last executing test programs: 1m31.698124909s ago: executing program 0 (id=339): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) fallocate(r0, 0x0, 0x5, 0x8ffff) 1m31.413930892s ago: executing program 2 (id=341): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f000000a5c0)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000006780)=[{0x0}, {0xfffffffffffffffe}], 0x2}, 0xd008}], 0x2, 0x0, 0x0) 1m30.790196572s ago: executing program 2 (id=343): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) clock_nanosleep(0x2, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x1101) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x168}, 0x1, 0x0, 0x0, 0x10810}, 0x48080) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000040)={0x0, 0x7, 0x6, 0x3, 0x8, "aa26f86caa46c42a"}) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mount$overlay(0x0, &(0x7f0000000040)='./file0/file1\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000000080)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x40040) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x400) 1m30.61171482s ago: executing program 0 (id=344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="cc0000000001050500000000000000000a0000003c0002802c00018014000309ff"], 0xcc}, 0x1, 0x0, 0x0, 0x4041}, 0x0) 1m30.048410217s ago: executing program 2 (id=345): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'ip6_vti0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={@local, 0x40, r2}) socket$nl_xfrm(0x10, 0x3, 0x6) write$tun(r0, &(0x7f0000000500)={@void, @void, @ipv6=@generic={0x0, 0x6, '\x00', 0x18, 0x33, 0x40, @remote, @local, {[], "3b040000000012340000000100"/24}}}, 0x40) 1m27.65493744s ago: executing program 0 (id=351): socket$nl_route(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0xf) ioctl(r0, 0x400455c8, &(0x7f0000000008)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x4, &(0x7f0000000200)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xfd) 1m27.23326897s ago: executing program 2 (id=352): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x9) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100173400ffffff00f7ffffff000000f3e7f20000000200000000000600", "b732673e181c208227fffff2e500000f0000000e000200", [0x40000000004]}) unlink(&(0x7f0000000240)='./file1\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) 1m27.105868556s ago: executing program 0 (id=354): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x81}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) clock_gettime(0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r3, r3, 0x0, 0xe3aa6ea) 1m25.288031782s ago: executing program 0 (id=359): socket$inet6_tcp(0xa, 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400008bf) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$session_to_parent(0x12) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x400000, 0x0, 0x1}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) dup3(0xffffffffffffffff, r5, 0x0) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x10) fcntl$lock(r3, 0x24, &(0x7f0000000000)={0x2, 0x0, 0x4, 0x7}) flock(0xffffffffffffffff, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0xf8, 0x0, 0xfeffffff, 0x1a0, 0x0, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xff000000, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x0, 0x1}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0xc2, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key=0xd}}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'erspan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x4}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2c}, @multicast1, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr=0x20, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 1m23.580701852s ago: executing program 2 (id=362): socket$inet6_tcp(0xa, 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400008bf) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x400000, 0x0, 0x1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$lock(r2, 0x24, &(0x7f0000000000)={0x2, 0x0, 0x4, 0x7}) flock(0xffffffffffffffff, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0xf8, 0x0, 0xfeffffff, 0x1a0, 0x0, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xff000000, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x0, 0x1}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0xc2, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key=0xd}}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'erspan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x4}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2c}, @multicast1, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr=0x20, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 1m22.421922297s ago: executing program 0 (id=365): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) 1m22.034679535s ago: executing program 32 (id=365): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) 1m22.005733777s ago: executing program 2 (id=368): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000210557510110f3020fda90102"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x703d26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x33a20, 0x40a18}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4004}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) 1m22.005283047s ago: executing program 33 (id=368): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000210557510110f3020fda90102"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x703d26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x33a20, 0x40a18}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4004}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x8000002) 12.598198445s ago: executing program 5 (id=542): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x43, 0x0, 0x3}, 0x10) 12.256983881s ago: executing program 5 (id=543): keyctl$instantiate(0xc, 0x0, 0x0, 0x19, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r0, 0x0, 0x20000818) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES64, @ANYBLOB=',rootmode', @ANYRESDEC=0x0]) r1 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000080)={0x30a32c2, 0x1, @ofdm={0x4, 0x8, 0x12, 0xd, 0x5, 0x0, 0x3}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 11.721853946s ago: executing program 5 (id=548): socket$inet6_tcp(0xa, 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400008bf) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x400000, 0x0, 0x1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$lock(r1, 0x24, &(0x7f0000000000)={0x2, 0x0, 0x4, 0x7}) flock(0xffffffffffffffff, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x3d0, 0xf8, 0x0, 0xfeffffff, 0x1a0, 0x0, 0x338, 0x338, 0xffffffff, 0x338, 0x338, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0xff000000, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x0, 0x1}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0xc2, 0x2}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @gre_key=0xd}}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'erspan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x4}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2c}, @multicast1, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @private, @rand_addr=0x20, @gre_key, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 9.589916527s ago: executing program 4 (id=555): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x2300) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, 0x0) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r4, 0x28}, 0x0, &(0x7f0000000b80)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd009", 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) 8.202146272s ago: executing program 6 (id=560): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) 7.684296477s ago: executing program 3 (id=562): openat$kvm(0xffffffffffffff9c, 0x0, 0x16481, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000)={0x4dd49c4f, 0x1, 0xa}, &(0x7f0000001e80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001840)='./file2\x00', 0x10000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") rename(&(0x7f0000000140)='./file2\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x104) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r5, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 6.677849524s ago: executing program 6 (id=564): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804808, &(0x7f0000001600)=ANY=[@ANYRES32=r1, @ANYRES8=r1, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRES32=r1, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES8=r1, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r3, 0x10000}}, 0xa) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.624058627s ago: executing program 3 (id=565): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x400000, 0x0, 0x1}, 0x10) dup3(r2, r3, 0x0) 6.55517823s ago: executing program 1 (id=566): sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400c0}, 0xd7983ab608da75d7) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x49, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x79, 0x7, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x9b54, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000183, 0x2, 0x7, 0xf2, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x8000b, 0x7, 0xfffffffffffffff8, 0x9, 0x4], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.368844229s ago: executing program 6 (id=567): unshare(0x22020400) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x2, 0x7, 0x4, 0x4, "1afa86d32101b52ddf370cbdb2b64700", 0x200}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = dup(r0) fcntl$lock(r1, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) 6.337026311s ago: executing program 1 (id=568): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000028c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) ptrace(0x10, 0x0) ptrace$peeksig(0x4209, r3, &(0x7f0000000000)={0x4dd49c4f, 0x1}, 0x0) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001840)='./file2\x00', 0x10000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file2\x00', &(0x7f0000001880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x104) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r6, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 5.401328085s ago: executing program 3 (id=569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.261913351s ago: executing program 6 (id=570): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000640)='./file7\x00', 0x3000000, &(0x7f00000004c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0x4, 0x521, &(0x7f0000000d80)="$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") sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x8040044) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x5) 5.217971983s ago: executing program 1 (id=571): keyctl$instantiate(0xc, 0x0, 0x0, 0x19, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r0, 0x0, 0x20000818) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES64, @ANYBLOB=',rootmode', @ANYRESDEC=0x0]) r1 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f0000000080)={0x30a32c2, 0x1, @ofdm={0x4, 0x8, 0x12, 0xd, 0x5, 0x0, 0x3}}) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 4.914449208s ago: executing program 3 (id=572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x4000040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x1eb) mount(0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x24, &(0x7f0000000300)={0x16, 0xdc000000, 0x3}) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000202, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r4, 0x65, 0x6, 0x0, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000440)={0x50, 0x0, r6, {0x7, 0x28, 0x7fffffff, 0x1000, 0x4, 0xf, 0x0, 0x2, 0x0, 0x0, 0x8, 0xcaab}}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) fsopen(0x0, 0x1) 3.613939559s ago: executing program 6 (id=573): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, 0x0, 0x0) ptrace(0x10, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) 3.59399988s ago: executing program 1 (id=574): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) 2.917829072s ago: executing program 5 (id=575): openat$kvm(0xffffffffffffff9c, 0x0, 0x16481, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r3, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000)={0x4dd49c4f, 0x1, 0xa}, &(0x7f0000001e80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]) ptrace$pokeuser(0x6, 0x0, 0x388, 0x41d9fda7) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001840)='./file2\x00', 0x10000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") rename(&(0x7f0000000140)='./file2\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x104) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r5, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 2.256138513s ago: executing program 4 (id=576): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000400)=0xf) ioctl(r0, 0x400455c8, &(0x7f0000000008)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) clock_gettime(0x4, &(0x7f0000000200)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xfd) 2.256027273s ago: executing program 4 (id=577): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000240)='./file0\x00', 0x2, 0x85) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.255737233s ago: executing program 3 (id=578): sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40400c0}, 0xd7983ab608da75d7) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x49, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x79, 0x7, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x9b54, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000183, 0x2, 0x7, 0xf2, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x8000b, 0x7, 0xfffffffffffffff8, 0x9, 0x4], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.255521423s ago: executing program 6 (id=579): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r3, &(0x7f00000005c0)="306663353a313232373a3f7092c0f0bc085a193376cf620afaf6379a248d1d6534058f1095109da34b6d6537a6e78b0dc4b7bc0b", 0x34) 2.255384483s ago: executing program 4 (id=580): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x400000, 0x0, 0x1}, 0x10) dup3(r2, r3, 0x0) 1.848300972s ago: executing program 1 (id=581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 1.501253429s ago: executing program 5 (id=582): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r4, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000028c0), 0x0, 0x0, 0x0, 0x11000000}, 0x0) ptrace(0x10, 0x0) ptrace$peeksig(0x4209, r3, &(0x7f0000000000)={0x4dd49c4f, 0x1}, 0x0) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000001840)='./file2\x00', 0x10000, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file2\x00', &(0x7f0000001880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x104) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r6, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.28565393s ago: executing program 1 (id=583): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x81}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) clock_gettime(0x4, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x81) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r5, r5, 0x0, 0xe3aa6ea) 348.678633ms ago: executing program 5 (id=584): keyctl$instantiate(0xc, 0x0, 0x0, 0x19, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) landlock_create_ruleset(0x0, 0x0, 0x3) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) sendmsg$kcm(r0, 0x0, 0x20000818) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES64, @ANYBLOB=',rootmode', @ANYRESDEC=0x0]) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 308.259645ms ago: executing program 4 (id=585): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r0, 0x29, 0x24, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r0, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x10, 0x119, 0xc}], 0x10}}], 0x1, 0x4000010) 2.01431ms ago: executing