EXT4-fs: inline encryption not supported [ 35.853518][ T4502] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.858710][ T113] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.873500][ T4502] EXT4-fs (loop2): shut down requested (2) [ 35.896538][ T4340] EXT4-fs (loop2): unmounting filesystem. [ 35.981845][ T4513] loop2: detected capacity change from 0 to 512 [ 35.994399][ T4513] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 35.996571][ T4513] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.24: invalid indirect mapped block 256 (level 1) [ 36.007819][ T4513] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.24: invalid indirect mapped block 2683928664 (level 1) [ 36.014603][ T4513] EXT4-fs (loop2): 1 truncate cleaned up [ 36.016141][ T4513] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.067386][ T113] usb 1-1: config 1 has an invalid interface number: 8 but max is 1 [ 36.074285][ T113] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.079844][ T113] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 36.086819][ T113] usb 1-1: config 1 has no interface number 0 [ 36.110210][ T113] usb 1-1: config 1 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 36.122355][ T113] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 36.125894][ T4521] netlink: 224 bytes leftover after parsing attributes in process `syz.1.27'. [ 36.125981][ T113] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.138936][ T4523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.141031][ T113] usb 1-1: Product: syz [ 36.141945][ T113] usb 1-1: Manufacturer: syz [ 36.142732][ T113] usb 1-1: SerialNumber: syz [ 36.150770][ T4523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.452385][ T113] cdc_ncm 1-1:1.8: CDC Union missing and no IAD found [ 36.458139][ T4528] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 36.460169][ T113] cdc_ncm 1-1:1.8: bind() failure [ 36.494278][ T4532] loop4: detected capacity change from 0 to 128 [ 36.498871][ T4528] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 36.507678][ T4532] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 36.515468][ T4532] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 36.549463][ T4535] loop4: detected capacity change from 0 to 512 [ 36.553020][ T4535] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 36.553976][ T4536] loop1: detected capacity change from 0 to 256 [ 36.563748][ T4535] EXT4-fs (loop4): 1 truncate cleaned up [ 36.566407][ T4535] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 36.576392][ T4536] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb9756464, utbl_chksum : 0xe619d30d) [ 36.651663][ T113] usb 1-1: USB disconnect, device number 2 [ 36.653844][ T4539] exfat: Bad value for 'uid' [ 36.693079][ T4320] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 36.728296][ T4338] Bluetooth: hci1: command 0x040f tx timeout [ 36.728323][ T4347] Bluetooth: hci0: command 0x040f tx timeout [ 36.729456][ T4338] Bluetooth: hci2: command 0x040f tx timeout [ 36.836697][ T4338] Bluetooth: hci4: command 0x040f tx timeout [ 36.838694][ T4338] Bluetooth: hci3: command 0x040f tx timeout [ 36.843996][ T4340] EXT4-fs (loop2): unmounting filesystem. [ 36.985077][ T4545] syz.2.35 uses obsolete (PF_INET,SOCK_PACKET) [ 37.025036][ T4549] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 37.052017][ T4549] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 37.064247][ T4551] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 37.070864][ T4551] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.38: invalid indirect mapped block 256 (level 1) [ 37.074467][ T4551] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.38: invalid indirect mapped block 2683928664 (level 1) [ 37.085706][ T4551] EXT4-fs (loop2): 1 truncate cleaned up [ 37.090240][ T4551] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 37.141061][ T4554] tap0: tun_chr_ioctl cmd 35108 [ 37.282400][ T4558] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:477: comm syz.2.38: Invalid block bitmap block 3 in block_group 0 [ 37.551042][ T4564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.557502][ T4564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.595207][ T4567] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 37.605586][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 37.613283][ T4567] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 37.625197][ T4565] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 37.686430][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 37.689852][ T4573] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 37.694741][ T4573] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.46: invalid indirect mapped block 256 (level 1) [ 37.700937][ T4573] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.46: invalid indirect mapped block 2683928664 (level 1) [ 37.704519][ T4573] EXT4-fs (loop3): 1 truncate cleaned up [ 37.725712][ T4573] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 38.171991][ T4340] EXT4-fs (loop2): unmounting