last executing test programs: 2m51.17072568s ago: executing program 32 (id=47): syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500182c00fe8000000087b370"], 0x0) 2m25.717199221s ago: executing program 33 (id=155): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs={0x40046304, 0x8000001}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010027bd7000fbdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a00180003030303030300000c00238005001d00010000000400700008000c006400000008000d"], 0x48}, 0x1, 0x0, 0x0, 0x54}, 0x0) 2m21.181443993s ago: executing program 34 (id=175): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='md0', 0x3) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r1, 0x0, 0x4, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/block/md0/md/level\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000d00)='1:0', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r3, &(0x7f0000001100)='active\n', 0x7) 1m34.792466817s ago: executing program 1 (id=353): r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x5, 0x8, 0x4936, 0xc2, 0x1, 0x1, 0x6}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) syz_ublk_setup_io_uring(0x23, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xffffffff, 0x1e5}, &(0x7f00000001c0), &(0x7f0000000080), &(0x7f0000000140)) 1m32.182136803s ago: executing program 35 (id=352): socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_adjtime(0x0, &(0x7f00000027c0)={0x1000000000066fb, 0x800000000004, 0x376, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x200000240b, 0x3f, 0x9, 0x3, 0x80, 0xfffffffffffffffd, 0x1fff, 0xfffffffffffffff9, 0x4, 0x1010000000000, 0x0, 0x0, 0x100000000003f89, 0x0, 0x7fffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r3 = shmget$private(0x0, 0x2000, 0x20, &(0x7f0000ffd000/0x2000)=nil) shmat(r3, 0x0, 0x8000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstat(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYRES16=0x0]) read$FUSE(r5, &(0x7f000000a3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r6, {0x7, 0x29, 0xc, 0xffffffff90acedc6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) shmctl$IPC_SET(r3, 0x1, &(0x7f0000000240)={{0x3, 0xffffffffffffffff, 0x0, r4, r7, 0x40, 0x6}, 0xfe, 0x7ff, 0xb, 0xacb8, 0x0, r0, 0x3ff}) write(0xffffffffffffffff, &(0x7f0000000300)='1', 0x1) 1m32.171124595s ago: executing program 1 (id=356): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0x86c0, 0x101) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x40000002, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m31.535717656s ago: executing program 1 (id=359): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000000440)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@nodelalloc}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$eJzs3d9vU1UcAPDv7X4wB8pICFEfDAkPYpCObf7AxER8NErE6Ds0W1nIOkrWjrBJIjzIiy+GF2MkMf4BvvtI/Af8K0iUhBgy9cEfqbndLXTrum61c4N+PsmFc+6PnvvtuefsnN42N4C+dTT9JxfxQkR8mUQcbNo2GNnGo6v7rTy8Pp0uSdRqH/+aRJKta+yfZP/vzzLPR8SPn0ecyLWWW1laniuUSsWFLD9enb8yXllaPnlpvjBbnC1enpyaOv361ORbb77Rs1hfOffH1x/efe/0F8dWvvr+/qHbSZyJA9m25jj+gxvNmaOFv7PUUJxZt+NEDwrbS5LdPgG6MpC186FI+4CDMZC1euDp91lE1IA+lWj/0Kca44DG3L5H8+AnxoN3VydA9diHm+MfXP1sJEbqc6PRlWTNzCid7471oPy0jB9+uXM7XWLzzyGe6ZAH2JYbNyPi1OBga/+fZP1f907VPzze3Poy+u3vD+ymu+n459WNxn+5R+Of2GD8s3+DttuNzu0/d78HxbSVjv/e3nD8+6jrGhvIcs/Wx3xDycVLpeKpiHguIo5HreOtj9Mr92rttjWP/9IlLb8xFszO4/7gvrXHzBSqhYgY7jLkNR7cjHixMf5NK7il/x+pj3XX13/6fpzbYhlHindeal1b+yu2FP/Oqn0X8fKG9f+4WpPN70+O16+H8cZV0er3W0d+alf+bsef1v/o5vGPJc33ayvbL+PbkT+L7bZ1e/0PJ5/U041GcK1QrS5MRAwnH7Sun3x8bCPf2D+N//ixzfu/ja7/dPJ1IUvX9m0e/63Dty50H//OSuOf2Vb9bz9x7/1Pv2lX/tbq/7V66ni2Juv/IuKfkZYXzOpiqyfYkzcRAAAAAAAA9ohcRByIJJd/lM7l8vnV73ccjtFcqVypnrhYXrw8E/Xfyo7FUK5xp/tg0/chJrLvwzbyk+vyUxFxKOK3rNhifrpcmtnl2AEAAAAAAAAAAAAAAAAAAGCv2N/m9/+pnwd2++yAHVd/sEGHhxiEh7zDU6njI/978aQnYE/q2P6Bp5b2D/1L+4f+pf1D/9L+oX9p/9C/tH/oX9o/AAAAAAAAAAAAAAAAAAAAAAAAAAAA9NS5s2fTpbby8Pp0mp+5urQ4V756cqZYmcvPL07np8sLV/Kz5fJsqZifLs93er1SuXxlYjIWr41Xi5XqeGVp+fx8efFy9fyl+cJs8Xxx6H+JCgAAAAAAAAAAAAAAAAAAAJ4slaXluUKpVFyQaJt4J/bEaexkgKu6OnwwS3w0ulfCkVibuJlV7/aO2sVOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADW+TcAAP//CskxYQ==") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) chdir(&(0x7f0000000380)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) 1m30.087999894s ago: executing program 1 (id=361): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 1m29.192490118s ago: executing program 1 (id=365): r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) 1m28.712164346s ago: executing program 36 (id=365): r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) 1m27.432976839s ago: executing program 4 (id=373): syz_emit_vhci(&(0x7f0000000900)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x80b}}}, 0x7) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)={r1}) 1m26.528310475s ago: executing program 4 (id=375): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000090)={&(0x7f0000000300)=@newtclass={0x30, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000000a0)={&(0x7f0000000400)=@newtclass={0x38, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x2, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x64}]}}]}, 0x38}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m25.182199942s ago: executing program 4 (id=377): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000b00)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x81000001}}, {@errors_remount}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000018c0)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x1, 0x1}, {0x3, 0x0, 0x4}, {0x2, 0x6, 0x4}, 0x0, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "866782d35f42e0b45d45d988ff0000000000001000"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2f8) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x5000000d, 0x244, 0x9, '\x00=\x00'}) r1 = syz_open_pts(r0, 0x400) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1m24.024703909s ago: executing program 4 (id=379): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xd27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000380)='P', 0x1, 0x44, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831", 0xb7, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x8, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x49, 0x6, 0x5f, 0x9, 0x11, 0xffff2d35, 0xff7fff01, 0x6, 0x5, 0x6, 0x5, 0x6, 0x20000004, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0xffffffff, 0xffffffff, 0x0, 0x1004, 0x7, 0x20003, 0x4, 0x2, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xa, 0x13, 0x1, 0x7, 0x5, 0x3f, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x7, 0x80, 0x0, 0x5, 0xc, 0x8, 0x8002, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8006, 0x5, 0xfffffff7, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x4, 0xfffffff8, 0x5, 0x0, 0x3, 0x5, 0x31, 0xe, 0x1, 0x7, 0xea4, 0x100, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x2, 0x200004e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x6, 0x6, 0x47, 0x2, 0x1, 0xfe000000, 0xa, 0x2, 0x4, 0x9, 0x3, 0x1, 0x4000009, 0xa, 0x0, 0x3, 0xbc45, 0x65, 0x42, 0x3], [0x7, 0x408, 0x4, 0x9, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x80005, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xffffffff, 0x5, 0x2, 0x1, 0x400003, 0x20000008, 0x4, 0x2, 0x3, 0x107, 0x800003, 0x200, 0x80, 0x3, 0x10000, 0x2950bfaf, 0x1000, 0x8001, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80aaed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x5, 0x2, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0xffffffff, 0x2000082, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x3, 0x7, 0xb0, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x2800000, 0xa1f, 0xf40, 0xa, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x1, 0xd6, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m23.735965619s ago: executing program 4 (id=382): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000000440)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@nodelalloc}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(0x0) setpgid(r0, r0) setpgid(0x0, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) 1m23.418720284s ago: executing program 4 (id=383): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) fspick(0xffffffffffffff9c, 0x0, 0x0) bind(r0, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[], 0xc8) 1m20.235113248s ago: executing program 7 (id=387): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820008, 0x0, 0xda, 0x0, &(0x7f0000000280)) 1m20.064700063s ago: executing program 7 (id=388): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x1001a, &(0x7f0000000b00)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x81000001}}, {@errors_remount}, {@inlinecrypt}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x80000001}}]}, 0xff, 0x439, &(0x7f00000004c0)="$eJzs20tvG0UcAPD/rp30TUIpjz6AQEFEPJImLdADQgKBxAUJCQ7lGJK0KnUb1ASJVhEEhLiiStwRRyQ+ASe4IOCExJUPgCpVKJcWTkZr7yaO4zycOnHAv5+09czuuDN/74w9u5MNoGcNZf8kEQcj4o+IGKhnVxYYqr/cWZyf/HtxfjKJavXtv5JauduL85NF0eJ9B/LMcBqRfp7E8Rb1zl67fmmiUpm+mufL+etzFy9PXJi+MH1l/OzZM6fHXnxh/PmOxJm16faxj2dOHH3j3RtvTp678d4v3yVF/E1xdMjQy+scfLJa7XB13XWoIZ2Uu9gQ2lLKx15fbfwPRCmWT95AvP5ZVxsHbKtqtVo9sPbhhSrwP5ZEt1sAdEfxQ59d/xbbDk09doVbr9QvgLK47+Rb/Ug50rxMX9P1bScNRcS5hX++zrbYnvsQAAAr/JDNf55tNf9L44GGcvfka0ODEXFvRByOiPsi4khE3B9RK/tgRDzUZv1DTfnV85/05pYC26Rs/vdSvra1cv5XzP5isJTnDtXi70vOX6xMn8o/k+Ho25Plx9ap48fXfv9yrWON879sy+ov5oJ5O26W96x8z9TE3MTdxNzo1qcRx8qt4k+WVgKSiDgaEce2WMfFp789sdaxjeNfRwfWmarfRDxVP/8L0RR/IUuNzl3+YHT22vUW65Oje6MyfWq06BWr/frbF2+tVf9dxd8B2fnf37L/L8U/mDSu18629//v2eD4Vvt/f/JOLd2f7/toYm7u6lhE/6WVnaK2f3x1viifxT98svX4PxzLn8TxiMg68cMR8UhEPJq3/bGIeDwiTq4T48+vPvH+1uPfXln8U22d/+VEfzTvaZ0oXfrp+9jbUOlgO/Fn5/9MLTWc79nM999m2tV+bwYAAID/pjQiDkaSjiyl03RkpP738kdif1qZmZ175vzMh1em6s8IDEZfWtzpGmi4HzqWX9YX+fGm/On8vvFXpX21/MjkTGWq28FDjzuwxvjP/FnqduuAbed5Lehdxj/0LuMfepfxD72rxfjf1412ADuv1e//J11oB7Dzmsa/ZT/oIa7/oXcZ/9C7jH/oSbP7YuOH5CUkViUi3RXN2MZEUt4VzehSotvfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xbwAAAP//Eg/hCA==") mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000018c0)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x3b0, 0xffffffff, 0xffffffff, 0x3b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x1, 0x1, 0x1}, {0x3, 0x0, 0x4}, {0x2, 0x6, 0x4}, 0x0, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "866782d35f42e0b45d45d988ff0000000000001000"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2f8) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x5000000d, 0x244, 0x9, '\x00=\x00'}) r1 = syz_open_pts(r0, 0x400) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 1m19.54394865s ago: executing program 7 (id=389): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = getpid() syz_pidfd_open(r0, 0x0) socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x13, 0xfa00, {0x2, &(0x7f0000002100)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x5, @local, 0xff}, r3, 0x8001}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m19.289557842s ago: executing program 7 (id=390): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xd27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000380)='P', 0x1, 0x44, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e74800", 0xba, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x8, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x49, 0x6, 0x5f, 0x9, 0x11, 0xffff2d35, 0xff7fff01, 0x6, 0x5, 0x6, 0x5, 0x6, 0x20000004, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0xffffffff, 0xffffffff, 0x0, 0x1004, 0x7, 0x20003, 0x4, 0x2, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xa, 0x13, 0x1, 0x7, 0x5, 0x3f, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x7, 0x80, 0x0, 0x5, 0xc, 0x8, 0x8002, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8006, 0x5, 0xfffffff7, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x4, 0xfffffff8, 0x5, 0x0, 0x3, 0x5, 0x31, 0xe, 0x1, 0x7, 0xea4, 0x100, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x2, 0x200004e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x6, 0x6, 0x47, 0x2, 0x1, 0xfe000000, 0xa, 0x2, 0x4, 0x9, 0x3, 0x1, 0x4000009, 0xa, 0x0, 0x3, 0xbc45, 0x65, 0x42, 0x3], [0x7, 0x408, 0x4, 0x9, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x80005, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xffffffff, 0x5, 0x2, 0x1, 0x400003, 0x20000008, 0x4, 0x2, 0x3, 0x107, 0x800003, 0x200, 0x80, 0x3, 0x10000, 0x2950bfaf, 0x1000, 0x8001, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80aaed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x5, 0x2, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0xffffffff, 0x2000082, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x3, 0x7, 0xb0, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x2800000, 0xa1f, 0xf40, 0xa, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x1, 0xd6, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m19.146362852s ago: executing program 7 (id=391): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000000440)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@nodelalloc}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(0x0) setpgid(r0, r0) setpgid(0x0, r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) 1m18.823502449s ago: executing program 7 (id=392): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0x9}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x448, &(0x7f0000000d40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0xa00010, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0xc1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000b40)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000c40)=0xe8) mount$fuse(0x0, &(0x7f00000004c0)='./file2\x00', &(0x7f0000000500), 0x8, &(0x7f00000011c0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0x6}}, {@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other}], [{@obj_role={'obj_role', 0x3d, '/dev/kvm\x00'}}, {@uid_eq={'uid', 0x3d, r6}}]}}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000380)={{0x5, 0x2, 0x4, 0x5327, '\x00', 0x92}, 0x1, 0x40, 0x7, r0, 0xa, 0xff, 'syz1\x00', &(0x7f0000000300)=['ext4\x00', ')\x00', 'syzkaller\x00', '\x00', 'mb_optimize_scan', 'stripe', '\x00', 'syzkaller\x00', 'nombcache', 'mb_optimize_scan'], 0x4c}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000080)=0x4, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000180100800c00018008000400", @ANYRES32=r8], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 1m16.72378062s ago: executing program 8 (id=355): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000001800)="$eJzs2E9rXFUYB+D33kxi2sZOqi6sm4oVWpBO/rWhqZvWhSAIFgquVAx2koZMmpJJ0WSV4lIXLgQVEbQbFyLNQuhGNCD4AXRjv4IgKrpwIYzcySQN6SSNdeKh6fPAyZxz37n5vWeGucydAB5YTxZ/soi+iBiMiHLreB4RPc1Zb8TS6vNujCxfKkYWjcaFX7PitLg+snxp7X9lrccD0TwljkfEc89n8ejbd+bWFxanx2u16lxrPTA/c2WgvrB4YmpmfLI6Wb08PHz61NjJodHRsY7tdWggXvvuq7MvL527+uXgK7PTRb99rdrGfXRS1uZYKSJe3Y2wBLpa++nacCwrJWwIAIBtFd/zH4mIp5rf4crRFbe/vJXj1rdJmwMAAAA6onGkAQAAAOxxqX9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/tBoZNEAAAAA9rTUvz8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB/uT6yfGlt/J+5v5yLiP7V/ButsVopxVLzsTe6I2L/H1mUNpyXRcRgB/KXrkXE4+32nzXz+6O3udqcn0fE+cT5r3cgHx5kK8X152y7z1++fv2JNp+/0upp/9na9e/GHde/2/ldW1z/ruww4/MfX3p3y/xrEU+U2uVn6/nZFvlLO8z/5sXDH21Va3wWcSza52/MGpifuTJQX1g8MTUzPlmdrF4eHj59auzk0Ojo2MDEVK06uPq3bcYnX7zz/Xb7379Vfhbbvv7v7XD/Rw89+/Wn2+QfP7r9+9/u9S96Wt5h/u8/HPx7q1qRf3GL/d/t/V/ZYf4LN8/f3OFTAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYI/KI6Issr6zP87xSiTgQEY/F/rw2W59/ZmL26uWLRS2iP7rzialadTAiyqvrrFgPNee318Ob1iMRcSgi3i/va64rb8zWLqbePAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOsORERfZHklIvKI+LOc55VK6q4AAACAjutP3QAAAACw69z/AwAAwN7n/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddujIyq0sIpbO7GuOQk+r1p20M2C35akbAJLpSt0AkEwpdQNAMu7xgewu9d57qAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw9xw7vHIri4ilM/uao9DTqnUn7QzYbXnqBoBkulI3ACRTSt0AkIx7fCC7S733HioAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7D19zZHllYjIm/M8r1QiHo6I/ujOJqZq1cGIOBgRP5W7HyrWQ6mbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOPqC4vT47Vadc7ExMRkfZL6ygQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAr1hcXp8VqtOldP3QkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABp5T9nEVGMY+Wn+zZXe7K/ys3HiHjz4wsfvDU+Pz83VBz/bf34/Iet48Mp+gcAAAA2W7tPX7uPBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Kn6wuL0eK1WndvFSeo9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zj8BAAD//5GsoMo=") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000300)='./file0\x00') syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "66f59e", 0x14, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x8, 0x4, 0x0, 0x4}}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1m15.75248459s ago: executing program 8 (id=393): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x2b, 0x1, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000140)=0xfb78, 0x4) 1m13.6559821s ago: executing program 8 (id=399): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xd27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000380)='P', 0x1, 0x44, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e74800", 0xba, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x8, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x49, 0x6, 0x5f, 0x9, 0x11, 0xffff2d35, 0xff7fff01, 0x6, 0x5, 0x6, 0x5, 0x6, 0x20000004, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0xffffffff, 0xffffffff, 0x0, 0x1004, 0x7, 0x20003, 0x4, 0x2, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xa, 0x13, 0x1, 0x7, 0x5, 0x3f, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x7, 0x80, 0x0, 0x5, 0xc, 0x8, 0x8002, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8006, 0x5, 0xfffffff7, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x4, 0xfffffff8, 0x5, 0x0, 0x3, 0x5, 0x31, 0xe, 0x1, 0x7, 0xea4, 0x100, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x2, 0x200004e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x6, 0x6, 0x47, 0x2, 0x1, 0xfe000000, 0xa, 0x2, 0x4, 0x9, 0x3, 0x1, 0x4000009, 0xa, 0x0, 0x3, 0xbc45, 0x65, 0x42, 0x3], [0x7, 0x408, 0x4, 0x9, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x80005, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xffffffff, 0x5, 0x2, 0x1, 0x400003, 0x20000008, 0x4, 0x2, 0x3, 0x107, 0x800003, 0x200, 0x80, 0x3, 0x10000, 0x2950bfaf, 0x1000, 0x8001, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80aaed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x5, 0x2, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0xffffffff, 0x2000082, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x3, 0x7, 0xb0, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x2800000, 0xa1f, 0xf40, 0xa, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x1, 0xd6, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m13.601533022s ago: executing program 8 (id=400): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000000440)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@nodelalloc}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(&(0x7f0000000380)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 1m13.381459137s ago: executing program 8 (id=401): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x6, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x81, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x5, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2445, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m11.90695939s ago: executing program 37 (id=374): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1fd) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) 1m10.928429841s ago: executing program 9 (id=407): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x820008, 0x0, 0xda, 0x0, &(0x7f0000000280)) 1m10.909831865s ago: executing program 9 (id=408): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x53, 0x0, 0xffffffffffffff98) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000400)='ns/mnt\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="3d3ae3", 0x3}], 0x1}}], 0x1, 0x801) 1m9.916066859s ago: executing program 9 (id=409): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) exit(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x15) socket$nl_generic(0x10, 0x3, 0x10) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) 1m8.804718737s ago: executing program 9 (id=410): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xd27, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r0, &(0x7f0000000380)='P', 0x1, 0x44, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e74800", 0xba, 0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x8, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x49, 0x6, 0x5f, 0x9, 0x11, 0xffff2d35, 0xff7fff01, 0x6, 0x5, 0x6, 0x5, 0x6, 0x20000004, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0xffffffff, 0xffffffff, 0x0, 0x1004, 0x7, 0x20003, 0x4, 0x2, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xa, 0x13, 0x1, 0x7, 0x5, 0x3f, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x7, 0x80, 0x0, 0x5, 0xc, 0x8, 0x8002, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8006, 0x5, 0xfffffff7, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x4, 0xfffffff8, 0x5, 0x0, 0x3, 0x5, 0x31, 0xe, 0x1, 0x7, 0xea4, 0x100, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x2, 0x200004e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x6, 0x6, 0x47, 0x2, 0x1, 0xfe000000, 0xa, 0x2, 0x4, 0x9, 0x3, 0x1, 0x4000009, 0xa, 0x0, 0x3, 0xbc45, 0x65, 0x42, 0x3], [0x7, 0x408, 0x4, 0x9, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x80005, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xffffffff, 0x5, 0x2, 0x1, 0x400003, 0x20000008, 0x4, 0x2, 0x3, 0x107, 0x800003, 0x200, 0x80, 0x3, 0x10000, 0x2950bfaf, 0x1000, 0x8001, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80aaed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x5, 0x2, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0xffffffff, 0x2000082, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x3, 0x7, 0xb0, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x2800000, 0xa1f, 0xf40, 0xa, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x1, 0xd6, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m8.636300262s ago: executing program 9 (id=411): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000000440)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@nodelalloc}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(&(0x7f0000000380)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 1m8.404300079s ago: executing program 9 (id=412): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x2b, 0x1, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000140)=0xfb78, 0x4) 1m8.378980935s ago: executing program 38 (id=383): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xff) mount(0x0, &(0x7f0000000340)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) fspick(0xffffffffffffff9c, 0x0, 0x0) bind(r0, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[], 0xc8) 1m2.945660111s ago: executing program 39 (id=392): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@stripe={'stripe', 0x3d, 0x9}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x448, &(0x7f0000000d40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0xa00010, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0xc1, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000b40)={{{@in=@empty, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000c40)=0xe8) mount$fuse(0x0, &(0x7f00000004c0)='./file2\x00', &(0x7f0000000500), 0x8, &(0x7f00000011c0)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0x6}}, {@blksize={'blksize', 0x3d, 0xc00}}, {@allow_other}], [{@obj_role={'obj_role', 0x3d, '/dev/kvm\x00'}}, {@uid_eq={'uid', 0x3d, r6}}]}}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r7 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x400, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000380)={{0x5, 0x2, 0x4, 0x5327, '\x00', 0x92}, 0x1, 0x40, 0x7, r0, 0xa, 0xff, 'syz1\x00', &(0x7f0000000300)=['ext4\x00', ')\x00', 'syzkaller\x00', '\x00', 'mb_optimize_scan', 'stripe', '\x00', 'syzkaller\x00', 'nombcache', 'mb_optimize_scan'], 0x4c}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000080)=0x4, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="280000005e00010000000000000000000c00fe0001000000180100800c00018008000400", @ANYRES32=r8], 0x28}], 0x1, 0x0, 0x0, 0x40004}, 0x0) 58.289944718s ago: executing program 40 (id=401): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x6, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x4008, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0xffffffff, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x6, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x81, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x5, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x1, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x2, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0x9e, 0x7, 0x53cf697b, 0x4, 0x6, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x1, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2445, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 58.275085931s ago: executing program 3 (id=417): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0) write(r0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x15, @loopback}, 0x10) listen(r1, 0x5) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_emit_ethernet(0x5a, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000001ffffffffffff08004540004c00000000c0069078ac1e0101ac1414aa10002000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB="e010004090780000fe06e2d4c3d9140a000000020000e7b0131248be668c87c7e265e3d9ee8e98e372bd0802"], 0x0) write(r2, &(0x7f0000000400)='PASV\r\n', 0x6) r4 = accept4(r1, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000500)='227 Entering Passive Mode (127,0,0,1,19,136)', 0x2c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000700)={0x2, 0x1388, @loopback}, 0x10) 58.043651499s ago: executing program 3 (id=418): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x53, 0x0, 0xffffffffffffff98) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000400)='ns/mnt\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="3d3ae3", 0x3}], 0x1}}], 0x1, 0x801) 57.751449839s ago: executing program 3 (id=419): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0xf, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'lo\x00'}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) personality(0x619641b6fb4b8591) syz_mount_image$squashfs(&(0x7f0000000600), &(0x7f0000000280)='./file1\x00', 0x200802, &(0x7f0000000500)=ANY=[], 0x9, 0x20e, &(0x7f0000001940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x146) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x3b, &(0x7f0000caaffb), &(0x7f0000000040)=0xfeed) bind$inet(r4, 0x0, 0x0) connect$inet(r4, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x100000a, 0x4000010, r0, 0x4000) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 56.643701056s ago: executing program 3 (id=420): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) exit(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x15) socket$nl_generic(0x10, 0x3, 0x10) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) 55.464890309s ago: executing program 3 (id=421): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x1303805, &(0x7f0000000440)={[{@dioread_lock}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@journal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_async_commit}, {@max_batch_time={'max_batch_time', 0x3d, 0xffffffffffffffff}}, {@nodelalloc}, {@bh}, {@nodelalloc}], [{@dont_hash}, {@euid_eq={'euid', 0x3d, 0xee01}}]}, 0xfc, 0x586, &(0x7f0000000ac0)="$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") mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(&(0x7f0000000380)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 55.063641611s ago: executing program 3 (id=423): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xa000005, 0x0, 0x0}) 52.641452289s ago: executing program 41 (id=412): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x2b, 0x1, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000140)=0xfb78, 0x4) 39.83977057s ago: executing program 42 (id=423): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000040)={0xa000005, 0x0, 0x0}) 17.205818267s ago: executing program 1 (id=426): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x53, 0x0, 0xffffffffffffff98) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000400)='ns/mnt\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000080)="3d3ae3", 0x3}], 0x1}}], 0x1, 0x801) 12.435704897s ago: executing program 2 (id=490): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x2, {0x1c, 0x4e21, @multicast1}}, 0x24) r1 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000340)={0x5, 0x1}, 0x31) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000680)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xff, 0x4}, {0x6, 0x58}}}}, 0x11) syz_emit_vhci(0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000a40), 0x14000, 0x0) ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) setns(0xc9, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) close(r4) 10.985930254s ago: executing program 2 (id=493): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain) add_key(&(0x7f0000000d00)='asymmetric\x00', 0x0, &(0x7f00000012c0)="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", 0x55a, r0) 10.81300634s ago: executing program 2 (id=495): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) exit(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x15) socket$nl_generic(0x10, 