program 4 (id=586): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) close(r2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 0s ago: executing program 3 (id=587): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1ffffc, 0xb66, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r3 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x2300) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, 0x0) r4 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0282020100ccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, r2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000940)={r4, 0x28}, 0x0, &(0x7f0000000b80)="cb44032c2a3a518de9000000c11a536275a146d65e2988ef1a4992f9a2675b2853d82c107d0fd009", 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) kernel console output (not intermixed with test programs): 6656][ T4186] device bridge_slave_1 entered promiscuous mode [ 62.945989][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.955581][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.964118][ T4185] device bridge_slave_1 entered promiscuous mode [ 62.983666][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.991251][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.000671][ T4187] device bridge_slave_0 entered promiscuous mode [ 63.021054][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.045190][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.052590][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.061311][ T4187] device bridge_slave_1 entered promiscuous mode [ 63.070732][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.118633][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.127074][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.136281][ T4188] device bridge_slave_0 entered promiscuous mode [ 63.145856][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.163080][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.176317][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.192051][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.200236][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.208553][ T4188] device bridge_slave_1 entered promiscuous mode [ 63.216295][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.223516][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.234461][ T4192] device bridge_slave_0 entered promiscuous mode [ 63.252233][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.264770][ T4186] team0: Port device team_slave_0 added [ 63.279134][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.287247][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.296447][ T4192] device bridge_slave_1 entered promiscuous mode [ 63.324354][ T4186] team0: Port device team_slave_1 added [ 63.348370][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.360824][ T4185] team0: Port device team_slave_0 added [ 63.382041][ T4187] team0: Port device team_slave_0 added [ 63.390427][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.402535][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.419814][ T4185] team0: Port device team_slave_1 added [ 63.439462][ T4187] team0: Port device team_slave_1 added [ 63.447436][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.471582][ T4188] team0: Port device team_slave_0 added [ 63.479862][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.487190][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.514040][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.540257][ T4188] team0: Port device team_slave_1 added [ 63.546798][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.553780][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.580484][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.593395][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.601265][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.629984][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.667325][ T4192] team0: Port device team_slave_0 added [ 63.673630][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.681752][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.709086][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.732615][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.740638][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.777738][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.794049][ T4192] team0: Port device team_slave_1 added [ 63.825000][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.838020][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.870523][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.888292][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.896768][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.927120][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.945277][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.952913][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.981184][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.013676][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.020847][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.048003][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.069950][ T4186] device hsr_slave_0 entered promiscuous mode [ 64.078095][ T4186] device hsr_slave_1 entered promiscuous mode [ 64.106973][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.114172][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.143751][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.172980][ T4185] device hsr_slave_0 entered promiscuous mode [ 64.179856][ T4185] device hsr_slave_1 entered promiscuous mode [ 64.187017][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.197518][ T4185] Cannot create hsr debugfs directory [ 64.229073][ T4187] device hsr_slave_0 entered promiscuous mode [ 64.236928][ T4187] device hsr_slave_1 entered promiscuous mode [ 64.245834][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 64.250941][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.264492][ T4187] Cannot create hsr debugfs directory [ 64.282967][ T4188] device hsr_slave_0 entered promiscuous mode [ 64.290842][ T4188] device hsr_slave_1 entered promiscuous mode [ 64.299262][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.308558][ T4188] Cannot create hsr debugfs directory [ 64.324680][ T21] Bluetooth: hci2: command 0x0409 tx timeout [ 64.334905][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 64.343710][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 64.351069][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 64.363292][ T4192] device hsr_slave_0 entered promiscuous mode [ 64.370905][ T4192] device hsr_slave_1 entered promiscuous mode [ 64.378955][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.388074][ T4192] Cannot create hsr debugfs directory [ 64.737583][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.752307][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.763852][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.778355][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.843234][ T4192] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.864320][ T4192] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.874398][ T4192] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.890009][ T4192] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.945970][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.974060][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.999286][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.008705][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.018355][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.029968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.039550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.053969][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.100530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.116681][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.127012][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.134289][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.156285][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.165707][ T4185] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.189784][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.198787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.208067][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.217381][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.224773][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.232922][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.242622][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.265458][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.272657][ T4185] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.293845][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.303445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.312773][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.325715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.334517][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.345532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.353255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.364107][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.378100][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.391154][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.400571][ T4185] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.410477][ T4185] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.425539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.433755][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.442563][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.453696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.466525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.475801][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.484297][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.493370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.518785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.530394][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.539236][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.546364][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.556752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.566490][ T4188] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.584122][ T4188] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.596055][ T4188] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.614784][ T4188] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.645008][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.666916][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.678365][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.712295][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.721320][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.731831][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.761478][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.771062][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.788693][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.801804][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.819330][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.871289][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.891630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.902775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.922842][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.935333][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.957339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.966005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.984820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.993832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.003605][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.011025][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.022572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.033567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.045356][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.052820][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.061709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.078358][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.103966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.112493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.128798][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.143655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.156684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.167687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.181257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.204762][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.213643][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.223835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.232330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.250193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.259132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.269255][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.283352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.293275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.306023][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.325169][ T4228] Bluetooth: hci0: command 0x041b tx timeout [ 66.337923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.347410][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.360593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.369599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.379491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.387208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.407160][ T4186] device veth0_vlan entered promiscuous mode [ 66.415009][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 66.421294][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 66.425313][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 66.431301][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.444795][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 66.454092][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.468288][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.477658][ T1239] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.484792][ T1239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.493279][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.502664][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.511591][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.518814][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.527736][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.539459][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.552027][ T4186] device veth1_vlan entered promiscuous mode [ 66.596066][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.616553][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.633092][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.643489][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.672032][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.698559][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.710005][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.718339][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.727664][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.739421][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.748404][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.758090][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.768049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.778366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.794011][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.818672][ T4192] device veth0_vlan entered promiscuous mode [ 