filesystem. [ 38.200163][ T4585] device syzkaller0 entered promiscuous mode [ 38.362451][ T4596] tap0: tun_chr_ioctl cmd 35108 [ 38.538889][ T4599] netlink: 'syz.0.53': attribute type 8 has an invalid length. [ 38.771370][ T4332] EXT4-fs (loop3): unmounting filesystem. [ 38.808291][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 38.818480][ T4338] Bluetooth: hci0: command 0x0419 tx timeout [ 38.820021][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 38.842143][ T4608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.845639][ T4608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.888897][ T4347] Bluetooth: hci3: command 0x0419 tx timeout [ 38.888908][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 39.274066][ T4623] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.276967][ T4623] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 39.280810][ T4623] EXT4-fs (loop1): 1 truncate cleaned up [ 39.282237][ T4623] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 39.305683][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 39.337053][ T4626] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 39.339658][ T4626] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.65: invalid indirect mapped block 256 (level 1) [ 39.343374][ T4626] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.65: invalid indirect mapped block 2683928664 (level 1) [ 39.347275][ T4626] EXT4-fs (loop1): 1 truncate cleaned up [ 39.351671][ T4626] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 39.508261][ T4526] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 39.747231][ T4526] usb 1-1: config 0 has an invalid interface number: 11 but max is 0 [ 39.749218][ T4526] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 39.751319][ T4526] usb 1-1: config 0 has no interface number 0 [ 39.752735][ T4526] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 39.755960][ T4526] usb 1-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 255, setting to 64 [ 39.760283][ T4526] usb 1-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.763025][ T4526] usb 1-1: config 0 interface 11 has no altsetting 0 [ 39.764523][ T4526] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 39.767047][ T4526] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.785085][ T4526] usb 1-1: config 0 descriptor?? [ 39.792429][ T4621] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 39.798957][ T4526] keyspan 1-1:0.11: Keyspan 2 port adapter converter detected [ 39.800492][ T4526] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 87 [ 39.803136][ T4526] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 81 [ 39.804760][ T4526] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 82 [ 39.806216][ T4526] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 1 [ 39.810582][ T4526] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 2 [ 39.812169][ T4526] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 85 [ 39.813795][ T4526] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 5 [ 39.816601][ T4526] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 39.833609][ T4526] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 83 [ 39.835028][ T4526] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 84 [ 39.836607][ T4526] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 3 [ 39.844514][ T4644] set_capacity_and_notify: 8 callbacks suppressed [ 39.844524][ T4644] loop2: detected capacity change from 0 to 128 [ 39.847137][ T4526] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 4 [ 39.865081][ T4644] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 39.867228][ T4526] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 86 [ 39.881014][ T4526] keyspan 1-1:0.11: found no endpoint descriptor for endpoint 6 [ 39.885888][ T4526] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 39.895470][ T4644] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 40.014154][ T4621] loop0: detected capacity change from 0 to 1024 [ 40.042556][ T4621] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 40.047163][ T4409] usb 1-1: USB disconnect, device number 3 [ 40.051611][ T4409] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 40.142711][ T4653] netlink: 'syz.2.73': attribute type 8 has an invalid length. [ 40.405209][ T4330] EXT4-fs (loop1): unmounting filesystem. [ 40.407185][ T4409] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 40.409951][ T4409] keyspan 1-1:0.11: device disconnected [ 40.466055][ T4658] loop4: detected capacity change from 0 to 512 [ 40.487026][ T4658] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082] [ 40.492622][ T4658] System zones: 0-2, 18-18, 34-34 [ 40.499715][ T4658] EXT4-fs (loop4): 1 orphan inode deleted [ 40.501343][ T4658] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 40.515504][ T4661] tap0: tun_chr_ioctl cmd 35108 [ 40.536827][ T4342] EXT4-fs (loop4): unmounting filesystem. [ 41.023519][ T4670] loop2: detected capacity change from 0 to 4096 [ 41.041971][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 41.055157][ T4670] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 41.058343][ T4670] UDF-fs: Scanning with blocksize 512 failed [ 41.076898][ T4674] loop0: detected capacity change from 0 to 256 [ 41.081196][ T4670] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 41.083322][ T4670] UDF-fs: error (device loop2): udf_read_inode: (ino 1408) failed !bh [ 41.094435][ T4670] UDF-fs: error (device loop2): udf_fill_super: Error in udf_iget, block=96, partition=0 [ 41.211309][ T4680] Bluetooth: MGMT ver 1.22 [ 41.238081][ T4683] loop0: detected capacity change from 0 to 1024 [ 41.251652][ T4683] EXT4-fs: inline encryption not supported [ 41.263732][ T4683] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 41.282780][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 41.321280][ T4688] loop0: detected capacity change from 0 to 512 [ 41.326319][ T4690] loop3: detected capacity change from 0 to 16 [ 41.349954][ T4690] erofs: (device loop3): mounted with root inode @ nid 36. [ 41.355034][ T4688] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 41.363855][ T4690] erofs: (device loop3): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 41.369782][ T4690] erofs: (device loop3): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 41.372090][ T4690] syz.3.84: attempt to access beyond end of device [ 41.372090][ T4690] loop3: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 41.375748][ T4690] syz.3.84: attempt to access beyond end of device [ 41.375748][ T4690] loop3: rw=524288, sector=88, nr_sectors = 48 limit=16 [ 41.378626][ T4690] syz.3.84: attempt to access beyond end of device [ 41.378626][ T4690] loop3: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 41.382784][ T4690] ================================================================== [ 41.384284][ T4690] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x39c/0x494 [ 41.386170][ T4690] Read of size 4096 at addr ffff0000cd344000 by task syz.3.84/4690 [ 41.387916][ T4690] [ 41.388416][ T4690] CPU: 1 PID: 4690 Comm: syz.3.84 Not tainted syzkaller #0 [ 41.389913][ T4690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/23/2026 [ 41.391964][ T4690] Call trace: [ 41.392681][ T4690] dump_backtrace+0x1c4/0x1f0 [ 41.393751][ T4690] show_stack+0x2c/0x3c [ 41.394662][ T4690] __dump_stack+0x30/0x40 [ 41.395552][ T4690] dump_stack_lvl+0xf4/0x15c [ 41.396425][ T4690] print_address_description+0x88/0x218 [ 41.397511][ T4690] print_report+0x50/0x68 [ 41.398450][ T4690] kasan_report+0xa8/0xfc [ 41.399355][ T4690] kasan_check_range+0x258/0x290 [ 41.400400][ T4690] memcpy+0x48/0x90 [ 41.401169][ T4690] z_erofs_transform_plain+0x39c/0x494 [ 41.402300][ T4690] z_erofs_decompress+0x9c/0xd4 [ 41.403356][ T4690] z_erofs_decompress_queue+0x103c/0x1bf4 [ 41.404591][ T4690] z_erofs_runqueue+0x1508/0x16a8 [ 41.405633][ T4690] z_erofs_read_folio+0x2dc/0x5cc [ 41.406816][ T4690] filemap_read_folio+0x134/0x384 [ 41.408000][ T4690] filemap_fault+0x990/0xe98 [ 41.409071][ T4690] __do_fault+0x11c/0x3d8 [ 41.410087][ T4690] handle_mm_fault+0x18d8/0x3018 [ 41.411235][ T4690] __get_user_pages+0x340/0x770 [ 41.412327][ T4690] populate_vma_page_range+0x1f4/0x298 [ 41.413552][ T4690] mprotect_fixup+0x578/0x610 [ 41.414568][ T4690] __arm64_sys_mprotect+0x5f0/0xa10 [ 41.415745][ T4690] invoke_syscall+0x98/0x290 [ 41.416807][ T4690] el0_svc_common+0x13c/0x258 [ 41.417777][ T4690] do_el0_svc+0x5c/0x134 [ 41.418709][ T4690] el0_svc+0x58/0x12c [ 41.419600][ T4690] el0t_64_sync_handler+0x84/0xf0 [ 41.420666][ T4690] el0t_64_sync+0x18c/0x190 [ 41.421644][ T4690] [ 41.422108][ T4690] The buggy address belongs to the physical page: [ 41.423287][ T4690] page:00000000920e9d4c refcount:0 mapcount:-128 mapping:0000000000000000 index:0x0 pfn:0x10d344 [ 41.425445][ T4690] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 41.426818][ T4690] raw: 05ffc00000000000 fffffc0003350e08 fffffc0003134b88 0000000000000000 [ 41.428555][ T4690] raw: 0000000000000000 0000000000000001 00000000ffffff7f 0000000000000000 [ 41.430085][ T4690] page dumped because: kasan: bad access detected [ 41.431459][ T4690] [ 41.431873][ T4690] Memory state around the buggy address: [ 41.432938][ T4690] ffff0000cd343f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 41.434516][ T4690] ffff0000cd343f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 41.435994][ T4690] >ffff0000cd344000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 41.437472][ T4690] ^ [ 41.438263][ T4690] ffff0000cd344080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 41.439855][ T4690] ffff0000cd344100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 41.441413][ T4690] ================================================================== [ 41.465967][ T4331] EXT4-fs (loop0): unmounting filesystem. [ 41.467890][ T4690] Disabling lock debugging due to kernel taint [ 41.470762][ T4690] syz.3.84: attempt to access beyond end of device [ 41.470762][ T4690] loop3: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 41.777190][ T4526] rxe_eth0 speed is unknown, defaulting to 1000