0x3, 0x10) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) 9.565390846s ago: executing program 6 (id=498): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x28, 0x768, &(0x7f0000000d40)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fstat(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/multicast_router\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) 9.565218826s ago: executing program 2 (id=499): r0 = io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x1, 0x400, 0x3, 0x402c1}) r1 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) syz_usb_connect(0x5, 0x59, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source\x00', &(0x7f0000000200)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000280)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000340)='mountproto\x00', &(0x7f0000000380)='udp\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000004c0)='timeo\x00Ms\xac\xc6Md5\xf5IU\xd5\xed\x9a\xc0{R\xbe\xbf\x93\x88\xd7E\xf9\xff\xff\xff\xd2\xedQQ\xca4\x95N)c]>\x0f$*\xc0\x93?T\xc7HF\xe5pI\xb8>x}\x9f8\x8bT\xf3\xda|)[{\xa5\x97\xef\x86\r\xb7\xc5\xbed\x85\xf2\xbf\'\n\xd5s\xdd\xdbh\xc5\xe9)\xe3\xd8\xfd\xc2E\xec\xc7\b\xf4\t\x8b\xb8\x9e\xf7\xff[\xccmb\xe6}\xde\xc7\xf7\xc7\xe4h\xa2\x9b\xc3\\\x97/\xb5Y\xeehD{\xa4\x88\xd7g\x82\xae\x15^\x02\xd6\xaaeW\xb6\x81\x8dq~W\xec\xf8G\xd0mf\xf1z\xb8hG\xd8SN', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.206646215s ago: executing program 2 (id=501): setns(0xc9, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xfd, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 7.995743799s ago: executing program 6 (id=502): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x2, {0x1c, 0x4e21, @multicast1}}, 0x24) r1 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000340)={0x5, 0x1}, 0x31) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000680)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xff, 0x4}, {0x6, 0x58}}}}, 0x11) syz_emit_vhci(0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000a40), 0x14000, 0x0) ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) setns(0xc9, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) close(r4) 6.680387308s ago: executing program 2 (id=506): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r1 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xa, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) shmat(r1, &(0x7f0000ffc000/0x3000)=nil, 0x6000) shmctl$IPC_RMID(r1, 0x0) 6.489669667s ago: executing program 5 (id=507): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) exit(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x15) socket$nl_generic(0x10, 0x3, 0x10) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) 5.248090662s ago: executing program 0 (id=509): r0 = openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death={0x400c630e, 0x0, 0xfc}, @clear_death], 0x0, 0x0, 0x0}) 5.247319322s ago: executing program 5 (id=510): mount(0x0, 0x0, 0x0, 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r0, 0x8b2a, 0x0) umount2(0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0x0, 0x1}, 0x6) write$rfkill(r1, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) 5.06450631s ago: executing program 0 (id=511): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) pread64(r0, 0x0, 0x0, 0x6) read$FUSE(r0, &(0x7f0000009c00)={0x2020}, 0x2020) 4.893364695s ago: executing program 0 (id=512): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x4010) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xa, 0x148, 0x290, 0x10, 0x4b0, 0x2a8, 0x2a8, 0x4b0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @multicast1, 0x0, 0x0, 'bridge0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x220, 0x290, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x400, 0x0, 0x44, 0x81, 0xff, 0xff, 0xfffffaf9, 0xe, 0x20, 0x8}, {0x9}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x2, 0x0, 0x7f, 0x0, 0x0, "f2f7b90ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc0d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', 'veth0_to_team\x00', {}, {}, 0x20}, 0x0, 0x1f8, 0x220, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x4, 0xff, 0x0, 0x0, 0x0, 0x7fff, 0x240, 0x0, 0x8}, {0xfffffffffffffffc}}}, @common=@addrtype={{0x30}, {0xe84, 0x48}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x5a8) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0x3, 0x3, 0x2b}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x6, 0x3, 0xcb}) close_range(r0, r2, 0x0) 3.704294659s ago: executing program 0 (id=513): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x28, 0x768, &(0x7f0000000d40)="$eJzs3M1rHGUYAPBnptmmbdJuBMEPRIQWWijdJM2lPTVevBUKBa81JJsQMsmG7KZ2Y8HWs1Cbi4Ig6tmjV6HUP8CbFBS8C6I1HsTLymw2aRuz222TdmP6+8F03vedj+d5usO7O5CZAF5Yb+X/JBGDEXEpIoqt8TQiDjZbhyJurO+3dv/6ZL4k0Whc/j3JD4u1RnHzXElrPRDNQ+LViLhbiDj90X/jVusrcxNZVl5q9Ydr84vD1frKmdn5iZnyTHlhdOz8yLmxsXMjY4+t4ZUuaz3x7vnDt394Z3X1x29rt97sO5PEeLPuaNXW5Wk6SbcOrP+fFGJ8y/jCLgTbS5JeJwAAQFfyH6wHIqKv+Su1GAeaLQAAAGA/afQ3uvHG0dbuAAAAwP9R4qYeAAAA9rmNvwPYeLZ3l56D7dpvb0fE0Hbx+5rPEEccikJEHFlLHnkyIVk/DHbkxs2IuDO+9fr7Or/Cbuzw3CNb+o8+I31wh2dnN9zJ55/x7eafdHP+iW3mn76NdyfsUPv570H8A23mv0tdxvjui9cKbePfjHi9b7v4yWb8pE3897qMf2v149vttjW+ijj50PfPQDyI/3CsDu+HGJ+ezTq+fuDuP6fudar/yLbff0krhfb1L3ZZ/wdrf861m0vy+KeOd/78t4ufXxOftPJII+J2a533V7fEOD7/0/ed6p+KaDzN5/9ll/X/8k3/tS53BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKY0IgYjSUub7TQtlSIGIuLlOJJmlWrt9HRleWEq3xYxFIV0ejYrj0REcb2f5P3RZvtB/+yW/lhEvPTz4fWgs1m5NFnJpnpdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJsGImIwkrQUEWlE/FVM01Ipoq+LY/ufQ34AAADALhnqdQIAAADAM+f+HwAAAPa/p73/T3Y5DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBfu3TxYr401u5fn8z7U1fry3OVq2emytW50vzyZGmysrRYmqlUZrJyabIy/7jzZZXK4uj5WL42XCtXa8PV+sqV+cryQu3K7PzETPlKufBcqgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBJDTaXJC1FRNpsp2mpFHE0IoaikEzPZuWRiDgWEfeKhf68P9rrpAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANh11frK3ESWlZf2UuPY3khDQ+NZNT6MiD2QRodGr2cmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6oVpfmZvIsvJStdeZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Fvpr0lE5MvJ4onBrVsPJn8Xm+uIeP/zy59em6jVlkbz8T82x2uftcbP9iJ/AAAAeCFceJKdN+7TN+7jAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAulWtr8xNZFl5aWeNC1FfaSRt9ul1jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNP5NwAA//+W0700") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) fstat(r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/bridge0/bridge/multicast_router\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='1', 0x1) 3.704083089s ago: executing program 6 (id=514): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000700)=0x3000008, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 2.911737742s ago: executing program 0 (id=515): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r4, &(0x7f0000000500)={0xa, 0xfffd, 0xffffffff, @local, 0x6}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000440), 0x1000a) sendfile(r4, r5, &(0x7f0000000080)=0x11, 0x7fff) 2.911502122s ago: executing program 5 (id=516): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000300)={0x20, 0x2, 0x0, 0x40000008}) 2.67509918s ago: executing program 5 (id=517): add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b050030343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657a30820222300d06092a864886f70d01010105000382020f003082020a0200100000000000003bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a98626aa6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)=@chain) add_key(&(0x7f0000000d00)='asymmetric\x00', 0x0, &(0x7f00000012c0)="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", 0x55a, 0x0) 2.411323455s ago: executing program 6 (id=518): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @any, 0x40}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40}, 0xe) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000300)={r1}) 1.40931554s ago: executing program 5 (id=519): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x40) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r0, 0x3, 0x52a9, 0x20008000c61) 1.402892672s ago: executing program 0 (id=520): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400000000a882, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mlockall(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000380)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r1, 0x0) write$P9_RREAD(r0, &(0x7f0000002180)=ANY=[], 0x2f) 1.344725904s ago: executing program 6 (id=521): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) exit(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x15) socket$nl_generic(0x10, 0x3, 0x10) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="39000000130003470fbb65e1c3e4ffff060060001600000056000000250000001900b3c0b6d20300070a0000000084db26b9e4e20000000000", 0x39}], 0x1) 146.845719ms ago: executing program 6 (id=522): ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/230, &(0x7f00000001c0)=0xe6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) write(r1, 0x0, 0x0) close(r1) write(0xffffffffffffffff, &(0x7f0000000300)='pcspkr', 0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b', 0x6) r3 = openat(0xffffffffffffff9c, 0x0, 0x101202, 0x0) write(r3, &(0x7f0000000b00), 0x0) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(0x0, 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000780)="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", 0x54c, 0x0) 0s ago: executing program 5 (id=523): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x2, {0x1c, 0x4e21, @multicast1}}, 0x24) r1 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000340)={0x5, 0x1}, 0x31) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000000680)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_le_credits={{0x16, 0xff, 0x4}, {0x6, 0x58}}}}, 0x11) syz_emit_vhci(0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000a40), 0x14000, 0x0) ioctl$XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) setns(0xc9, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) close(r4) kernel console output (not intermixed with test programs): wn parameter 'nouser_xattr' [ 183.029013][ T5588] loop1: detected capacity change from 0 to 2048 [ 183.098313][ T5591] FAULT_INJECTION: forcing a failure. [ 183.098313][ T5591] name fail_futex, interval 1, probability 0, space 0, times 0 [ 183.415215][ T5588] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 183.603375][ T5591] CPU: 1 PID: 5591 Comm: syz.6.325 Not tainted syzkaller #0 [ 183.610747][ T5591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 183.620834][ T5591] Call Trace: [ 183.624139][ T5591] [ 183.627092][ T5591] dump_stack_lvl+0x188/0x24e [ 183.631806][ T5591] ? show_regs_print_info+0x12/0x12 [ 183.637035][ T5591] ? load_image+0x410/0x410 [ 183.641570][ T5591] ? mark_lock+0x94/0x320 [ 183.645936][ T5591] ? __lock_acquire+0x1465/0x7c40 [ 183.651000][ T5591] should_fail_ex+0x390/0x4c0 [ 183.655726][ T5591] get_futex_key+0x1b1/0x1000 [ 183.660437][ T5591] ? verify_lock_unused+0x140/0x140 [ 183.665666][ T5591] ? futex_setup_timer+0xc0/0xc0 [ 183.670630][ T5591] ? verify_lock_unused+0x140/0x140 [ 183.675866][ T5591] futex_wake+0x123/0x4f0 [ 183.680228][ T5591] ? futex_wake_mark+0x150/0x150 [ 183.685209][ T5591] do_futex+0x2e2/0x320 [ 183.689400][ T5591] ? __ia32_sys_get_robust_list+0x100/0x100 [ 183.695345][ T5591] ? __might_fault+0xc2/0x120 [ 183.700081][ T5591] mm_release+0x20a/0x330 [ 183.704455][ T5591] ? exit_robust_list+0x2ce/0x2f0 [ 183.709520][ T5591] ? exit_mm_release+0x30/0x30 [ 183.714314][ T5591] ? lockdep_hardirqs_on+0x94/0x140 [ 183.719557][ T5591] exit_mm+0xa0/0x350 [ 183.723576][ T5591] ? sysctl_delayacct+0x220/0x220 [ 183.728636][ T5591] ? do_exit+0x2570/0x2570 [ 183.733084][ T5591] ? mm_trace_rss_stat+0xa7/0x250 [ 183.738146][ T5591] ? sync_mm_rss+0x211/0x350 [ 183.742778][ T5591] do_exit+0x958/0x2570 [ 183.746980][ T5591] ? put_task_struct+0x80/0x80 [ 183.747970][ T5588] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.751766][ T5591] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 183.751800][ T5591] ? lock_chain_count+0x20/0x20 [ 183.751826][ T5591] ? _raw_spin_lock_irq+0xb7/0xf0 [ 183.751854][ T5591] do_group_exit+0x229/0x2e0 [ 183.751878][ T5591] ? lockdep_hardirqs_on+0x94/0x140 [ 183.751905][ T5591] get_signal+0x1259/0x1340 [ 183.751952][ T5591] arch_do_signal_or_restart+0xc4/0x1310 [ 183.751979][ T5591] ? file_end_write+0x156/0x250 [ 183.803047][ T5591] ? vfs_write+0x777/0x9a0 [ 183.807514][ T5591] ? do_futex+0x310/0x320 [ 183.811882][ T5591] ? get_sigframe_size+0x10/0x10 [ 183.816891][ T5591] ? __ia32_sys_get_robust_list+0x100/0x100 [ 183.822844][ T5591] ? exit_to_user_mode_loop+0x3b/0x110 [ 183.828358][ T5591] exit_to_user_mode_loop+0x70/0x110 [ 183.833698][ T5591] exit_to_user_mode_prepare+0xee/0x180 [ 183.839298][ T5591] syscall_exit_to_user_mode+0x16/0x40 [ 183.844797][ T5591] do_syscall_64+0x58/0xa0 [ 183.849245][ T5591] ? clear_bhb_loop+0x60/0xb0 [ 183.853955][ T5591] ? clear_bhb_loop+0x60/0xb0 [ 183.858667][ T5591] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 183.864610][ T5591] RIP: 0033:0x7f3a1219e159 [ 183.869051][ T5591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 183.888670][ T5591] RSP: 002b:00007f3a12f8b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 183.897100][ T5591] RAX: fffffffffffffe00 RBX: 00007f3a12426098 RCX: 00007f3a1219e159 [ 183.905098][ T5591] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3a12426098 [ 183.913078][ T5591] RBP: 00007f3a12426090 R08: 0000000000000000 R09: 0000000000000000 [ 183.921063][ T5591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.929044][ T5591] R13: 00007f3a12426128 R14: 00007ffdab3b1590 R15: 00007ffdab3b1678 [ 183.937037][ T5591] [ 184.094801][ T5603] loop4: detected capacity change from 0 to 1024 [ 184.129994][ T5600] overlayfs: failed to set xattr on upper [ 184.169550][ T5600] overlayfs: ...falling back to index=off,metacopy=off. [ 184.214831][ T5600] overlayfs: conflicting lowerdir path [ 184.224457][ T5605] FAULT_INJECTION: forcing a failure. [ 184.224457][ T5605] name fail_futex, interval 1, probability 0, space 0, times 0 [ 184.266716][ T5605] CPU: 0 PID: 5605 Comm: syz.6.329 Not tainted syzkaller #0 [ 184.274088][ T5605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 184.284181][ T5605] Call Trace: [ 184.287495][ T5605] [ 184.290454][ T5605] dump_stack_lvl+0x188/0x24e [ 184.295177][ T5605] ? show_regs_print_info+0x12/0x12 [ 184.300423][ T5605] ? load_image+0x410/0x410 [ 184.304975][ T5605] ? stack_trace_save+0xa6/0xf0 [ 184.309876][ T5605] ? __stack_depot_save+0x35/0x480 [ 184.315042][ T5605] should_fail_ex+0x390/0x4c0 [ 184.319771][ T5605] get_futex_key+0x1b1/0x1000 [ 184.324486][ T5605] ? futex_setup_timer+0xc0/0xc0 [ 184.329445][ T5605] futex_wake+0x123/0x4f0 [ 184.333792][ T5605] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 