66.828967][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.838341][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.848156][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.857366][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.867711][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.875719][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.890646][ T4186] device veth0_macvtap entered promiscuous mode [ 66.914052][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.922829][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.935266][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.947568][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.957497][ T1239] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.964880][ T1239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.973921][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.983728][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.992965][ T1239] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.000331][ T1239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.011334][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.021627][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.030506][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.039068][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.066394][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.078246][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.101883][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.110527][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.120174][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.131168][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.140938][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.149796][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.159054][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.168611][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.178543][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.187589][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.196903][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.207455][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.216183][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.226105][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.235502][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.244024][ T4192] device veth1_vlan entered promiscuous mode [ 67.253612][ T4186] device veth1_macvtap entered promiscuous mode [ 67.266084][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.306554][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.320716][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.336280][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.353230][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.361794][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.387817][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.401078][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.413683][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.423105][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.432791][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.441408][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.451347][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.459968][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.476088][ T4187] device veth0_vlan entered promiscuous mode [ 67.484446][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.493848][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.505966][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.514995][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.527712][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.545233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.567929][ T4192] device veth0_macvtap entered promiscuous mode [ 67.592005][ T4187] device veth1_vlan entered promiscuous mode [ 67.663551][ T4192] device veth1_macvtap entered promiscuous mode [ 67.672521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.681162][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.691300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.700760][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.708558][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.733673][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.753493][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.769244][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.782573][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.798679][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.809709][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.822227][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.832753][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.841713][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.850679][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.859029][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.868306][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.879976][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.889286][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.905123][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.921681][ T4187] device veth0_macvtap entered promiscuous mode [ 67.950516][ T4192] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.971030][ T4192] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.984065][ T4192] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.995763][ T4192] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.006663][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.016936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.031418][ T4187] device veth1_macvtap entered promiscuous mode [ 68.056087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.069753][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.118639][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.131128][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.154467][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.170484][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.182255][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.196037][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.207518][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.231202][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.242946][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.253448][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.265422][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.276985][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.290545][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.301571][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.314891][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.323852][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.366868][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.375453][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.390641][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.406020][ T4230] Bluetooth: hci0: command 0x040f tx timeout [ 68.406284][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.422848][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.432285][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.468048][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.476401][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.486754][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 68.488220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.494098][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 68.507517][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 68.508341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.513598][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 68.530975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.540592][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.549420][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.565701][ T4185] device veth0_vlan entered promiscuous mode [ 68.576314][ T4250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.594372][ T4250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.608513][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.650544][ T4188] device veth0_vlan entered promiscuous mode [ 68.675486][ T4185] device veth1_vlan entered promiscuous mode [ 68.692420][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.694921][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.712516][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.732955][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.746479][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.787367][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.796839][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.807219][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.815957][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.845627][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.852951][ T4188] device veth1_vlan entered promiscuous mode [ 68.854487][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.892255][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.913850][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.922774][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.944427][ T4185] device veth0_macvtap entered promiscuous mode [ 68.971254][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.991596][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.002719][ T1239] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.053423][ T4185] device veth1_macvtap entered promiscuous mode [ 69.070771][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.077862][ T4188] device veth0_macvtap entered promiscuous mode [ 69.086777][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.098351][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.104963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.117041][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.130203][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.148059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.158395][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.168359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.205043][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.226266][ T4188] device veth1_macvtap entered promiscuous mode [ 69.254969][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.293631][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.302819][ T4273] loop2: detected capacity change from 0 to 128 [ 69.305534][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.322282][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.333103][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.345407][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.357629][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.385423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.393862][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.403659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.419248][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.432651][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.443071][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.455406][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.466221][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.477116][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.491260][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.510129][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.528695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.586506][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.610399][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.617819][ T4278] loop0: detected capacity change from 0 to 512 [ 69.642210][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.653654][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.692992][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.705340][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.717907][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.729269][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.739977][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.751380][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.762881][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.774613][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.787638][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.808269][ T4278] EXT4-fs (loop0): Test dummy encryption mode enabled [ 69.832156][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.841918][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.873010][ T4278] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.882345][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.907854][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.921223][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.925539][ T4278] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 69.937285][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.970270][ T4278] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 69.972957][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.002561][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.019384][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.034650][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.062342][ T4290] loop1: detected capacity change from 0 to 1024 [ 70.068095][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.094819][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.113467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.119065][ T4290] EXT4-fs (loop1): Ignoring removed nobh option [ 70.172800][ T4290] EXT4-fs (loop1): Ignoring removed bh option [ 70.217612][ T4290] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 70.228182][ T4290] System zones: 0-1, 3-12 [ 70.243038][ T4290] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,sysvgroups,errors=remount-ro,stripe=0x0000000000000011,bh,debug,. Quota mode: none. [ 70.270669][ T4188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.280775][ T4188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.290229][ T4188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.300610][ T4188] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.387782][ T4290] EXT4-fs error (device loop1): ext4_check_all_de:667: inode #12: block 7: comm syz.1.13: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 70.436186][ T4290] EXT4-fs (loop1): Remounting filesystem read-only [ 70.458093][ T4290] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2812: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 70.477425][ T4298] EXT4-fs error (device loop1): ext4_read_inline_dir:1635: inode #12: block 7: comm syz.1.13: path /2/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=112 fake=0 [ 70.500425][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 70.559797][ T4298] EXT4-fs (loop1): Remounting filesystem read-only [ 70.568619][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 70.582371][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 70.589746][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 70.647791][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 70.669926][ T4250] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.680332][ T625] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.719379][ T625] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.723893][ T4250] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.758251][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.770402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.849820][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.865901][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.866463][ T1239] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.900503][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.920918][ T1239] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.935246][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.156841][ T4317] FAULT_INJECTION: forcing a failure. [ 71.156841][ T4317] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 71.170854][ T4317] CPU: 0 PID: 4317 Comm: syz.0.18 Not tainted syzkaller #0 [ 71.178801][ T4317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.189238][ T4317] Call Trace: [ 71.192884][ T4317] [ 71.192915][ T4317] dump_stack_lvl+0x188/0x250 [ 71.192942][ T4317] ? show_regs_print_info+0x20/0x20 [ 71.192960][ T4317] ? load_image+0x410/0x410 [ 71.192983][ T4317] ? mark_lock+0x94/0x320 [ 71.193003][ T4317] should_fail+0x383/0x4b0 [ 71.193028][ T4317] prepare_alloc_pages+0x1e3/0x5b0 [ 71.193056][ T4317] __alloc_pages+0x11b/0x480 [ 71.193078][ T4317] ? zone_statistics+0x170/0x170 [ 71.193101][ T4317] ? rcu_lock_acquire+0x30/0x30 [ 71.193123][ T4317] ? alloc_pages+0x452/0x560 [ 71.193147][ T4317] __get_free_pages+0x8/0x30 [ 71.193165][ T4317] __tlb_remove_page_size+0x1f2/0x3f0 [ 71.193191][ T4317] unmap_page_range+0xfcf/0x2410 [ 71.193258][ T4317] unmap_vmas+0x131/0x250 [ 71.193277][ T4317] ? unmap_page_range+0x2410/0x2410 [ 71.193293][ T4317] ? __mutex_lock_common+0x435/0x2400 [ 71.193313][ T4317] ? exit_mm_release+0x16/0x30 [ 71.193339][ T4317] exit_mmap+0x3b9/0x640 [ 71.193360][ T4317] ? vm_brk+0x20/0x20 [ 71.193390][ T4317] ? uprobe_clear_state+0x2f6/0x460 [ 71.193413][ T4317] __mmput+0x115/0x390 [ 71.193433][ T4317] exit_mm+0x632/0x7b0 [ 71.193449][ T4317] ? perf_pmu_migrate_context+0xb70/0xb70 [ 71.193476][ T4317] ? do_exit+0x2110/0x2110 [ 71.193493][ T4317] ? __ia32_sys_timer_delete+0x40/0x40 [ 71.193513][ T4317] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 71.193538][ T4317] ? tty_audit_exit+0x149/0x1f0 [ 71.193561][ T4317] do_exit+0x5b8/0x2110 [ 71.193587][ T4317] ? put_task_struct+0x80/0x80 [ 71.193605][ T4317] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 71.193633][ T4317] ? _raw_spin_lock_irq+0xb7/0xf0 [ 71.193656][ T4317] do_group_exit+0x12c/0x2f0 [ 71.193673][ T4317] ? lockdep_hardirqs_on+0x94/0x140 [ 71.193696][ T4317] get_signal+0x7eb/0x12e0 [ 71.193746][ T4317] arch_do_signal_or_restart+0xe6/0x12a0 [ 71.193771][ T4317] ? __local_bh_enable_ip+0x136/0x1c0 [ 71.193788][ T4317] ? _local_bh_enable+0xa0/0xa0 [ 71.193814][ T4317] ? futex_exit_release+0x1c0/0x1c0 [ 71.193836][ T4317] ? get_sigframe_size+0x10/0x10 [ 71.193857][ T4317] ? __context_tracking_exit+0x4c/0x80 [ 71.193887][ T4317] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 71.193911][ T4317] ? exit_to_user_mode_loop+0x3b/0x130 [ 71.193932][ T4317] exit_to_user_mode_loop+0x9e/0x130 [ 71.193950][ T4317] exit_to_user_mode_prepare+0xee/0x180 [ 71.193969][ T4317] syscall_exit_to_user_mode+0x16/0x40 [ 71.193989][ T4317] do_syscall_64+0x58/0xa0 [ 71.194007][ T4317] ? clear_bhb_loop+0x30/0x80 [ 71.194025][ T4317] ? clear_bhb_loop+0x30/0x80 [ 71.194046][ T4317] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.194066][ T4317] RIP: 0033:0x7f249dce5159 [ 71.194083][ T4317] Code: Unable to access opcode bytes at RIP 0x7f249dce512f. [ 71.194092][ T4317] RSP: 002b:00007f249bf3d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 71.194114][ T4317] RAX: 0000000000000001 RBX: 00007f249df6cfa8 RCX: 00007f249dce5159 [ 71.194127][ T4317] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f249df6cfac [ 71.194139][ T4317] RBP: 00007f249df6cfa0 R08: 000695435e054b3e R09: 0000000000000000 [ 71.194152][ T4317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.194163][ T4317] R13: 00007f249df6d038 R14: 00007ffe8addcdf0 R15: 00007ffe8addced8 [ 71.194192][ T4317] [ 71.372967][ T4326] syz.1.21 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 71.528779][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.528931][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.225762][ T4337] loop2: detected capacity change from 0 to 256 [ 73.882578][ T4351] loop1: detected capacity change from 0 to 256 [ 74.414553][ C0] sched: RT throttling activated [ 74.458082][ T4337] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 74.515619][ T4346] netlink: 28 bytes leftover after parsing attributes in process `syz.0.23'. [ 74.560690][ T4351] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 74.901273][ T4356] tipc: Failed to remove unknown binding: 66,0,0/0:2268521633/2268521635 [ 74.901385][ T4356] tipc: Failed to remove unknown binding: 66,0,0/0:2268521633/2268521634 [ 75.721792][ T4360] loop1: detected capacity change from 0 to 512 [ 75.870597][ T4362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 75.939401][ T4360] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 76.060825][ T4360] System zones: 1-12 [ 76.271083][ T4360] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.28: missing EA_INODE flag [ 76.306605][ T4360] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.28: error while reading EA inode 12 err=-117 [ 76.345590][ T4360] EXT4-fs (loop1): 1 orphan inode deleted [ 76.351415][ T4360] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 76.367065][ T4360] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.359745][ T4392] netlink: 28 bytes leftover after parsing attributes in process `syz.2.36'. [ 80.624768][ T4406] loop1: detected capacity change from 0 to 256 [ 80.636945][ T4407] loop3: detected capacity change from 0 to 256 [ 80.692462][ T4407] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 80.750025][ T4406] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 81.043645][ T4414] tipc: Failed to remove unknown binding: 66,0,0/0:3976687773/3976687775 [ 81.053851][ T4414] tipc: Failed to remove unknown binding: 66,0,0/0:3976687773/3976687774 [ 83.023564][ T4443] Zero length message leads to an empty skb [ 83.113868][ T4446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.49'. [ 85.786578][ T4463] loop2: detected capacity change from 0 to 256 [ 85.845253][ T4463] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 86.516430][ T4485] loop3: detected capacity change from 0 to 8192 [ 86.777452][ T4494] tipc: Started in network mode [ 86.791739][ T4494] tipc: Node identity 4, cluster identity 4711 [ 86.799883][ T4494] tipc: Node number set to 4 [ 86.898040][ T1324] cfg80211: failed to load regulatory.db [ 87.012844][ T4499] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 87.167534][ T4503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.67'. [ 89.605607][ T4518] loop1: detected capacity change from 0 to 256 [ 89.804904][ T4518] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 90.038532][ T4528] loop2: detected capacity change from 0 to 1024 [ 90.164676][ T4534] tipc: Failed to remove unknown binding: 66,0,0/0:1805074574/1805074576 [ 90.174044][ T4534] tipc: Failed to remove unknown binding: 66,0,0/0:1805074574/1805074575 [ 90.187211][ T4534] tipc: Failed to remove unknown binding: 66,0,0/0:1805074574/1805074576 [ 90.196073][ T4534] tipc: Failed to remove unknown binding: 66,0,0/0:1805074574/1805074575 [ 90.526085][ T4528] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.331517][ T4546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.79'. [ 94.223410][ T4567] tipc: Failed to remove unknown binding: 66,0,0/0:3046069208/3046069210 [ 94.231944][ T4567] tipc: Failed to remove unknown binding: 66,0,0/0:3046069208/3046069209 [ 94.241205][ T4567] tipc: Failed to remove unknown binding: 66,0,0/0:3046069208/3046069210 [ 94.249963][ T4567] tipc: Failed to remove unknown binding: 66,0,0/0:3046069208/3046069209 [ 94.709384][ T4572] loop3: detected capacity change from 0 to 256 [ 94.783640][ T4572] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 94.877201][ T4576] loop2: detected capacity change from 0 to 512 [ 94.936642][ T4576] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 94.968869][ T4576] System zones: 1-12 [ 95.013236][ T4576] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.84: missing EA_INODE flag [ 95.040128][ T4576] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.84: error while reading EA inode 12 err=-117 [ 95.069510][ T4576] EXT4-fs (loop2): 1 orphan inode deleted [ 95.075920][ T4576] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 95.738189][ T4591] loop0: detected capacity change from 0 to 1024 [ 96.831517][ T4591] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 96.977328][ T4591] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 97.013148][ T4591] jbd2_journal_init_inode: Cannot locate journal superblock [ 97.026149][ T4591] EXT4-fs (loop0): Could not load journal inode [ 97.902546][ T4614] tipc: Failed to remove unknown binding: 66,0,0/0:3921059666/3921059668 [ 97.911318][ T4614] tipc: Failed to remove unknown binding: 66,0,0/0:3921059666/3921059667 [ 97.920548][ T4614] tipc: Failed to remove unknown binding: 66,0,0/0:3921059666/3921059668 [ 97.929151][ T4614] tipc: Failed to remove unknown binding: 66,0,0/0:3921059666/3921059667 [ 98.603564][ T4623] device syzkaller0 entered promiscuous mode [ 98.669080][ T4623] tipc: Enabled bearer , priority 0 [ 98.707960][ T4622] tipc: Resetting bearer [ 98.761714][ T4622] tipc: Disabling bearer [ 99.690750][ T4645] loop3: detected capacity change from 0 to 128 [ 100.524250][ T4659] tipc: Failed to remove unknown binding: 66,0,0/0:4058216520/4058216522 [ 100.532884][ T4659] tipc: Failed to remove unknown binding: 66,0,0/0:4058216520/4058216521 [ 100.544858][ T4659] tipc: Failed to remove unknown binding: 66,0,0/0:4058216520/4058216522 [ 100.553396][ T4659] tipc: Failed to remove unknown binding: 66,0,0/0:4058216520/4058216521 [ 101.522968][ T4669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.116'. [ 101.587158][ T4667] loop3: detected capacity change from 0 to 128 [ 101.620233][ T4664] device syzkaller0 entered promiscuous mode [ 102.650596][ T4689] syz.1.123 uses obsolete (PF_INET,SOCK_PACKET) [ 102.990593][ T4667] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 103.052465][ T4667] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.103851][ T4698] device syzkaller0 entered promiscuous mode [ 103.376033][ T4705] tipc: Failed to remove unknown binding: 66,0,0/0:4130587216/4130587218 [ 103.384652][ T4705] tipc: Failed to remove unknown binding: 66,0,0/0:4130587216/4130587217 [ 104.661979][ T4711] loop4: detected capacity change from 0 to 512 [ 104.998465][ T4722] tipc: Started in network mode [ 105.003588][ T4722] tipc: Node identity 4, cluster identity 4711 [ 105.009868][ T4722] tipc: Node number set to 4 [ 105.643414][ T4711] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 105.683634][ T4711] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.102614][ T4754] tipc: Failed to remove unknown binding: 66,0,0/0:3842281117/3842281119 [ 106.111264][ T4754] tipc: Failed to remove unknown binding: 66,0,0/0:3842281117/3842281118 [ 107.181881][ T4763] device veth0 entered promiscuous mode [ 108.232783][ T4782] loop3: detected capacity change from 0 to 512 [ 108.233570][ T4772] FAULT_INJECTION: forcing a failure. [ 108.233570][ T4772] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 108.380036][ T4782] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.152: Unrecognised inode hash code 255 [ 108.381181][ T4772] CPU: 0 PID: 4772 Comm: syz.1.147 Not tainted syzkaller #0 [ 108.399330][ T4772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.401831][ T4782] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.152: Corrupt directory, running e2fsck is recommended [ 108.409413][ T4772] Call Trace: [ 108.409427][ T4772] [ 108.409436][ T4772] dump_stack_lvl+0x188/0x250 [ 108.409465][ T4772] ? show_regs_print_info+0x20/0x20 [ 108.409484][ T4772] ? load_image+0x410/0x410 [ 108.409504][ T4772] ? __lock_acquire+0x7b50/0x7b50 [ 108.409526][ T4772] ? _raw_spin_unlock_irq+0x2a/0x40 [ 108.409545][ T4772] ? get_signal+0x121c/0x12e0 [ 108.429856][ T4782] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 108.433274][ T4772] should_fail+0x383/0x4b0 [ 108.433315][ T4772] _copy_to_user+0x2e/0x130 [ 108.433337][ T4772] copy_siginfo_to_user+0x20/0x80 [ 108.433359][ T4772] arch_do_signal_or_restart+0xcf9/0x12a0 [ 108.440916][ T4782] EXT4-fs error (device loop3): ext4_iget_extra_inode:4573: inode #15: comm syz.3.152: corrupted in-inode xattr [ 108.443172][ T4772] ? get_sigframe_size+0x10/0x10 [ 108.454055][ T4782] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.152: couldn't read orphan inode 15 (err -117) [ 108.458221][ T4772] ? __context_tracking_exit+0x4c/0x80 [ 108.458262][ T4772] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 108.458290][ T4772] ? exit_to_user_mode_loop+0x3b/0x130 [ 108.458312][ T4772] exit_to_user_mode_loop+0x9e/0x130 [ 108.458330][ T4772] exit_to_user_mode_prepare+0xee/0x180 [ 108.458349][ T4772] syscall_exit_to_user_mode+0x16/0x40 [ 108.458370][ T4772] do_syscall_64+0x58/0xa0 [ 108.472243][ T4782] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,noblock_validity,abort,dioread_lock,stripe=0x00000000000000e3,grpjquota=.nouser_xattr,nolazytime,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 108.475457][ T4772] ? clear_bhb_loop+0x30/0x80 [ 108.475482][ T4772] ? clear_bhb_loop+0x30/0x80 [ 108.475502][ T4772] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 108.523973][ T4782] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.152: Unrecognised inode hash code 255 [ 108.526800][ T4772] RIP: 0033:0x7f03a25a4157 [ 108.526828][ T4772] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 108.526844][ T4772] RSP: 002b:00007f03a07db0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 108.526867][ T4772] RAX: 00000000000000ca RBX: 00007f03a282c098 RCX: 00007f03a25a4159 [ 108.526880][ T4772] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f03a282c098 [ 108.526891][ T4772] RBP: 00007f03a282c090 R08: 0000000000000000 R09: 0000000000000000 [ 108.526904][ T4772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.526916][ T4772] R13: 00007f03a282c128 R14: 00007ffe88c593b0 R15: 00007ffe88c59498 [ 108.526947][ T4772] [ 109.208332][ T4793] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 109.275931][ T4782] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.152: Corrupt directory, running e2fsck is recommended [ 109.647514][ T4782] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.152: Unrecognised inode hash code 255 [ 109.670179][ T4782] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.152: Corrupt directory, running e2fsck is recommended [ 109.768696][ T4763] device veth0 left promiscuous mode [ 109.833173][ T4799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.157'. [ 109.998598][ T4801] device syzkaller0 entered promiscuous mode [ 111.402136][ T4829] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 111.718066][ T4837] loop0: detected capacity change from 0 to 256 [ 112.110725][ T4851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.177'. [ 112.268698][ T4845] loop2: detected capacity change from 0 to 2048 [ 112.642153][ T4853] device syzkaller0 entered promiscuous mode [ 112.698546][ T4845] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 112.779815][ T4845] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.044867][ T4866] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.175: bg 0: block 345: padding at end of block bitmap is not set [ 113.159632][ T4870] loop0: detected capacity change from 0 to 512 [ 113.219415][ T4866] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 17 with error 117 [ 113.409488][ T4866] EXT4-fs (loop2): This should not happen!! Data will be lost [ 113.409488][ T4866] [ 113.483722][ T4874] loop1: detected capacity change from 0 to 16 [ 113.503569][ T4535] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 15 with error 28 [ 113.525647][ T4535] EXT4-fs (loop2): This should not happen!! Data will be lost [ 113.525647][ T4535] [ 113.542373][ T4535] EXT4-fs (loop2): Total free blocks count 0 [ 113.596300][ T4535] EXT4-fs (loop2): Free/Dirty block details [ 113.602592][ T4535] EXT4-fs (loop2): free_blocks=0 [ 113.608834][ T4535] EXT4-fs (loop2): dirty_blocks=64 [ 113.614764][ T4535] EXT4-fs (loop2): Block reservation details [ 113.623723][ T4535] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 113.691632][ T4879] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 114.154583][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 114.164568][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 114.174567][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 114.184564][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 114.194562][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 114.204575][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 114.214565][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 114.224565][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 114.234576][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 114.244570][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 114.436188][ T4882] loop4: detected capacity change from 0 to 512 [ 114.451340][ T4874] erofs: (device loop1): mounted with root inode @ nid 36. [ 114.985818][ T4882] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 114.993787][ T4882] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 115.100831][ T4891] netlink: 28 bytes leftover after parsing attributes in process `syz.3.189'. [ 115.901004][ T4882] EXT4-fs (loop4): orphan cleanup on readonly fs [ 115.924980][ T4882] EXT4-fs error (device loop4): ext4_orphan_get:1410: inode #13: comm syz.4.187: iget: bad i_size value: 12154761577498 getty: ttyS0: [ 116.032805][ T4202] Bluetooth: hci5: setting up ROME/QCA6390 Hü[ 116.051972][ T4894] Bluetooth: hci5: Frame reassembly failed (-84) [ 116.065403][ T4882] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.187: couldn't read orphan inode 13 (err -117) [ 116.137525][ T4882] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,noblock_validity,user_xattr,,errors=continue. Quota mode: none. [ 116.198599][ T4882] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.187: dx entry: limit 65535 != root limit 120 [ 116.241655][ T4900] device syzkaller0 entered promiscuous mode [ 116.265123][ T4882] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.187: Corrupt directory, running e2fsck is recommended [ 116.281609][ T4902] loop1: detected capacity change from 0 to 512 [ 116.356561][ T4902] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE ü[ 116.444430][ T4902] EXT4-fs (loop1): 1 truncate cleaned up [ 116.450880][ T4902] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none. [ 116.472485][ T4905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.194'. [ 117.659678][ T4922] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.668426][ T4922] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.921688][ T4931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.200'. [ 118.288531][ T4922] device bridge_slave_1 left promiscuous mode [ 118.347313][ T4922] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.430770][ T4935] Bluetooth: hci5: Frame reassembly failed (-84) [ 118.468112][ T4922] device bridge_slave_0 left promiscuous mode [ 118.587907][ T4922] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.418660][ T4230] Bluetooth: hci5: command 0xfc00 tx timeout [ 119.601809][ T4950] loop3: detected capacity change from 0 to 512 [ 119.731204][ T4950] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 119.758953][ T4950] System zones: 1-12 [ 119.765959][ T4950] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.206: missing EA_INODE flag [ 119.820897][ T4950] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.206: error while reading EA inode 12 err=-117 [ 119.868667][ T4950] EXT4-fs (loop3): 1 orphan inode deleted [ 119.873755][ T4956] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 119.874460][ T4950] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 120.431613][ T4971] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 122.018664][ T4986] netlink: 28 bytes leftover after parsing attributes in process `syz.0.218'. [ 123.078792][ T4993] device syzkaller0 entered promiscuous mode [ 123.089980][ T5001] capability: warning: `syz.4.224' uses deprecated v2 capabilities in a way that may be insecure [ 123.123227][ T4999] ======================================================= [ 123.123227][ T4999] WARNING: The mand mount option has been deprecated and [ 123.123227][ T4999] and is ignored by this kernel. Remove the mand [ 123.123227][ T4999] option from the mount to silence this warning. [ 123.123227][ T4999] ======================================================= [ 123.316499][ T5006] device-mapper: ioctl: ioctl interface mismatch: kernel(4.45.0), user(0.0.0), cmd(3) [ 123.648462][ T5011] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 123.737557][ T5010] loop2: detected capacity change from 0 to 512 [ 124.985131][ T5022] loop1: detected capacity change from 0 to 256 [ 125.816917][ T5022] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 126.081485][ T5010] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 126.402240][ T5010] System zones: 1-12 [ 126.422546][ T5010] EXT4-fs: error -4 creating inode table initialization thread [ 126.532356][ T5010] EXT4-fs (loop2): mount failed [ 126.584715][ T4202] Bluetooth: hci5: Reading QCA version information failed (-110) [ 126.592736][ T4202] Bluetooth: hci5: Retry BT power ON:0 [ 127.113926][ T5040] loop4: detected capacity change from 0 to 16 [ 127.242508][ T5040] erofs: (device loop4): mounted with root inode @ nid 36. [ 127.914948][ T5051] loop3: detected capacity change from 0 to 512 [ 128.622634][ T5055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.240'. [ 128.638673][ T5051] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 128.672919][ T5055] openvswitch: netlink: Message has 34 unknown bytes. [ 129.083036][ T5062] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 130.848248][ T5076] loop1: detected capacity change from 0 to 256 [ 131.078897][ T5076] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 131.572863][ T5079] loop3: detected capacity change from 0 to 512 [ 131.719128][ T5079] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 131.791211][ T5088] loop1: detected capacity change from 0 to 16 [ 131.816030][ T5079] System zones: 1-12 [ 131.854939][ T5088] erofs: (device loop1): mounted with root inode @ nid 36. [ 132.108682][ T5079] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.248: missing EA_INODE flag [ 132.383331][ T5079] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.248: error while reading EA inode 12 err=-117 [ 132.558192][ T5079] EXT4-fs (loop3): 1 orphan inode deleted [ 132.564222][ T5079] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 132.626031][ T5091] loop4: detected capacity change from 0 to 128 [ 132.779652][ T5095] loop2: detected capacity change from 0 to 128 [ 132.796169][ T5091] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 132.926480][ T5091] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.032923][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.032975][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.394380][ T5105] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 133.403419][ T5105] FAT-fs (loop4): Filesystem has been set read-only [ 133.424714][ T5105] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 133.439894][ T5105] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 134.354737][ T4569] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 134.536297][ T5113] 8021q: VLANs not supported on syzkaller1 [ 134.574787][ T4569] usb 5-1: device descriptor read/64, error -71 [ 134.945193][ T4569] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 135.155161][ T4569] usb 5-1: device descriptor read/64, error -71 [ 135.308326][ T4569] usb usb5-port1: attempt power cycle [ 136.362213][ T5138] loop4: detected capacity change from 0 to 16 [ 136.548549][ T5138] erofs: (device loop4): mounted with root inode @ nid 36. [ 139.155688][ T5157] netlink: 32 bytes leftover after parsing attributes in process `syz.3.271'. [ 139.170203][ T5159] loop1: detected capacity change from 0 to 128 [ 139.267209][ T5159] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.374669][ T5159] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.419846][ T5165] netlink: 40 bytes leftover after parsing attributes in process `syz.4.273'. [ 139.808730][ T5177] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 139.817686][ T5177] FAT-fs (loop1): Filesystem has been set read-only [ 139.833894][ T5177] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 139.850367][ T5177] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 140.685472][ T5178] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 141.144770][ T2856] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 141.409098][ T5189] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 141.691105][ T2856] usb 2-1: device descriptor read/64, error -71 [ 142.568492][ T5194] loop3: detected capacity change from 0 to 128 [ 142.671105][ T5194] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.679751][ T5194] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.897772][ T5221] loop2: detected capacity change from 0 to 1024 [ 144.057355][ T5221] EXT4-fs (loop2): Ignoring removed orlov option [ 144.393434][ T5231] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 144.936277][ T5221] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 145.009555][ T5234] loop0: detected capacity change from 0 to 128 [ 145.099564][ T5236] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 145.138591][ T5234] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 145.157347][ T5234] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 145.559970][ T5245] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 145.569160][ T5245] FAT-fs (loop0): Filesystem has been set read-only [ 145.586361][ T5245] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 145.599324][ T5245] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 146.256874][ T5246] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 146.654847][ T4263] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 146.885203][ T4263] usb 1-1: device descriptor read/64, error -71 [ 148.815495][ T4263] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.167523][ T5274] autofs4:pid:5274:autofs_fill_super: called with bogus options [ 149.652125][ T5279] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 150.516010][ T5286] netlink: 24 bytes leftover after parsing attributes in process `syz.3.306'. [ 150.698481][ T5291] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 152.601569][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 152.610464][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 153.212398][ T5303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.463344][ T5313] loop3: detected capacity change from 0 to 512 [ 153.964850][ T5325] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 154.424638][ T5313] EXT4-fs (loop3): 1 orphan inode deleted [ 154.544784][ T5313] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 154.664786][ T5313] ext4 filesystem being mounted at /58/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.424041][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 155.688112][ T5340] loop0: detected capacity change from 0 to 164 [ 156.171701][ T5347] loop1: detected capacity change from 0 to 256 [ 156.535801][ T5347] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 157.157082][ T5351] FAULT_INJECTION: forcing a failure. [ 157.157082][ T5351] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 157.170564][ T5351] CPU: 0 PID: 5351 Comm: syz.1.327 Not tainted syzkaller #0 [ 157.178148][ T5351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.188331][ T5351] Call Trace: [ 157.191775][ T5351] [ 157.194737][ T5351] dump_stack_lvl+0x188/0x250 [ 157.199477][ T5351] ? show_regs_print_info+0x20/0x20 [ 157.204843][ T5351] ? load_image+0x410/0x410 [ 157.209386][ T5351] ? uncharge_page+0x490/0x490 [ 157.214175][ T5351] should_fail+0x383/0x4b0 [ 157.218626][ T5351] prepare_alloc_pages+0x1e3/0x5b0 [ 157.223865][ T5351] __alloc_pages+0x11b/0x480 [ 157.228529][ T5351] ? zone_statistics+0x170/0x170 [ 157.233503][ T5351] ? rcu_lock_acquire+0x30/0x30 [ 157.238392][ T5351] ? alloc_pages+0x452/0x560 [ 157.243117][ T5351] __get_free_pages+0x8/0x30 [ 157.247791][ T5351] __tlb_remove_page_size+0x1f2/0x3f0 [ 157.253468][ T5351] unmap_page_range+0xfcf/0x2410 [ 157.258478][ T5351] unmap_vmas+0x131/0x250 [ 157.262856][ T5351] ? unmap_page_range+0x2410/0x2410 [ 157.268093][ T5351] ? __mutex_lock_common+0x435/0x2400 [ 157.273495][ T5351] ? exit_mm_release+0x16/0x30 [ 157.278282][ T5351] exit_mmap+0x3b9/0x640 [ 157.282535][ T5351] ? vm_brk+0x20/0x20 [ 157.286701][ T5351] ? uprobe_clear_state+0x2f6/0x460 [ 157.291902][ T5351] __mmput+0x115/0x390 [ 157.295998][ T5351] exit_mm+0x632/0x7b0 [ 157.300098][ T5351] ? perf_pmu_migrate_context+0xb70/0xb70 [ 157.305967][ T5351] ? do_exit+0x2110/0x2110 [ 157.310404][ T5351] ? __ia32_sys_timer_delete+0x40/0x40 [ 157.315959][ T5351] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 157.321421][ T5351] ? tty_audit_exit+0x149/0x1f0 [ 157.326273][ T5351] do_exit+0x5b8/0x2110 [ 157.330553][ T5351] ? put_task_struct+0x80/0x80 [ 157.335315][ T5351] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 157.341429][ T5351] ? _raw_spin_lock_irq+0xb7/0xf0 [ 157.346473][ T5351] do_group_exit+0x12c/0x2f0 [ 157.351262][ T5351] ? lockdep_hardirqs_on+0x94/0x140 [ 157.356516][ T5351] get_signal+0x7eb/0x12e0 [ 157.360954][ T5351] arch_do_signal_or_restart+0xe6/0x12a0 [ 157.366723][ T5351] ? futex_exit_release+0x1c0/0x1c0 [ 157.371955][ T5351] ? get_sigframe_size+0x10/0x10 [ 157.376994][ T5351] ? __context_tracking_exit+0x4c/0x80 [ 157.382826][ T5351] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 157.389512][ T5351] ? exit_to_user_mode_loop+0x3b/0x130 [ 157.395153][ T5351] exit_to_user_mode_loop+0x9e/0x130 [ 157.400439][ T5351] exit_to_user_mode_prepare+0xee/0x180 [ 157.406069][ T5351] syscall_exit_to_user_mode+0x16/0x40 [ 157.411543][ T5351] do_syscall_64+0x58/0xa0 [ 157.415961][ T5351] ? clear_bhb_loop+0x30/0x80 [ 157.420648][ T5351] ? clear_bhb_loop+0x30/0x80 [ 157.425371][ T5351] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 157.431265][ T5351] RIP: 0033:0x7f03a25a4159 [ 157.435707][ T5351] Code: Unable to access opcode bytes at RIP 0x7f03a25a412f. [ 157.443076][ T5351] RSP: 002b:00007f03a07fc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 157.451588][ T5351] RAX: fffffffffffffe00 RBX: 00007f03a282bfa8 RCX: 00007f03a25a4159 [ 157.459648][ T5351] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f03a282bfa8 [ 157.467881][ T5351] RBP: 00007f03a282bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 157.475855][ T5351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.483834][ T5351] R13: 00007f03a282c038 R14: 00007ffe88c593b0 R15: 00007ffe88c59498 [ 157.491950][ T5351] [ 157.924321][ T5362] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 159.859780][ T5375] FAULT_INJECTION: forcing a failure. [ 159.859780][ T5375] name failslab, interval 1, probability 0, space 0, times 1 [ 159.965465][ T5375] CPU: 1 PID: 5375 Comm: syz.0.336 Not tainted syzkaller #0 [ 159.972830][ T5375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.983365][ T5375] Call Trace: [ 159.986874][ T5375] [ 159.989824][ T5375] dump_stack_lvl+0x188/0x250 [ 159.994524][ T5375] ? show_regs_print_info+0x20/0x20 [ 159.999744][ T5375] ? load_image+0x410/0x410 [ 160.004271][ T5375] ? __might_sleep+0xf0/0xf0 [ 160.008887][ T5375] ? __lock_acquire+0x7b50/0x7b50 [ 160.013936][ T5375] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 160.019710][ T5375] should_fail+0x383/0x4b0 [ 160.024245][ T5375] should_failslab+0x5/0x20 [ 160.028771][ T5375] slab_pre_alloc_hook+0x51/0xc0 [ 160.033732][ T5375] kmem_cache_alloc_node+0x47/0x2c0 [ 160.039559][ T5375] ? __alloc_skb+0xf4/0x750 [ 160.044095][ T5375] __alloc_skb+0xf4/0x750 [ 160.048538][ T5375] netlink_ack+0x35c/0xb10 [ 160.053082][ T5375] ? nf_tables_commit+0x76d0/0x76d0 [ 160.058324][ T5375] ? netlink_dump+0xdd0/0xdd0 [ 160.063016][ T5375] ? nfnetlink_rcv+0x9ce/0x2450 [ 160.067881][ T5375] ? kasan_add_zero_shadow+0x50/0x50 [ 160.073179][ T5375] nfnetlink_rcv+0x2192/0x2450 [ 160.077971][ T5375] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 160.083728][ T5375] ? skb_clone+0x1f1/0x350 [ 160.088256][ T5375] ? rcu_lock_release+0x5/0x20 [ 160.093131][ T5375] ? __lock_acquire+0x7b50/0x7b50 [ 160.098182][ T5375] netlink_unicast+0x78f/0x940 [ 160.102972][ T5375] netlink_sendmsg+0x8ba/0xbe0 [ 160.107751][ T5375] ? netlink_getsockopt+0x570/0x570 [ 160.113218][ T5375] ? aa_sock_msg_perm+0x94/0x150 [ 160.118167][ T5375] ? apparmor_socket_sendmsg+0x88/0x230 [ 160.123714][ T5375] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 160.129186][ T5375] ? security_socket_sendmsg+0x7c/0xa0 [ 160.135172][ T5375] ? netlink_getsockopt+0x570/0x570 [ 160.140386][ T5375] ____sys_sendmsg+0x5be/0x8f0 [ 160.145196][ T5375] ? __sys_sendmsg_sock+0x30/0x30 [ 160.150245][ T5375] ? import_iovec+0x6f/0xa0 [ 160.154845][ T5375] ___sys_sendmsg+0x236/0x2e0 [ 160.159533][ T5375] ? __sys_sendmsg+0x290/0x290 [ 160.164510][ T5375] __se_sys_sendmsg+0x1b7/0x2a0 [ 160.169458][ T5375] ? __x64_sys_sendmsg+0x80/0x80 [ 160.174660][ T5375] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 160.180659][ T5375] ? lockdep_hardirqs_on+0x94/0x140 [ 160.185871][ T5375] do_syscall_64+0x4c/0xa0 [ 160.190396][ T5375] ? clear_bhb_loop+0x30/0x80 [ 160.196100][ T5375] ? clear_bhb_loop+0x30/0x80 [ 160.200781][ T5375] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 160.206686][ T5375] RIP: 0033:0x7f249dce5159 [ 160.211103][ T5375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.231144][ T5375] RSP: 002b:00007f249bf3d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.239564][ T5375] RAX: ffffffffffffffda RBX: 00007f249df6cfa0 RCX: 00007f249dce5159 [ 160.247551][ T5375] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 160.257086][ T5375] RBP: 00007f249dd7c03b R08: 0000000000000000 R09: 0000000000000000 [ 160.265092][ T5375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.273169][ T5375] R13: 00007f249df6d038 R14: 00007f249df6cfa0 R15: 00007ffe8addced8 [ 160.281174][ T5375] [ 160.520777][ T5384] tipc: Failed to remove unknown binding: 66,0,0/4:2698426118/2698426119 [ 161.167646][ T5377] loop2: detected capacity change from 0 to 164 [ 161.225361][ T5381] loop1: detected capacity change from 0 to 512 [ 161.415722][ T5381] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 161.423784][ T5381] System zones: 1-12 [ 161.457586][ T5381] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.331: missing EA_INODE flag [ 161.493238][ T5387] loop0: detected capacity change from 0 to 8192 [ 161.505317][ T5381] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.331: error while reading EA inode 12 err=-117 [ 161.572464][ T5381] EXT4-fs (loop1): 1 orphan inode deleted [ 161.575110][ T5387] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.580756][ T5381] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 161.862010][ T5387] FAULT_INJECTION: forcing a failure. [ 161.862010][ T5387] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 161.875492][ T5387] CPU: 1 PID: 5387 Comm: syz.0.339 Not tainted syzkaller #0 [ 161.882987][ T5387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 161.893333][ T5387] Call Trace: [ 161.896642][ T5387] [ 161.899698][ T5387] dump_stack_lvl+0x188/0x250 [ 161.904410][ T5387] ? show_regs_print_info+0x20/0x20 [ 161.909638][ T5387] ? load_image+0x410/0x410 [ 161.914192][ T5387] ? mark_lock+0x94/0x320 [ 161.918553][ T5387] should_fail+0x383/0x4b0 [ 161.923011][ T5387] prepare_alloc_pages+0x1e3/0x5b0 [ 161.928164][ T5387] __alloc_pages+0x11b/0x480 [ 161.932890][ T5387] ? zone_statistics+0x170/0x170 [ 161.938311][ T5387] ? rcu_lock_acquire+0x30/0x30 [ 161.943210][ T5387] ? alloc_pages+0x452/0x560 [ 161.947847][ T5387] __get_free_pages+0x8/0x30 [ 161.952555][ T5387] __tlb_remove_page_size+0x1f2/0x3f0 [ 161.958159][ T5387] unmap_page_range+0xfcf/0x2410 [ 161.963167][ T5387] unmap_vmas+0x131/0x250 [ 161.967529][ T5387] ? unmap_page_range+0x2410/0x2410 [ 161.972766][ T5387] ? __mutex_lock_common+0x435/0x2400 [ 161.978182][ T5387] ? exit_mm_release+0x16/0x30 [ 161.983076][ T5387] exit_mmap+0x3b9/0x640 [ 161.987444][ T5387] ? vm_brk+0x20/0x20 [ 161.991895][ T5387] ? uprobe_clear_state+0x2f6/0x460 [ 161.997341][ T5387] __mmput+0x115/0x390 [ 162.001454][ T5387] exit_mm+0x632/0x7b0 [ 162.005563][ T5387] ? perf_pmu_migrate_context+0xb70/0xb70 [ 162.011428][ T5387] ? do_exit+0x2110/0x2110 [ 162.015884][ T5387] ? __ia32_sys_timer_delete+0x40/0x40 [ 162.021465][ T5387] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 162.026968][ T5387] ? tty_audit_exit+0x149/0x1f0 [ 162.031857][ T5387] do_exit+0x5b8/0x2110 [ 162.036162][ T5387] ? put_task_struct+0x80/0x80 [ 162.041042][ T5387] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 162.047062][ T5387] ? _raw_spin_lock_irq+0xb7/0xf0 [ 162.052248][ T5387] do_group_exit+0x12c/0x2f0 [ 162.056874][ T5387] ? lockdep_hardirqs_on+0x94/0x140 [ 162.062115][ T5387] get_signal+0x7eb/0x12e0 [ 162.066585][ T5387] arch_do_signal_or_restart+0xe6/0x12a0 [ 162.072260][ T5387] ? futex_exit_release+0x1c0/0x1c0 [ 162.077665][ T5387] ? get_sigframe_size+0x10/0x10 [ 162.082722][ T5387] ? __context_tracking_exit+0x4c/0x80 [ 162.088252][ T5387] ? exit_to_user_mode_loop+0x3b/0x130 [ 162.094009][ T5387] exit_to_user_mode_loop+0x9e/0x130 [ 162.099526][ T5387] exit_to_user_mode_prepare+0xee/0x180 [ 162.105124][ T5387] syscall_exit_to_user_mode+0x16/0x40 [ 162.110777][ T5387] do_syscall_64+0x58/0xa0 [ 162.115208][ T5387] ? clear_bhb_loop+0x30/0x80 [ 162.119916][ T5387] ? clear_bhb_loop+0x30/0x80 [ 162.124720][ T5387] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.130703][ T5387] RIP: 0033:0x7f249dce5159 [ 162.135140][ T5387] Code: Unable to access opcode bytes at RIP 0x7f249dce512f. [ 162.142515][ T5387] RSP: 002b:00007f249bf3d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 162.150937][ T5387] RAX: 0000000000000001 RBX: 00007f249df6cfa8 RCX: 00007f249dce5159 [ 162.159011][ T5387] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f249df6cfac [ 162.166984][ T5387] RBP: 00007f249df6cfa0 R08: 00304e70ed063c52 R09: 0000000000000000 [ 162.174954][ T5387] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 162.182924][ T5387] R13: 00007f249df6d038 R14: 00007ffe8addcdf0 R15: 00007ffe8addced8 [ 162.190905][ T5387] [ 162.367914][ T4192] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 164.063860][ T5408] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 164.413614][ T4192] FAT-fs (loop0): Filesystem has been set read-only [ 164.489941][ T5413] loop1: detected capacity change from 0 to 512 [ 164.501359][ T5413] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 164.529362][ T5413] EXT4-fs (loop1): 1 truncate cleaned up [ 164.545012][ T5413] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 164.797891][ T5426] netlink: 124 bytes leftover after parsing attributes in process `syz.0.344'. [ 164.853406][ T5426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.344'. [ 164.892693][ T5426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.344'. [ 164.902301][ T5426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.344'. [ 164.972250][ T5429] tipc: Failed to remove unknown binding: 66,0,0/0:1709867231/1709867232 [ 165.850801][ T5437] loop3: detected capacity change from 0 to 512 [ 165.863720][ T5438] loop2: detected capacity change from 0 to 512 [ 165.963337][ T5442] loop0: detected capacity change from 0 to 512 [ 165.977764][ T5437] EXT4-fs (loop3): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 166.247728][ T5437] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.849281][ T5442] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 166.889868][ T5442] System zones: 1-12 [ 166.976610][ T5442] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.354: missing EA_INODE flag [ 167.117492][ T5442] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.354: error while reading EA inode 12 err=-117 [ 167.282600][ T5442] EXT4-fs (loop0): 1 orphan inode deleted [ 167.348267][ T5442] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 167.405479][ T5438] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 167.422203][ T5438] ext4 filesystem being mounted at /81/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 167.991242][ T26] audit: type=1804 audit(1789422802.317:2): pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.352" name="/newroot/81/bus/file3" dev="loop2" ino=16 res=1 errno=0 [ 168.115107][ T5467] loop_set_status: loop2 () has still dirty pages (nrpages=7) [ 169.079164][ T4186] EXT4-fs error (device loop2): ext4_lookup:1860: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 169.193452][ T4186] EXT4-fs error (device loop2): ext4_lookup:1860: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 170.500336][ T4357] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.672238][ T4357] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.862921][ T4357] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.986704][ T4357] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.116178][ T5498] loop3: detected capacity change from 0 to 512 [ 171.267845][ T5498] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 171.403296][ T5498] EXT4-fs (loop3): 1 truncate cleaned up [ 171.415578][ T5498] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 171.676176][ T4357] tipc: Left network mode [ 173.088425][ T5521] loop4: detected capacity change from 0 to 4096 [ 173.219128][ T5521] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 173.538818][ T5536] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 174.174759][ T2856] Bluetooth: hci2: command 0x0409 tx timeout [ 174.559002][ T5512] chnl_net:caif_netlink_parms(): no params data found [ 174.583205][ T5510] chnl_net:caif_netlink_parms(): no params data found [ 174.666548][ T5551] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 174.729603][ T1108] Bluetooth: hci4: command 0x0409 tx timeout [ 174.915063][ T5510] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.928725][ T5510] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.963348][ T5510] device bridge_slave_0 entered promiscuous mode [ 174.973162][ T5512] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.986820][ T5512] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.014156][ T5512] device bridge_slave_0 entered promiscuous mode [ 175.041807][ T5510] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.060771][ T5510] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.108478][ T5510] device bridge_slave_1 entered promiscuous mode [ 175.132366][ T5512] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.142983][ T5512] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.182579][ T5512] device bridge_slave_1 entered promiscuous mode [ 175.231398][ T4357] device hsr_slave_0 left promiscuous mode [ 175.258796][ T4357] device hsr_slave_1 left promiscuous mode [ 175.281755][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.318486][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.329608][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.337805][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.346570][ T4357] device bridge_slave_1 left promiscuous mode [ 175.368099][ T4357] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.455870][ T4357] device bridge_slave_0 left promiscuous mode [ 175.522931][ T4357] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.592434][ T4357] device veth1_macvtap left promiscuous mode [ 175.626953][ T4357] device veth0_macvtap left promiscuous mode [ 175.633567][ T4357] device veth1_vlan left promiscuous mode [ 175.640449][ T4357] device veth0_vlan left promiscuous mode [ 176.079454][ T5583] loop3: detected capacity change from 0 to 256 [ 176.473868][ T5583] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 176.783402][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 176.804675][ T7] Bluetooth: hci4: command 0x041b tx timeout [ 176.926959][ T5586] loop3: detected capacity change from 0 to 4096 [ 176.962028][ T5586] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 177.074784][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 177.091516][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 177.110621][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.140126][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.275848][ T4357] bond0 (unregistering): Released all slaves [ 178.171846][ T5562] syz.1.379 (5562) used greatest stack depth: 20656 bytes left [ 178.530747][ T5512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.595988][ T5510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.633457][ T5512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.684150][ T5510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.804871][ T1108] Bluetooth: hci2: command 0x040f tx timeout [ 178.852811][ T5510] team0: Port device team_slave_0 added [ 178.884926][ T4237] Bluetooth: hci4: command 0x040f tx timeout [ 178.916569][ T5512] team0: Port device team_slave_0 added [ 178.959977][ T5512] team0: Port device team_slave_1 added [ 178.979722][ T5510] team0: Port device team_slave_1 added [ 179.032754][ T5512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.064603][ T5512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.164592][ T5512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.194876][ T5510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.201911][ T5510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.324686][ T5510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.546979][ T5618] loop4: detected capacity change from 0 to 164 [ 179.554806][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.563559][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 179.577493][ T5611] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 179.598150][ T5512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.614663][ T5512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.641943][ T5512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.656821][ T5622] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 179.671371][ T5510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.689641][ T5510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.756812][ T5510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.038708][ T5512] device hsr_slave_0 entered promiscuous mode [ 180.074632][ T5512] device hsr_slave_1 entered promiscuous mode [ 180.094760][ T5512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.102464][ T5512] Cannot create hsr debugfs directory [ 180.179975][ T5510] device hsr_slave_0 entered promiscuous mode [ 180.214986][ T5510] device hsr_slave_1 entered promiscuous mode [ 180.253986][ T5510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.301870][ T5510] Cannot create hsr debugfs directory [ 180.649594][ T5631] loop3: detected capacity change from 0 to 256 [ 180.885700][ T4237] Bluetooth: hci2: command 0x0419 tx timeout [ 180.965523][ T4237] Bluetooth: hci4: command 0x0419 tx timeout [ 181.389909][ T5631] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 182.018233][ T5510] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 182.065095][ T5510] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 182.165504][ T5510] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 182.206251][ T5512] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 182.258340][ T5510] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 182.415058][ T5512] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 182.477570][ T5512] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 182.546237][ T5662] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 182.592236][ T5512] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 182.741168][ T5664] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 182.862186][ T5510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.951127][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 183.003209][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 183.061243][ T5510] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.103822][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 183.117388][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.127758][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.134922][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.144209][ T5675] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 183.155631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.164979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.174076][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.215748][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.223100][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.297308][ T5678] loop3: detected capacity change from 0 to 256 [ 183.823847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.846826][ T4231] Bluetooth: hci0: command 0x0401 tx timeout [ 184.034798][ T5678] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 184.074787][ T5512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.100462][ T5683] loop1: detected capacity change from 0 to 164 [ 184.114994][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 184.140425][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 184.153124][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 184.163104][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 184.256772][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 184.312477][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 184.366227][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.487763][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.505403][ T5512] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.524937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 184.583129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 184.645252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.657489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.713740][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.720949][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.737409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 184.752085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.775558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.833538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.879245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.927691][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.934972][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.971105][ T5699] device veth0 entered promiscuous mode [ 184.992135][ T5510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.002866][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.031595][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.053417][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.108528][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.177528][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.254081][ T5703] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 185.405151][ T5703] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 185.461684][ T5703] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.528565][ T5703] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.607489][ T5703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.653361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.697126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.730283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.775413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.822777][ T5512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.865700][ T5512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.910234][ T5709] device veth0 left promiscuous mode [ 185.917314][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.955607][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 186.175566][ T5722] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 186.245095][ T4228] Bluetooth: hci0: command 0x0406 tx timeout [ 186.251482][ T4228] Bluetooth: hci3: command 0x0406 tx timeout [ 186.265718][ T4228] Bluetooth: hci1: command 0x0406 tx timeout [ 186.283268][ T5510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.354903][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.362610][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.475124][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.482831][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.530422][ T5512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.857181][ T5740] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 186.968782][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 186.995895][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.127729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.153559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.196233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.216333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 187.231401][ T5510] device veth0_vlan entered promiscuous mode [ 187.248734][ T5510] device veth1_vlan entered promiscuous mode [ 187.284409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 187.317897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 187.366597][ T5510] device veth0_macvtap entered promiscuous mode [ 187.379444][ T5510] device veth1_macvtap entered promiscuous mode [ 187.401493][ T5510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.413243][ T5510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.423946][ T5510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.467581][ T5510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.478298][ T5510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.489541][ T5510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.510615][ T5510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.541558][ T5510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.582344][ T5510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.620644][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 187.651303][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 187.677498][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.827887][ T5760] loop3: detected capacity change from 0 to 256 [ 188.047911][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.244201][ T5760] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 188.617380][ T5510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.628501][ T5510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.639803][ T5510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.651380][ T5510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.662340][ T5510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.684416][ T5510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.699604][ T5510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.711876][ T5510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.724015][ T5510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.738839][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.764041][ T5766] loop4: detected capacity change from 0 to 512 [ 188.771713][ T4547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.790118][ T5766] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 188.837339][ T5510] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.881209][ T5510] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.883316][ T5766] EXT4-fs (loop4): 1 truncate cleaned up [ 188.904591][ T5510] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.913605][ T5510] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.929102][ T5766] EXT4-fs (loop4): mounted filesystem without journal. Opts: nojournal_checksum,jqfmt=vfsold,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback. [ 188.957946][ T4357] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.079038][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 189.134080][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 189.193501][ T4357] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.548343][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.578186][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.686847][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.706184][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.723593][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.803494][ T4357] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.849178][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.167424][ T5797] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 190.257427][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.633084][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.768130][ T5795] loop4: detected capacity change from 0 to 512 [ 190.834191][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.870557][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 191.048634][ T4357] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.167210][ T5512] device veth0_vlan entered promiscuous mode [ 191.257777][ T5512] device veth1_vlan entered promiscuous mode [ 191.348426][ T5822] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 191.558697][ T5512] device veth0_macvtap entered promiscuous mode [ 191.715758][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.754832][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.788967][ T5512] device veth1_macvtap entered promiscuous mode [ 192.927994][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.985742][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.059258][ T5846] tipc: Failed to remove unknown binding: 66,0,0/4:1804389388/1804389389 [ 194.410691][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.422157][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.476695][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.491777][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.535793][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.561847][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.655953][ T5853] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 196.000097][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.033118][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.052853][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.100690][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.142320][ T5859] loop1: detected capacity change from 0 to 512 [ 196.167788][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.230454][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.287604][ T5512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.373605][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.381283][ T5859] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 196.385038][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.405154][ T5859] System zones: 1-12 [ 196.413201][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.436266][ T5859] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.433: missing EA_INODE flag [ 196.457222][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.467395][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.478444][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.495005][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.517260][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.522838][ T5859] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.433: error while reading EA inode 12 err=-117 [ 196.551554][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.553720][ T5859] EXT4-fs (loop1): 1 orphan inode deleted [ 196.570718][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.571033][ T5859] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 196.642306][ T5512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.662417][ T5512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.716369][ T5512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.756810][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.771941][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.816103][ T5512] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.828986][ T5512] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.838272][ T5512] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.847278][ T5512] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.087324][ T5886] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 199.436026][ T5907] tipc: Failed to remove unknown binding: 66,0,0/0:3428532355/3428532356 [ 199.759571][ T4430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.807793][ T4430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.891481][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 200.852299][ T5921] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 201.176469][ T4535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.184719][ T4535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.335153][ T625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 201.387273][ T5925] loop3: detected capacity change from 0 to 164 [ 204.599179][ T5958] loop4: detected capacity change from 0 to 256 [ 204.744430][ T5966] fuse: Unknown parameter 'rootmode00000000000000000000' [ 204.830764][ T5958] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 204.924420][ T4357] device hsr_slave_0 left promiscuous mode [ 204.944631][ T4357] device hsr_slave_1 left promiscuous mode [ 204.955273][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.974390][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.994398][ T4357] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.031405][ T4357] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.226972][ T5973] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 206.050758][ T4357] device veth1_macvtap left promiscuous mode [ 206.078842][ T4357] device veth0_macvtap left promiscuous mode [ 206.114699][ T4357] device veth1_vlan left promiscuous mode [ 206.120667][ T4357] device veth0_vlan left promiscuous mode [ 206.366266][ T5985] tipc: Failed to remove unknown binding: 66,0,0/4:3034653460/3034653462 [ 206.374961][ T5985] tipc: Failed to remove unknown binding: 66,0,0/4:3034653460/3034653461 [ 207.198122][ T5989] loop1: detected capacity change from 0 to 164 [ 208.072158][ T4357] team0 (unregistering): Port device team_slave_1 removed [ 208.164292][ T4357] team0 (unregistering): Port device team_slave_0 removed [ 208.234013][ T4357] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.464794][ T4357] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.879127][ T4357] bond0 (unregistering): Released all slaves [ 211.597851][ T6018] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 212.114626][ T6026] loop4: detected capacity change from 0 to 256 [ 212.912179][ T6032] fuse: Unknown parameter 'rootmode00000000000000000000' [ 212.925455][ T6026] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 213.008932][ T6034] tipc: Failed to remove unknown binding: 66,0,0/4:3254472686/3254472688 [ 213.017536][ T6034] tipc: Failed to remove unknown binding: 66,0,0/4:3254472686/3254472687 [ 213.075715][ T6039] netlink: 296 bytes leftover after parsing attributes in process `syz.3.469'. [ 213.379705][ T6043] loop4: detected capacity change from 0 to 164 [ 215.074821][ T6074] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 216.768174][ T6088] loop1: detected capacity change from 0 to 256 [ 216.848622][ T6088] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 217.490126][ T6096] loop6: detected capacity change from 0 to 512 [ 217.707856][ T6104] loop1: detected capacity change from 0 to 164 [ 217.831318][ T6105] fuse: Unknown parameter 'rootmode00000000000000000000' [ 218.286160][ T6110] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 218.494953][ T6128] tipc: Failed to remove unknown binding: 