184.339792][ T5605] ? futex_wake_mark+0x150/0x150 [ 184.344749][ T5605] ? lockdep_hardirqs_on+0x94/0x140 [ 184.349967][ T5605] do_futex+0x2e2/0x320 [ 184.354138][ T5605] ? __ia32_sys_get_robust_list+0x100/0x100 [ 184.360045][ T5605] __se_sys_futex+0x381/0x410 [ 184.364733][ T5605] ? __x64_sys_futex+0xf0/0xf0 [ 184.369512][ T5605] ? __x64_sys_futex+0x1d/0xf0 [ 184.374291][ T5605] do_syscall_64+0x4c/0xa0 [ 184.378721][ T5605] ? clear_bhb_loop+0x60/0xb0 [ 184.383410][ T5605] ? clear_bhb_loop+0x60/0xb0 [ 184.388095][ T5605] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 184.394030][ T5605] RIP: 0033:0x7f3a1219e159 [ 184.398487][ T5605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.418108][ T5605] RSP: 002b:00007f3a12fac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 184.426548][ T5605] RAX: ffffffffffffffda RBX: 00007f3a12425fa8 RCX: 00007f3a1219e159 [ 184.434534][ T5605] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3a12425fac [ 184.442513][ T5605] RBP: 00007f3a12425fa0 R08: 000a5a553b927010 R09: 0000000000000000 [ 184.450491][ T5605] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 184.458469][ T5605] R13: 00007f3a12426038 R14: 00007ffdab3b1590 R15: 00007ffdab3b1678 [ 184.466460][ T5605] [ 184.469569][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.499484][ T4286] EXT4-fs (loop1): unmounting filesystem. [ 185.065658][ T5621] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 185.089789][ T5621] loop1: detected capacity change from 0 to 128 [ 185.256418][ T5621] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 185.266413][ T5621] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.927344][ T5627] loop5: detected capacity change from 0 to 512 [ 187.133890][ T5638] loop5: detected capacity change from 0 to 512 [ 187.274825][ T5638] EXT4-fs: inline encryption not supported [ 187.323208][ T4286] EXT4-fs (loop1): unmounting filesystem. [ 187.353820][ T5638] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 187.551977][ T5638] EXT4-fs (loop5): 1 truncate cleaned up [ 187.646479][ T5638] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 188.452982][ T5656] loop1: detected capacity change from 0 to 512 [ 188.460431][ T4742] EXT4-fs (loop5): unmounting filesystem. [ 188.541556][ T5656] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 188.617349][ T5656] EXT4-fs (loop1): 1 truncate cleaned up [ 188.628570][ T5656] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 188.701009][ T5661] loop6: detected capacity change from 0 to 1024 [ 188.997179][ T5671] EXT4-fs error (device loop1): __ext4_iget:5102: inode #16: block 3: comm syz.1.338: invalid block [ 189.020409][ T5671] EXT4-fs (loop1): Remounting filesystem read-only [ 189.631719][ T4286] EXT4-fs (loop1): unmounting filesystem. [ 189.648959][ T4404] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 190.030532][ T5680] loop5: detected capacity change from 0 to 512 [ 190.744492][ T4780] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.865030][ T5700] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 190.876397][ T5700] loop7: detected capacity change from 0 to 128 [ 192.233647][ T5700] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 192.248284][ T5700] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 192.279785][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.753295][ T4780] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.051045][ T4780] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.258111][ T4780] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.584731][ T5715] FAULT_INJECTION: forcing a failure. [ 193.584731][ T5715] name failslab, interval 1, probability 0, space 0, times 0 [ 193.584841][ T5715] CPU: 0 PID: 5715 Comm: syz.5.357 Not tainted syzkaller #0 [ 193.584864][ T5715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 193.584877][ T5715] Call Trace: [ 193.584885][ T5715] [ 193.584895][ T5715] dump_stack_lvl+0x188/0x24e [ 193.584929][ T5715] ? show_regs_print_info+0x12/0x12 [ 193.584954][ T5715] ? load_image+0x410/0x410 [ 193.584991][ T5715] ? __might_sleep+0xd0/0xd0 [ 193.585015][ T5715] ? __lock_acquire+0x7c40/0x7c40 [ 193.585054][ T5715] should_fail_ex+0x390/0x4c0 [ 193.585093][ T5715] should_failslab+0x5/0x20 [ 193.585114][ T5715] slab_pre_alloc_hook+0x59/0x300 [ 193.585139][ T5715] ? __lock_acquire+0x7c40/0x7c40 [ 193.585166][ T5715] ? drm_atomic_helper_setup_commit+0x78f/0x1310 [ 193.585194][ T5715] __kmem_cache_alloc_node+0x4f/0x270 [ 193.585216][ T5715] ? __rwlock_init+0x140/0x140 [ 193.585240][ T5715] ? drm_atomic_helper_setup_commit+0x78f/0x1310 [ 193.585265][ T5715] kmalloc_trace+0x26/0xe0 [ 193.585288][ T5715] drm_atomic_helper_setup_commit+0x78f/0x1310 [ 193.585345][ T5715] drm_atomic_helper_commit+0x65/0x730 [ 193.585376][ T5715] ? drm_atomic_helper_async_commit+0x5c0/0x5c0 [ 193.585399][ T5715] drm_atomic_commit+0x222/0x280 [ 193.585432][ T5715] ? drm_atomic_check_only+0x3000/0x3000 [ 193.585459][ T5715] ? handle_bad_prq_event+0x2a0/0x2a0 [ 193.585487][ T5715] ? drm_client_rotation+0x3ff/0x580 [ 193.585519][ T5715] drm_client_modeset_commit_atomic+0x64d/0x7b0 [ 193.585561][ T5715] ? drm_client_modeset_check+0x180/0x180 [ 193.585606][ T5715] ? mutex_unlock+0x10/0x10 [ 193.585635][ T5715] ? mark_lock+0x94/0x320 [ 193.585674][ T5715] drm_client_modeset_commit_locked+0xc7/0x4c0 [ 193.585706][ T5715] drm_fb_helper_pan_display+0x3e5/0xbd0 [ 193.585751][ T5715] ? drm_fb_helper_set_par+0x1a0/0x1a0 [ 193.585786][ T5715] fb_pan_display+0x394/0x680 [ 193.585822][ T5715] bit_update_start+0x49/0x1e0 [ 193.585849][ T5715] fbcon_switch+0x14af/0x1f80 [ 193.585887][ T5715] ? fbcon_scroll+0x760/0x760 [ 193.585943][ T5715] ? hide_cursor+0x116/0x320 [ 193.585971][ T5715] csi_J+0x650/0xdb0 [ 193.586003][ T5715] do_con_write+0x420f/0x6c40 [ 193.586104][ T5715] ? vt_resize+0xc0/0xc0 [ 193.586130][ T5715] ? rcu_is_watching+0x11/0xa0 [ 193.586168][ T5715] ? __mutex_lock+0x1ab/0xae0 [ 193.586202][ T5715] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 193.586226][ T5715] ? n_tty_write+0x669/0x11e0 [ 193.586267][ T5715] ? console_unlock+0x201/0x630 [ 193.586315][ T5715] con_write+0x1f/0x40 [ 193.586342][ T5715] n_tty_write+0xd61/0x11e0 [ 193.586399][ T5715] ? n_tty_read+0x1360/0x1360 [ 193.586427][ T5715] ? wait_woken+0x1c0/0x1c0 [ 193.586458][ T5715] ? __virt_addr_valid+0x467/0x540 [ 193.586493][ T5715] ? __check_object_size+0x4f6/0xa70 [ 193.586523][ T5715] file_tty_write+0x4c7/0x840 [ 193.586555][ T5715] ? n_tty_read+0x1360/0x1360 [ 193.586590][ T5715] vfs_write+0x482/0x9a0 [ 193.586630][ T5715] ? file_end_write+0x250/0x250 [ 193.586669][ T5715] ? __fget_files+0x3fc/0x460 [ 193.586714][ T5715] ? __fdget_pos+0x1d4/0x360 [ 193.586742][ T5715] ? ksys_write+0x70/0x260 [ 193.586777][ T5715] ksys_write+0x14d/0x260 [ 193.586811][ T5715] ? __ia32_sys_read+0x80/0x80 [ 193.586847][ T5715] ? lockdep_hardirqs_on+0x94/0x140 [ 193.586881][ T5715] do_syscall_64+0x4c/0xa0 [ 193.586901][ T5715] ? clear_bhb_loop+0x60/0xb0 [ 193.586921][ T5715] ? clear_bhb_loop+0x60/0xb0 [ 193.586945][ T5715] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 193.586976][ T5715] RIP: 0033:0x7f8b4599e159 [ 193.586997][ T5715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.587016][ T5715] RSP: 002b:00007f8b46834028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.587044][ T5715] RAX: ffffffffffffffda RBX: 00007f8b45c25fa0 RCX: 00007f8b4599e159 [ 193.587061][ T5715] RDX: 0000000000001006 RSI: 0000200000002080 RDI: 0000000000000006 [ 193.587075][ T5715] RBP: 00007f8b45a3506b R08: 0000000000000000 R09: 0000000000000000 [ 193.587090][ T5715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 193.587104][ T5715] R13: 00007f8b45c26038 R14: 00007f8b45c25fa0 R15: 00007ffd7d376628 [ 193.587143][ T5715] [ 193.684630][ T5141] EXT4-fs (loop7): unmounting filesystem. [ 193.913751][ T5717] loop7: detected capacity change from 0 to 512 [ 193.946106][ T5717] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 193.959566][ T5717] EXT4-fs (loop7): 1 truncate cleaned up [ 193.959598][ T5717] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 194.273015][ T5721] EXT4-fs error (device loop7): __ext4_iget:5102: inode #16: block 3: comm syz.7.358: invalid block [ 194.378923][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.379040][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.438676][ T5721] EXT4-fs (loop7): Remounting filesystem read-only [ 194.890313][ T5726] loop1: detected capacity change from 0 to 1024 [ 195.029303][ T5141] EXT4-fs (loop7): unmounting filesystem. [ 195.829379][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 196.034464][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 196.035996][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 196.036991][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 196.037529][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 196.037810][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 196.909211][ T5766] loop4: detected capacity change from 0 to 512 [ 196.935126][ T5766] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 197.046480][ T5738] chnl_net:caif_netlink_parms(): no params data found [ 197.058755][ T5766] EXT4-fs (loop4): 1 truncate cleaned up [ 197.087849][ T5766] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 197.104670][ T5772] loop5: detected capacity change from 0 to 1024 [ 197.474173][ T5780] EXT4-fs error (device loop4): __ext4_iget:5102: inode #16: block 3: comm syz.4.370: invalid block [ 197.519836][ T5780] EXT4-fs (loop4): Remounting filesystem read-only [ 198.020530][ T4780] device hsr_slave_0 left promiscuous mode [ 198.098994][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 198.111238][ T4780] device hsr_slave_1 left promiscuous mode [ 198.121775][ T4288] EXT4-fs (loop4): unmounting filesystem. [ 198.135592][ T4780] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.143649][ T4780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.153319][ T4780] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.238284][ T4780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.287486][ T4780] device bridge_slave_1 left promiscuous mode [ 198.330254][ T4780] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.339667][ T4284] Bluetooth: hci4: unexpected event for opcode 0x080b [ 198.412976][ T4780] device bridge_slave_0 left promiscuous mode [ 198.419596][ T4780] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.455297][ T4780] device veth1_macvtap left promiscuous mode [ 198.461690][ T4780] device veth0_macvtap left promiscuous mode [ 198.467972][ T4780] device veth0_vlan left promiscuous mode [ 198.598379][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 198.607794][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 198.616127][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 198.624169][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 198.641128][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 198.658689][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.721890][ T4780] team0 (unregistering): Port device team_slave_1 removed [ 199.777040][ T4780] team0 (unregistering): Port device team_slave_0 removed [ 199.850010][ T4780] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.893761][ T4780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.169931][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 200.188760][ T4780] bond0 (unregistering): Released all slaves [ 200.373073][ T5810] loop4: detected capacity change from 0 to 512 [ 200.384899][ T5810] EXT4-fs: inline encryption not supported [ 200.430627][ T5810] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 200.476245][ T5810] EXT4-fs (loop4): 1 truncate cleaned up [ 200.488423][ T5810] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 200.538370][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.590604][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.642463][ T5738] device bridge_slave_0 entered promiscuous mode [ 200.674589][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.683162][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.691801][ T5738] device bridge_slave_1 entered promiscuous mode [ 200.809640][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 201.117588][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.401321][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.416379][ T4288] EXT4-fs (loop4): unmounting filesystem. [ 201.528487][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 201.619932][ T5738] team0: Port device team_slave_0 added [ 201.634777][ T5738] team0: Port device team_slave_1 added [ 201.719583][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.763069][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.840506][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.865102][ T5830] loop7: detected capacity change from 0 to 512 [ 201.880532][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.887654][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.915534][ T5832] loop4: detected capacity change from 0 to 1024 [ 201.936166][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.958256][ T5830] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 202.012537][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 202.022004][ T5830] EXT4-fs (loop7): 1 truncate cleaned up [ 202.038510][ T5830] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 202.248397][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 202.281265][ T5738] device hsr_slave_0 entered promiscuous mode [ 202.299214][ T5738] device hsr_slave_1 entered promiscuous mode [ 202.516491][ T5843] EXT4-fs error (device loop7): __ext4_iget:5102: inode #16: block 3: comm syz.7.381: invalid block [ 202.551627][ T5843] EXT4-fs (loop7): Remounting filesystem read-only [ 202.938197][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 203.002576][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.019786][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.043901][ T5791] device bridge_slave_0 entered promiscuous mode [ 203.067836][ T5141] EXT4-fs (loop7): unmounting filesystem. [ 203.109965][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.117118][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.149475][ T5791] device bridge_slave_1 entered promiscuous mode [ 203.246192][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.276258][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.346668][ T5791] team0: Port device team_slave_0 added [ 203.369222][ T5791] team0: Port device team_slave_1 added [ 203.446584][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.462295][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.489129][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.506686][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.514269][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.541108][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.573683][ T5738] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 203.615459][ T5738] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 203.637354][ T5738] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 203.744154][ T5791] device hsr_slave_0 entered promiscuous mode [ 203.773309][ T5791] device hsr_slave_1 entered promiscuous mode [ 203.803860][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.826828][ T5791] Cannot create hsr debugfs directory [ 204.218414][ T5738] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 204.328455][ T4279] Bluetooth: hci2: command 0x0419 tx timeout [ 204.404887][ T5791] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 204.459449][ T5791] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 204.487824][ T5791] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 204.510187][ T5791] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 204.637991][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.686836][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.711899][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.736483][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.749980][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.766931][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.776948][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 204.803438][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.813284][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 204.823323][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 204.832392][ T4780] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.839600][ T4780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.850017][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 204.859211][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 204.867820][ T4780] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.875110][ T4780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.883522][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 204.901140][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 204.929645][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 204.938644][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 204.954229][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 204.965367][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 204.975186][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 204.978300][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 204.984558][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.000881][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.010797][ T4780] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.017949][ T4780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.040029][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.055145][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.063938][ T4780] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.071095][ T4780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.078965][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.087031][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.097805][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.127289][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.140400][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.151855][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.160943][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.182229][ T5738] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.190885][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.200809][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.212775][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 205.222877][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 205.233296][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 205.249688][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 205.289400][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 205.322072][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 205.357758][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 205.376720][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 205.402034][ T5791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 205.549249][ T5882] loop7: detected capacity change from 0 to 512 [ 205.592480][ T5882] EXT4-fs: inline encryption not supported [ 205.624355][ T5882] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 205.682325][ T5882] EXT4-fs (loop7): 1 truncate cleaned up [ 205.688070][ T5882] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 205.970137][ T5141] EXT4-fs (loop7): unmounting filesystem. [ 206.007915][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.058590][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.087272][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.295486][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 206.313979][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 206.362044][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.466359][ T5910] loop7: detected capacity change from 0 to 1024 [ 207.048375][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 207.110605][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.130209][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.200064][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.229781][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.262783][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.277651][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.288676][ T5738] device veth0_vlan entered promiscuous mode [ 207.311314][ T5738] device veth1_vlan entered promiscuous mode [ 207.340458][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 207.350238][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 207.399248][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 207.410588][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 207.422764][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 207.439813][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 207.448002][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.465791][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.477377][ T5791] device veth0_vlan entered promiscuous mode [ 207.498651][ T5738] device veth0_macvtap entered promiscuous mode [ 207.516442][ T5738] device veth1_macvtap entered promiscuous mode [ 207.527437][ T5791] device veth1_vlan entered promiscuous mode [ 207.574126][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.594486][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.607149][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.626190][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.636361][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.655098][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.666848][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.684869][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.700536][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.719444][ T5791] device veth0_macvtap entered promiscuous mode [ 207.728690][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 207.737570][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 207.745977][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.755981][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.765597][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 207.775217][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 207.784640][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 207.793998][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 207.802970][ T4867] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 207.831391][ T5791] device veth1_macvtap entered promiscuous mode [ 207.844081][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.855719][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.866298][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.878623][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.888836][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.899487][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.909629][ T5738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.920340][ T5738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.933180][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.951995][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 207.960303][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 207.970758][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 207.983166][ T5738] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.993240][ T5738] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.002330][ T5738] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.012209][ T5738] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.028674][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.039361][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.049460][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.060043][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.071924][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.082443][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.092628][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.103300][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.113199][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.123812][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.135318][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.146830][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.157908][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.168612][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.179768][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.189911][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.201332][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.211297][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.221791][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.231740][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.242298][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.254219][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.262293][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.271930][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.281595][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 208.290903][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 208.309389][ T5791] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.321758][ T5791] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.336220][ T5791] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.348583][ T5791] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.518816][ T4337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.526702][ T4337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.552476][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 208.566893][ T4867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.590940][ T4867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.614462][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 208.625181][ T4867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.632662][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.642499][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.648731][ T4867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.659308][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 208.674706][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 208.875740][ T5947] loop8: detected capacity change from 0 to 2048 [ 208.994712][ T5947] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 209.017961][ T5947] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.442847][ T5955] overlayfs: unrecognized mount option "ªªªªªª" or missing value [ 209.722819][ T5738] EXT4-fs (loop8): unmounting filesystem. [ 211.389213][ T5987] loop9: detected capacity change from 0 to 512 [ 211.415235][ T5987] EXT4-fs: inline encryption not supported [ 211.454360][ T5987] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 211.518545][ T5987] EXT4-fs (loop9): 1 truncate cleaned up [ 211.524343][ T5987] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 211.989091][ T6000] loop8: detected capacity change from 0 to 1024 [ 212.252801][ T5791] EXT4-fs (loop9): unmounting filesystem. [ 212.774148][ T6018] loop9: detected capacity change from 0 to 8 [ 212.821823][ T6018] SQUASHFS error: Failed to read block 0x4de: -5 [ 212.830238][ T6018] SQUASHFS error: Failed to read block 0x4de: -5 [ 212.847325][ T26] audit: type=1800 audit(1790532050.986:12): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.403" name="file1" dev="loop9" ino=5 res=0 errno=0 [ 214.149649][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.159738][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.167911][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.176347][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.184825][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 214.195171][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.296472][ T4390] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.383250][ T4390] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.479234][ T4390] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.662470][ T4390] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.689920][ T6033] chnl_net:caif_netlink_parms(): no params data found [ 214.772001][ T6033] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.780468][ T6033] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.788967][ T6033] device bridge_slave_0 entered promiscuous mode [ 214.797420][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.804665][ T6033] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.821380][ T6033] device bridge_slave_1 entered promiscuous mode [ 214.890245][ T6033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.949501][ T6033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.068081][ T6033] team0: Port device team_slave_0 added [ 215.139528][ T6033] team0: Port device team_slave_1 added [ 215.163055][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.170203][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.197088][ T6033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.232177][ T6033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.243962][ T6033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.271014][ T6033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.329741][ T6033] device hsr_slave_0 entered promiscuous mode [ 215.336858][ T6033] device hsr_slave_1 entered promiscuous mode [ 215.344786][ T6033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.353641][ T6033] Cannot create hsr debugfs directory [ 216.249237][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 216.838277][ T4390] device hsr_slave_0 left promiscuous mode [ 216.844751][ T4390] device hsr_slave_1 left promiscuous mode [ 216.852932][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.866255][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.889234][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.896723][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.909202][ T4390] device bridge_slave_1 left promiscuous mode [ 216.915502][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.925492][ T6072] loop9: detected capacity change from 0 to 1024 [ 216.933653][ T4390] device bridge_slave_0 left promiscuous mode [ 216.940018][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.981774][ T4390] device veth1_macvtap left promiscuous mode [ 216.988002][ T4390] device veth0_macvtap left promiscuous mode [ 217.008478][ T4390] device veth1_vlan left promiscuous mode [ 217.014372][ T4390] device veth0_vlan left promiscuous mode [ 217.603898][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 217.620497][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 217.629374][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 217.645299][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 217.653549][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 217.660912][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 217.966197][ T4390] team0 (unregistering): Port device team_slave_1 removed [ 218.015901][ T4390] team0 (unregistering): Port device team_slave_0 removed [ 218.060297][ T4390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.102470][ T4390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.328473][ T4279] Bluetooth: hci0: command 0x041b tx timeout [ 218.414074][ T4390] bond0 (unregistering): Released all slaves [ 218.842354][ T6075] chnl_net:caif_netlink_parms(): no params data found [ 218.925332][ T6075] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.934804][ T6075] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.943570][ T6075] device bridge_slave_0 entered promiscuous mode [ 219.025558][ T6075] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.033615][ T6075] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.042220][ T6075] device bridge_slave_1 entered promiscuous mode [ 219.088700][ T6075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.163334][ T6075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.206398][ T6075] team0: Port device team_slave_0 added [ 219.216682][ T6075] team0: Port device team_slave_1 added [ 219.309710][ T6075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.316732][ T6075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.346760][ T6075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.394931][ T4390] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.410856][ T6075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.417851][ T6075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.444790][ T6075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.506640][ T4390] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.567389][ T6075] device hsr_slave_0 entered promiscuous mode [ 219.577434][ T6075] device hsr_slave_1 entered promiscuous mode [ 219.584432][ T6075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.592257][ T6075] Cannot create hsr debugfs directory [ 219.621015][ T4390] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.718476][ T4390] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.759795][ T6033] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 219.778582][ T4279] Bluetooth: hci5: command 0x0409 tx timeout [ 219.797071][ T6033] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 219.831932][ T6033] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 219.864228][ T6033] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 220.237181][ T6033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.260809][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.276511][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.292211][ T6033] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.408537][ T4279] Bluetooth: hci0: command 0x040f tx timeout [ 220.561829][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.590514][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.606724][ T5452] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.613982][ T5452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.675943][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.689373][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.701188][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.710546][ T5452] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.717687][ T5452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.786454][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.796888][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.807233][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.830255][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.858933][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.872882][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.882073][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.892712][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.901692][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.911097][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.920078][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.961384][ T6033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.080503][ T6075] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 221.109133][ T6075] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 221.184231][ T6075] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 221.206128][ T6075] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 221.466417][ T6075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.494801][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 221.503452][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 221.563435][ T6075] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.584584][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 221.594122][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 221.603508][ T5452] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.610700][ T5452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.619847][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 221.656876][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 221.667339][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 221.676738][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.683888][ T1076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.693122][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 221.701601][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 221.710335][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 221.761836][ T6033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.793855][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 221.802693][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 221.814026][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 221.826493][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.850445][ T4279] Bluetooth: hci5: command 0x041b tx timeout [ 221.869065][ T4390] device hsr_slave_0 left promiscuous mode [ 221.877095][ T4390] device hsr_slave_1 left promiscuous mode [ 221.884621][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.892809][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.901992][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.909511][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.917098][ T4390] device bridge_slave_1 left promiscuous mode [ 221.923486][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.933684][ T4390] device bridge_slave_0 left promiscuous mode [ 221.940312][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.961162][ T4390] device veth1_macvtap left promiscuous mode [ 221.967205][ T4390] device veth0_macvtap left promiscuous mode [ 221.977715][ T4390] device veth1_vlan left promiscuous mode [ 221.983657][ T4390] device veth0_vlan left promiscuous mode [ 222.491858][ T4279] Bluetooth: hci0: command 0x0419 tx timeout [ 222.514852][ T4390] team0 (unregistering): Port device team_slave_1 removed [ 222.618308][ T4390] team0 (unregistering): Port device team_slave_0 removed [ 222.739675][ T4390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.859315][ T4390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.016806][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 223.039657][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 223.047686][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 223.058675][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 223.073471][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 223.083815][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 223.305336][ T4390] bond0 (unregistering): Released all slaves [ 223.411660][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 223.422410][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 223.432573][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 223.441044][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 223.477495][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 223.492705][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.585031][ T6075] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.605497][ T6075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 223.622160][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 223.636632][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 223.696675][ T6033] device veth0_vlan entered promiscuous mode [ 223.724435][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.742741][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.818792][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.829703][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.849824][ T6033] device veth1_vlan entered promiscuous mode [ 223.927417][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 223.935065][ T4275] Bluetooth: hci5: command 0x040f tx timeout [ 223.956643][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 223.966673][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 223.977592][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 223.993488][ T6033] device veth0_macvtap entered promiscuous mode [ 224.034605][ T6033] device veth1_macvtap entered promiscuous mode [ 224.080218][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.091145][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.101741][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.112479][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.122602][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.133291][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.143411][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.154945][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.167153][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.189604][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 224.216110][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 224.239488][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.256789][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.267049][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.285714][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.296315][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.314335][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.324516][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.336007][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.346223][ T6033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.357220][ T6033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.369579][ T6033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.383534][ T6113] chnl_net:caif_netlink_parms(): no params data found [ 224.396827][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 224.407769][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 224.429540][ T6033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.438481][ T6033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.447212][ T6033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.457986][ T6033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.494922][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.526284][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.564362][ T6075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.712510][ T4390] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.747535][ T6113] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.755167][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.763790][ T6113] device bridge_slave_0 entered promiscuous mode [ 224.785924][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 224.795056][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.824345][ T4390] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.838088][ T6113] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.845570][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.855557][ T6113] device bridge_slave_1 entered promiscuous mode [ 224.933015][ T4390] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.985232][ T6075] device veth0_vlan entered promiscuous mode [ 225.007491][ T6113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.030642][ T4866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.046828][ T4866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.071121][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.088236][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.096992][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 225.109260][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.117066][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.128350][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 225.145522][ T4390] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.159719][ T6113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.193542][ T6075] device veth1_vlan entered promiscuous mode [ 225.246627][ T5452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.281083][ T6113] team0: Port device team_slave_0 added [ 225.294258][ T5452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.302292][ T6113] team0: Port device team_slave_1 added [ 225.311847][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 225.320712][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 225.331043][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 225.345498][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.360281][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.383080][ T6075] device veth0_macvtap entered promiscuous mode [ 225.460941][ T6075] device