66,0,0/0:1024352635/1024352637 [ 218.503742][ T6128] tipc: Failed to remove unknown binding: 66,0,0/0:1024352635/1024352636 [ 218.586413][ T6132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.489'. [ 219.353074][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.5.491'. [ 221.213115][ T6155] loop5: detected capacity change from 0 to 256 [ 221.227136][ T6152] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 221.754977][ T6155] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 222.389462][ T6163] loop6: detected capacity change from 0 to 256 [ 223.604298][ T6163] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 223.982973][ T6182] tipc: Started in network mode [ 223.988116][ T6182] tipc: Node identity 4, cluster identity 4711 [ 223.994630][ T6182] tipc: Node number set to 4 [ 224.601767][ T6177] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 226.380227][ T6201] loop6: detected capacity change from 0 to 164 [ 226.748175][ T6214] loop3: detected capacity change from 0 to 2048 [ 227.095696][ T6219] loop6: detected capacity change from 0 to 256 [ 227.631300][ T6219] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 227.648905][ T6214] EXT4-fs (loop3): unsupported descriptor size 0 [ 227.875766][ T6226] loop1: detected capacity change from 0 to 256 [ 228.321798][ T6226] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 229.851285][ T6238] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 232.532346][ T6278] loop3: detected capacity change from 0 to 164 [ 233.506689][ T6283] loop1: detected capacity change from 0 to 256 [ 233.576326][ T6285] loop6: detected capacity change from 0 to 256 [ 234.264061][ T6283] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 234.276869][ T6285] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 234.330926][ T6289] loop4: detected capacity change from 0 to 512 [ 234.784429][ T6308] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 234.814968][ T6310] tipc: Failed to remove unknown binding: 66,0,0/4:22582495/22582497 [ 234.823720][ T6310] tipc: Failed to remove unknown binding: 66,0,0/4:22582495/22582496 [ 235.182991][ T6308] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 235.595183][ T6315] loop1: detected capacity change from 0 to 512 [ 235.684705][ T6317] tipc: Started in network mode [ 235.689895][ T6317] tipc: Node identity 4, cluster identity 4711 [ 235.696427][ T6317] tipc: Node number set to 4 [ 236.200934][ T6315] EXT4-fs error (device loop1): ext4_orphan_get:1410: inode #15: comm syz.1.531: inode has both inline data and extents flags [ 236.506747][ T6315] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.531: couldn't read orphan inode 15 (err -117) [ 236.519853][ T6315] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 237.020708][ T6343] loop1: detected capacity change from 0 to 512 [ 237.070372][ T6340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.081253][ T6340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 237.106498][ T6340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 237.237498][ T6343] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 237.304760][ T6343] System zones: 1-12 [ 237.325156][ T6343] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.536: missing EA_INODE flag [ 237.339555][ T6343] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.536: error while reading EA inode 12 err=-117 [ 237.432825][ T6354] loop5: detected capacity change from 0 to 256 [ 238.124437][ T6356] loop4: detected capacity change from 0 to 164 [ 238.166685][ T6343] EXT4-fs (loop1): 1 orphan inode deleted [ 238.176024][ T6343] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 238.199499][ T6354] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 240.925290][ T6374] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 241.105955][ T6380] tipc: Failed to remove unknown binding: 66,0,0/0:2041719215/2041719217 [ 241.114670][ T6380] tipc: Failed to remove unknown binding: 66,0,0/0:2041719215/2041719216 [ 242.355294][ T6402] loop1: detected capacity change from 0 to 256 [ 242.527305][ T6402] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 243.823903][ T6430] loop3: detected capacity change from 0 to 256 [ 244.432411][ T6430] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 244.955043][ T6443] tipc: Failed to remove unknown binding: 66,0,0/4:1294459647/1294459649 [ 244.963615][ T6443] tipc: Failed to remove unknown binding: 66,0,0/4:1294459647/1294459648 [ 244.970786][ T6442] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 245.517930][ T6454] loop3: detected capacity change from 0 to 256 [ 245.898096][ T6454] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 246.427751][ T6457] loop6: detected capacity change from 0 to 164 [ 246.881502][ T6472] loop1: detected capacity change from 0 to 256 [ 247.636077][ T6472] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 247.860503][ T6482] loop6: detected capacity change from 0 to 512 [ 248.100174][ T6482] EXT4-fs (loop6): 1 orphan inode deleted [ 248.130533][ T6482] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 248.257474][ T6482] ext4 filesystem being mounted at /22/file7 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.736069][ T6510] tipc: Failed to remove unknown binding: 66,0,0/4:4193036519/4193036521 [ 249.744682][ T6510] tipc: Failed to remove unknown binding: 66,0,0/4:4193036519/4193036520 [ 250.522462][ T6519] loop5: detected capacity change from 0 to 256 [ 251.343943][ T6519] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 251.709700][ T6542] loop1: detected capacity change from 0 to 512 [ 251.868820][ T6544] loop5: detected capacity change from 0 to 256 [ 252.041162][ T6544] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 252.669637][ T6542] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 252.678723][ T6542] System zones: 1-12 [ 252.777495][ T6542] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.583: missing EA_INODE flag [ 252.833499][ T6542] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.583: error while reading EA inode 12 err=-117 [ 252.898862][ T6542] EXT4-fs (loop1): 1 orphan inode deleted [ 252.942051][ T6542] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 253.020661][ T6554] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 253.095417][ T6555] ================================================================== [ 253.104291][ T6555] BUG: KASAN: use-after-free in dvb_device_open+0xc5/0x360 [ 253.111536][ T6555] Read of size 8 at addr ffff888029102a18 by task syz.5.584/6555 [ 253.119291][ T6555] [ 253.121642][ T6555] CPU: 0 PID: 6555 Comm: syz.5.584 Not tainted syzkaller #0 [ 253.128952][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.139043][ T6555] Call Trace: [ 253.142349][ T6555] [ 253.145304][ T6555] dump_stack_lvl+0x188/0x250 [ 253.150021][ T6555] ? show_regs_print_info+0x20/0x20 [ 253.155249][ T6555] ? _printk+0xda/0x130 [ 253.159472][ T6555] ? dvb_device_open+0xc5/0x360 [ 253.164540][ T6555] ? load_image+0x410/0x410 [ 253.169068][ T6555] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 253.174744][ T6555] print_address_description+0x60/0x2d0 [ 253.180331][ T6555] ? dvb_device_open+0xc5/0x360 [ 253.185222][ T6555] kasan_report+0xdf/0x130 [ 253.189805][ T6555] ? dvb_device_open+0xc5/0x360 [ 253.194692][ T6555] dvb_device_open+0xc5/0x360 [ 253.199572][ T6555] chrdev_open+0x585/0x5f0 [ 253.204117][ T6555] ? cd_forget+0x160/0x160 [ 253.208568][ T6555] ? fsnotify_perm+0x3a7/0x560 [ 253.213370][ T6555] ? cd_forget+0x160/0x160 [ 253.217903][ T6555] do_dentry_open+0x7f7/0xf90 [ 253.222613][ T6555] ? vfs_open+0x2b/0x80 [ 253.226986][ T6555] path_openat+0x2718/0x2fb0 [ 253.231638][ T6555] ? __kasan_slab_alloc+0xa9/0xc0 [ 253.236708][ T6555] ? do_filp_open+0x400/0x400 [ 253.241437][ T6555] do_filp_open+0x1df/0x400 [ 253.245976][ T6555] ? vfs_tmpfile+0x300/0x300 [ 253.250621][ T6555] ? _raw_spin_unlock+0x24/0x40 [ 253.255500][ T6555] ? alloc_fd+0x59e/0x650 [ 253.259871][ T6555] do_sys_openat2+0x14b/0x500 [ 253.264569][ T6555] ? __lock_acquire+0x7b50/0x7b50 [ 253.269615][ T6555] ? do_sys_open+0xe0/0xe0 [ 253.274147][ T6555] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 253.280156][ T6555] ? lock_chain_count+0x20/0x20 [ 253.285034][ T6555] __x64_sys_openat+0x135/0x160 [ 253.289923][ T6555] do_syscall_64+0x4c/0xa0 [ 253.294397][ T6555] ? clear_bhb_loop+0x30/0x80 [ 253.299174][ T6555] ? clear_bhb_loop+0x30/0x80 [ 253.303902][ T6555] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 253.309819][ T6555] RIP: 0033:0x7feba741698e [ 253.314363][ T6555] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 253.334148][ T6555] RSP: 002b:00007feba566bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 253.342692][ T6555] RAX: ffffffffffffffda RBX: 00007feba566c6c0 RCX: 00007feba741698e [ 253.350690][ T6555] RDX: 0000000000040002 RSI: 00007feba566bc00 RDI: ffffffffffffff9c [ 253.358692][ T6555] RBP: 00007feba566bc00 R08: 0000000000000000 R09: 0000000000000000 [ 253.366730][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 253.374732][ T6555] R13: 00007feba76de218 R14: 00007feba76de180 R15: 00007fff8e6cf6f8 [ 253.382930][ T6555] [ 253.386085][ T6555] [ 253.388427][ T6555] Allocated by task 1: [ 253.392509][ T6555] __kasan_kmalloc+0xaf/0xe0 [ 253.397130][ T6555] dvb_register_device+0x300/0x1dc0 [ 253.402352][ T6555] dvb_register_frontend+0x629/0x900 [ 253.407772][ T6555] vidtv_bridge_probe+0x9c1/0xf30 [ 253.412908][ T6555] platform_probe+0x137/0x1c0 [ 253.417805][ T6555] really_probe+0x276/0xc70 [ 253.422427][ T6555] __driver_probe_device+0x1f5/0x390 [ 253.428297][ T6555] driver_probe_device+0x4f/0x420 [ 253.433362][ T6555] __driver_attach+0x45d/0x660 [ 253.438160][ T6555] bus_for_each_dev+0x182/0x1f0 [ 253.443057][ T6555] bus_add_driver+0x324/0x5d0 [ 253.447799][ T6555] driver_register+0x32d/0x430 [ 253.452872][ T6555] vidtv_bridge_init+0x45/0x80 [ 253.457691][ T6555] do_one_initcall+0x272/0x730 [ 253.462586][ T6555] do_initcall_level+0x13d/0x1f0 [ 253.467561][ T6555] do_initcalls+0x4b/0x90 [ 253.471922][ T6555] kernel_init_freeable+0x3d5/0x560 [ 253.477236][ T6555] kernel_init+0x19/0x1b0 [ 253.481591][ T6555] ret_from_fork+0x1f/0x30 [ 253.486040][ T6555] [ 253.488379][ T6555] The buggy address belongs to the object at ffff888029102a00 [ 253.488379][ T6555] which belongs to the cache kmalloc-256 of size 256 [ 253.502629][ T6555] The buggy address is located 24 bytes inside of [ 253.502629][ T6555] 256-byte region [ffff888029102a00, ffff888029102b00) [ 253.515954][ T6555] The buggy address belongs to the page: [ 253.521707][ T6555] page:ffffea0000a44080 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888029102a00 pfn:0x29102 [ 253.533365][ T6555] head:ffffea0000a44080 order:1 compound_mapcount:0 [ 253.539974][ T6555] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 253.547989][ T6555] raw: 00fff00000010200 ffffea00050dfb80 0000000500000005 ffff888016c41b40 [ 253.556684][ T6555] raw: ffff888029102a00 000000008010000b 00000001ffffffff 0000000000000000 [ 253.565378][ T6555] page dumped because: kasan: bad access detected [ 253.571804][ T6555] page_owner tracks the page as allocated [ 253.577632][ T6555] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 20056699814, free_ts 0 [ 253.596166][ T6555] get_page_from_freelist+0x24f6/0x2670 [ 253.601766][ T6555] __alloc_pages+0x1ee/0x480 [ 253.606386][ T6555] alloc_page_interleave+0x24/0x1e0 [ 253.611623][ T6555] new_slab+0xc0/0x4b0 [ 253.615717][ T6555] ___slab_alloc+0x807/0xdd0 [ 253.620380][ T6555] __kmalloc_node+0x142/0x3a0 [ 253.625179][ T6555] kvmalloc_node+0x84/0x130 [ 253.629703][ T6555] v4l2_ctrl_new+0x70f/0x1310 [ 253.634395][ T6555] v4l2_ctrl_new_std+0x247/0x300 [ 253.639535][ T6555] handler_new_ref+0x14f/0x8d0 [ 253.644320][ T6555] v4l2_ctrl_add_handler+0x197/0x280 [ 253.649624][ T6555] vivid_create_controls+0x2932/0x3380 [ 253.655108][ T6555] vivid_probe+0x39ff/0x6240 [ 253.659917][ T6555] platform_probe+0x137/0x1c0 [ 253.664795][ T6555] really_probe+0x276/0xc70 [ 253.669339][ T6555] __driver_probe_device+0x1f5/0x390 [ 253.675347][ T6555] page_owner free stack trace missing [ 253.680813][ T6555] [ 253.683153][ T6555] Memory state around the buggy address: [ 253.688792][ T6555] ffff888029102900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 253.697057][ T6555] ffff888029102980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 253.705422][ T6555] >ffff888029102a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.713507][ T6555] ^ [ 253.718387][ T6555] ffff888029102a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 253.726639][ T6555] ffff888029102b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 253.734936][ T6555] ================================================================== [ 253.743192][ T6555] Disabling lock debugging due to kernel taint [ 253.888170][ T6569] tipc: Failed to remove unknown binding: 66,0,0/0:570804160/570804162 [ 253.896699][ T6569] tipc: Failed to remove unknown binding: 66,0,0/0:570804160/570804161 [ 254.753251][ T6555] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 254.760621][ T6555] CPU: 1 PID: 6555 Comm: syz.5.584 Tainted: G B syzkaller #0 [ 254.769490][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.779565][ T6555] Call Trace: [ 254.782867][ T6555] [ 254.785819][ T6555] dump_stack_lvl+0x188/0x250 [ 254.790521][ T6555] ? show_regs_print_info+0x20/0x20 [ 254.795755][ T6555] ? load_image+0x410/0x410 [ 254.800381][ T6555] panic+0x2f8/0x850 [ 254.804300][ T6555] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 254.810491][ T6555] ? bpf_jit_dump+0xd0/0xd0 [ 254.815022][ T6555] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 254.821019][ T6555] ? _raw_spin_unlock+0x40/0x40 [ 254.825991][ T6555] ? dvb_device_open+0xc5/0x360 [ 254.830956][ T6555] check_panic_on_warn+0x80/0xa0 [ 254.836435][ T6555] ? dvb_device_open+0xc5/0x360 [ 254.841391][ T6555] end_report+0x6d/0xf0 [ 254.845566][ T6555] kasan_report+0x102/0x130 [ 254.850127][ T6555] ? dvb_device_open+0xc5/0x360 [ 254.855105][ T6555] dvb_device_open+0xc5/0x360 [ 254.859896][ T6555] chrdev_open+0x585/0x5f0 [ 254.864417][ T6555] ? cd_forget+0x160/0x160 [ 254.868950][ T6555] ? fsnotify_perm+0x3a7/0x560 [ 254.873832][ T6555] ? cd_forget+0x160/0x160 [ 254.878276][ T6555] do_dentry_open+0x7f7/0xf90 [ 254.883675][ T6555] ? vfs_open+0x2b/0x80 [ 254.887846][ T6555] path_openat+0x2718/0x2fb0 [ 254.892475][ T6555] ? __kasan_slab_alloc+0xa9/0xc0 [ 254.897613][ T6555] ? do_filp_open+0x400/0x400 [ 254.902490][ T6555] do_filp_open+0x1df/0x400 [ 254.907012][ T6555] ? vfs_tmpfile+0x300/0x300 [ 254.911626][ T6555] ? _raw_spin_unlock+0x24/0x40 [ 254.916490][ T6555] ? alloc_fd+0x59e/0x650 [ 254.920843][ T6555] do_sys_openat2+0x14b/0x500 [ 254.925542][ T6555] ? __lock_acquire+0x7b50/0x7b50 [ 254.930605][ T6555] ? do_sys_open+0xe0/0xe0 [ 254.935075][ T6555] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 254.941077][ T6555] ? lock_chain_count+0x20/0x20 [ 254.946034][ T6555] __x64_sys_openat+0x135/0x160 [ 254.951163][ T6555] do_syscall_64+0x4c/0xa0 [ 254.955604][ T6555] ? clear_bhb_loop+0x30/0x80 [ 254.960558][ T6555] ? clear_bhb_loop+0x30/0x80 [ 254.965610][ T6555] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 254.971618][ T6555] RIP: 0033:0x7feba741698e [ 254.976159][ T6555] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 254.996388][ T6555] RSP: 002b:00007feba566bb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 255.004829][ T6555] RAX: ffffffffffffffda RBX: 00007feba566c6c0 RCX: 00007feba741698e [ 255.012944][ T6555] RDX: 0000000000040002 RSI: 00007feba566bc00 RDI: ffffffffffffff9c [ 255.020931][ T6555] RBP: 00007feba566bc00 R08: 0000000000000000 R09: 0000000000000000 [ 255.028916][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 255.037016][ T6555] R13: 00007feba76de218 R14: 00007feba76de180 R15: 00007fff8e6cf6f8 [ 255.045195][ T6555] [ 255.048307][ T6555] Kernel Offset: disabled [ 255.053444][ T6555] Rebooting in 86400 seconds..