veth1_macvtap entered promiscuous mode [ 225.486605][ T6113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.497791][ T6113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.525205][ T6113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.541593][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.551151][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.705881][ T6113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.714297][ T6113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.852602][ T6113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.038211][ T4279] Bluetooth: hci5: command 0x0419 tx timeout [ 226.316634][ T6113] device hsr_slave_0 entered promiscuous mode [ 226.378723][ T6113] device hsr_slave_1 entered promiscuous mode [ 226.395319][ T6113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.415441][ T6113] Cannot create hsr debugfs directory [ 226.554755][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.586771][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.597052][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.610377][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.620472][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.633477][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.644166][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.655293][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.665826][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.685358][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.709869][ T6075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.751423][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.769484][ T1076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.822370][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.844167][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.854347][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.865121][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.875367][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.885953][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.895948][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.906441][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.918039][ T6075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.928691][ T6075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.943984][ T6075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.973875][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.984713][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.011839][ T6075] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.024835][ T6075] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.033879][ T6075] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.042881][ T6075] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.218712][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 227.313133][ T6149] ip_tables: iptables: counters copy to user failed while replacing table [ 228.102677][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 228.184094][ T6159] loop3: detected capacity change from 0 to 8 [ 228.229085][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 228.243102][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 228.262552][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 228.276007][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 228.285377][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 228.531129][ T6159] SQUASHFS error: Failed to read block 0x4de: -5 [ 228.539047][ T6159] SQUASHFS error: Failed to read block 0x4de: -5 [ 228.556112][ T26] audit: type=1800 audit(1790532066.696:13): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.419" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 228.581800][ T1122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.674950][ T1122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.905879][ T4780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.918672][ T4780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.982555][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 228.991100][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 229.626057][ T6113] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 229.969284][ T6113] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 230.013791][ T6113] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 230.027326][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 230.054548][ T6113] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 230.186531][ T6176] loop3: detected capacity change from 0 to 1024 [ 230.284832][ T6156] chnl_net:caif_netlink_parms(): no params data found [ 230.328459][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 230.358586][ T6178] FAULT_INJECTION: forcing a failure. [ 230.358586][ T6178] name failslab, interval 1, probability 0, space 0, times 0 [ 230.378647][ T6178] CPU: 0 PID: 6178 Comm: syz.2.422 Not tainted syzkaller #0 [ 230.386004][ T6178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 230.396085][ T6178] Call Trace: [ 230.399385][ T6178] [ 230.402355][ T6178] dump_stack_lvl+0x188/0x24e [ 230.407082][ T6178] ? show_regs_print_info+0x12/0x12 [ 230.412323][ T6178] ? load_image+0x410/0x410 [ 230.416887][ T6178] ? __might_sleep+0xd0/0xd0 [ 230.421568][ T6178] ? __lock_acquire+0x7c40/0x7c40 [ 230.426650][ T6178] should_fail_ex+0x390/0x4c0 [ 230.431391][ T6178] should_failslab+0x5/0x20 [ 230.435936][ T6178] slab_pre_alloc_hook+0x59/0x300 [ 230.441005][ T6178] ? mutex_lock_nested+0x10/0x10 [ 230.445990][ T6178] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 230.451673][ T6178] ? vim2m_open+0xaa/0x630 [ 230.456143][ T6178] __kmem_cache_alloc_node+0x4f/0x270 [ 230.461566][ T6178] ? vim2m_open+0xaa/0x630 [ 230.466072][ T6178] kmalloc_trace+0x26/0xe0 [ 230.470527][ T6178] vim2m_open+0xaa/0x630 [ 230.474826][ T6178] v4l2_open+0x201/0x340 [ 230.479131][ T6178] chrdev_open+0x585/0x5f0 [ 230.483601][ T6178] ? cd_forget+0x160/0x160 [ 230.488051][ T6178] ? fsnotify_perm+0x39b/0x550 [ 230.492833][ T6178] ? cd_forget+0x160/0x160 [ 230.497291][ T6178] do_dentry_open+0x7dd/0x10b0 [ 230.502098][ T6178] path_openat+0x2674/0x2f10 [ 230.506710][ T6178] ? do_sys_openat2+0xdd/0x4f0 [ 230.511596][ T6178] ? do_filp_open+0x420/0x420 [ 230.516385][ T6178] ? release_firmware_map_entry+0x187/0x187 [ 230.522294][ T6178] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 230.528317][ T6178] ? preempt_schedule+0xbc/0xd0 [ 230.533291][ T6178] do_filp_open+0x1ee/0x420 [ 230.537843][ T6178] ? vfs_tmpfile+0x470/0x470 [ 230.542483][ T6178] ? _raw_spin_unlock+0x24/0x40 [ 230.547377][ T6178] ? alloc_fd+0x590/0x640 [ 230.551857][ T6178] do_sys_openat2+0x14b/0x4f0 [ 230.556559][ T6178] ? do_sys_open+0xe0/0xe0 [ 230.561016][ T6178] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 230.567040][ T6178] ? lock_chain_count+0x20/0x20 [ 230.571940][ T6178] __x64_sys_openat+0x135/0x160 [ 230.576841][ T6178] do_syscall_64+0x4c/0xa0 [ 230.581295][ T6178] ? clear_bhb_loop+0x60/0xb0 [ 230.585993][ T6178] ? clear_bhb_loop+0x60/0xb0 [ 230.590685][ T6178] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 230.596620][ T6178] RIP: 0033:0x7f3f1535e98e [ 230.601058][ T6178] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 230.620688][ T6178] RSP: 002b:00007f3f16289b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 230.629120][ T6178] RAX: ffffffffffffffda RBX: 00007f3f1628a6c0 RCX: 00007f3f1535e98e [ 230.637116][ T6178] RDX: 0000000000000000 RSI: 00007f3f16289c00 RDI: ffffffffffffff9c [ 230.645096][ T6178] RBP: 00007f3f16289c00 R08: 0000000000000000 R09: 0000000000000000 [ 230.653080][ T6178] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 230.661071][ T6178] R13: 00007f3f15626038 R14: 00007f3f15625fa0 R15: 00007ffe10f32498 [ 230.669103][ T6178] [ 231.086640][ T4390] device hsr_slave_0 left promiscuous mode [ 231.098496][ T4390] device hsr_slave_1 left promiscuous mode [ 231.118411][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.126008][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.136276][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.144055][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.154905][ T4390] device bridge_slave_1 left promiscuous mode [ 231.174504][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.189990][ T4390] device bridge_slave_0 left promiscuous mode [ 231.196289][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.308924][ T4390] device veth1_macvtap left promiscuous mode [ 231.325906][ T4390] device veth0_macvtap left promiscuous mode [ 231.333642][ T4390] device veth0_vlan left promiscuous mode [ 231.458825][ T6206] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 231.482789][ T6206] loop2: detected capacity change from 0 to 128 [ 231.647345][ T6206] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 231.659128][ T6206] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 232.109699][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 232.849156][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 233.984792][ T6075] EXT4-fs (loop2): unmounting filesystem. [ 234.216178][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 234.226167][ T4275] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 234.235126][ T4275] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 234.244971][ T4275] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 234.314441][ T6222] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 234.349703][ T6222] loop2: detected capacity change from 0 to 128 [ 234.374659][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 234.384710][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 234.622699][ T6222] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 234.632647][ T6222] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 234.969765][ T4275] Bluetooth: hci1: command 0x040f tx timeout [ 235.970347][ T4390] team0 (unregistering): Port device team_slave_1 removed [ 236.017823][ T4390] team0 (unregistering): Port device team_slave_0 removed [ 236.195725][ T4390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.389152][ T4390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.493141][ T4275] Bluetooth: hci2: command 0x0409 tx timeout [ 236.541392][ T6075] EXT4-fs (loop2): unmounting filesystem. [ 237.048738][ T4275] Bluetooth: hci1: command 0x0419 tx timeout [ 237.112451][ T4390] bond0 (unregistering): Released all slaves [ 237.794659][ T6113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.908291][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.915460][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.948932][ T6156] device bridge_slave_0 entered promiscuous mode [ 237.969047][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.979130][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.995137][ T6113] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.003391][ T6156] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.011922][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.020684][ T6156] device bridge_slave_1 entered promiscuous mode [ 238.044401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.076463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 238.095952][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.103121][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.122375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.152965][ T6156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.164833][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 238.199716][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.224772][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.232016][ T6228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.250123][ T6156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.276224][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 238.325266][ T6156] team0: Port device team_slave_0 added [ 238.375146][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.399594][ T6156] team0: Port device team_slave_1 added [ 238.432640][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.445129][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.454426][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.471793][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.488546][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.497224][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.509078][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.567109][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.575317][ T4275] Bluetooth: hci2: command 0x041b tx timeout [ 238.590393][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 238.602984][ T6156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.615233][ T6156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.655193][ T6156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.708850][ T6156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.715864][ T6156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.807498][ T6156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.845548][ T6113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 238.859442][ T4275] Bluetooth: Wrong link type (-57) [ 239.059041][ T6271] netlink: 43 bytes leftover after parsing attributes in process `syz.2.431'. [ 239.093987][ T4390] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.295968][ T6156] device hsr_slave_0 entered promiscuous mode [ 239.324421][ T6156] device hsr_slave_1 entered promiscuous mode [ 239.337308][ T6156] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.356617][ T6156] Cannot create hsr debugfs directory [ 239.398836][ T4390] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.465603][ T6217] chnl_net:caif_netlink_parms(): no params data found [ 239.570783][ T4390] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.710141][ T4390] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.938626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.947348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.977995][ T6113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 240.093785][ T6217] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.111647][ T6217] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.123413][ T6217] device bridge_slave_0 entered promiscuous mode [ 240.281472][ T6217] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.302197][ T6217] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.336152][ T6217] device bridge_slave_1 entered promiscuous mode [ 240.554316][ T4390] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.599429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 240.610690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 240.635110][ T6113] device veth0_vlan entered promiscuous mode [ 240.648446][ T4275] Bluetooth: hci2: command 0x040f tx timeout [ 240.771251][ T6217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.791418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 240.811310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 240.870824][ T4390] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.914170][ T6217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.950608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 240.970137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 241.019332][ T6314] tmpfs: Bad value for 'mpol' [ 241.027866][ T4390] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.056811][ T6217] team0: Port device team_slave_0 added [ 241.073330][ T6217] team0: Port device team_slave_1 added [ 241.110049][ T6113] device veth1_vlan entered promiscuous mode [ 241.189397][ T4390] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.315721][ T6113] device veth0_macvtap entered promiscuous mode [ 241.337134][ T6113] device veth1_macvtap entered promiscuous mode [ 241.383823][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.438743][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.459741][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.480633][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.700520][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.794654][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.883719][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.977808][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.159845][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.184388][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.220102][ T6113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.261684][ T6217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.272969][ T6217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.300261][ T6217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.316891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 242.330002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 242.340146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 242.348669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 242.357498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 242.376566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 242.394083][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.414191][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.427806][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.448319][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.467323][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.478935][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.502935][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.521867][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.536733][ T6113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.552201][ T6113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.569002][ T6113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.576853][ T6217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.585382][ T6217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.615017][ T6217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.690577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 242.717239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 242.738372][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 242.744232][ T6113] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.756136][ T6113] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.765319][ T6113] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.774517][ T6113] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.921954][ T6217] device hsr_slave_0 entered promiscuous mode [ 242.939275][ T6217] device hsr_slave_1 entered promiscuous mode [ 242.946097][ T6217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.955067][ T6217] Cannot create hsr debugfs directory [ 243.304348][ T5546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.327723][ T5546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.348887][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 243.447685][ T6156] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 243.540821][ T6156] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 243.574982][ T5546] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.589108][ T5546] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.597974][ T6156] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 243.660525][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 243.672634][ T6156] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 243.817169][ T6217] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.855754][ T6349] loop2: detected capacity change from 0 to 2048 [ 243.894887][ T6351] loop0: detected capacity change from 0 to 512 [ 244.011328][ T6349] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 244.259690][ T6075] EXT4-fs (loop2): unmounting filesystem. [ 244.317857][ T6217] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.552707][ T6217] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.675479][ T6365] loop0: detected capacity change from 0 to 1024 [ 244.752247][ T6365] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 245.781727][ T6217] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.958726][ T6156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.015660][ T6113] EXT4-fs (loop0): unmounting filesystem. [ 246.207259][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.225433][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.551189][ T6156] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.683305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.717333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.777490][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.784719][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.829372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.864618][ T4275] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.874215][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.891454][ T4275] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.899658][ T4275] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.907199][ T4275] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 246.957756][ T4275] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.095119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.106239][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.115018][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.122186][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.241549][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.268325][ T26] audit: type=1326 audit(1790532085.386:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6398 comm="syz.2.445" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f1539e159 code=0x0 [ 247.671301][ T6217] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.770035][ T6217] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.819631][ T6217] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 247.859650][ T6217] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 248.102027][ T6410] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 248.125992][ T6410] loop2: detected capacity change from 0 to 128 [ 248.386150][ T6410] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 248.396287][ T6410] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 249.078827][ T6416] loop0: detected capacity change from 0 to 2048 [ 249.138277][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 249.177285][ T6416] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 249.212442][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 249.455641][ T6113] EXT4-fs (loop0): unmounting filesystem. [ 249.721735][ T6397] chnl_net:caif_netlink_parms(): no params data found [ 249.954260][ T6397] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.982168][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.013469][ T6397] device bridge_slave_0 entered promiscuous mode [ 250.040036][ T6397] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.067937][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.106621][ T6397] device bridge_slave_1 entered promiscuous mode [ 250.181588][ T6397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.354752][ T6075] EXT4-fs (loop2): unmounting filesystem. [ 250.357735][ T6156] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.373250][ T6156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.386538][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 250.397255][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 250.426869][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.459515][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.484380][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.510619][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.525716][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.545822][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.565151][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 250.657476][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 250.789803][ T6397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.083865][ T6397] team0: Port device team_slave_0 added [ 251.204298][ T6397] team0: Port device team_slave_1 added [ 251.210470][ T4275] Bluetooth: hci0: command 0x041b tx timeout [ 251.411526][ T6397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.438166][ T6397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.511588][ T6397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.629690][ T6397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.636716][ T6397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.712595][ T6450] loop2: detected capacity change from 0 to 1024 [ 251.717635][ T6397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.922861][ T6450] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 252.810276][ T6075] EXT4-fs (loop2): unmounting filesystem. [ 252.852138][ T6397] device hsr_slave_0 entered promiscuous mode [ 252.925311][ T6397] device hsr_slave_1 entered promiscuous mode [ 252.938762][ T6397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.968610][ T6397] Cannot create hsr debugfs directory [ 253.032898][ T4390] device hsr_slave_0 left promiscuous mode [ 253.095270][ T4390] device hsr_slave_1 left promiscuous mode [ 253.111904][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.139428][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.178806][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.186322][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.215004][ T4390] device bridge_slave_1 left promiscuous mode [ 253.234324][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.266716][ T4390] device bridge_slave_0 left promiscuous mode [ 253.281258][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.298737][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 253.311744][ T4390] device hsr_slave_0 left promiscuous mode [ 253.330587][ T4390] device hsr_slave_1 left promiscuous mode [ 253.383401][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.394794][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.408994][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.425411][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.437946][ T4390] device bridge_slave_1 left promiscuous mode [ 253.455645][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.476841][ T4390] device bridge_slave_0 left promiscuous mode [ 253.487160][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.594513][ T4390] device veth1_macvtap left promiscuous mode [ 253.601235][ T4390] device veth0_macvtap left promiscuous mode [ 253.607540][ T4390] device veth1_vlan left promiscuous mode [ 253.613907][ T4390] device veth0_vlan left promiscuous mode [ 253.622177][ T4390] device veth1_macvtap left promiscuous mode [ 253.628820][ T4390] device veth0_macvtap left promiscuous mode [ 253.637642][ T4390] device veth1_vlan left promiscuous mode [ 253.644178][ T4390] device veth0_vlan left promiscuous mode [ 254.083689][ T6500] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 254.108085][ T6500] loop2: detected capacity change from 0 to 128 [ 254.341918][ T6500] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 254.353339][ T6500] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 255.368361][ T4275] Bluetooth: hci0: command 0x0419 tx timeout [ 256.008000][ T4390] team0 (unregistering): Port device team_slave_1 removed [ 256.125325][ T4390] team0 (unregistering): Port device team_slave_0 removed [ 256.192853][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.199289][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.216766][ T4390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.301340][ T4390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.314460][ T6075] EXT4-fs (loop2): unmounting filesystem. [ 256.801215][ T4390] bond0 (unregistering): Released all slaves [ 258.000531][ T4390] team0 (unregistering): Port device team_slave_1 removed [ 258.047315][ T4390] team0 (unregistering): Port device team_slave_0 removed [ 258.089287][ T4390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.140726][ T4390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.484731][ T4390] bond0 (unregistering): Released all slaves [ 258.684852][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.700786][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.846878][ T6156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.862205][ T6217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.880801][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 258.892009][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 258.961812][ T6217] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.983108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.009249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.032219][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.039494][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.064411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.091376][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.109673][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.128637][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.135783][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.181097][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 259.338878][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 259.359915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 259.370009][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 259.402682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 259.538794][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 259.547729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 259.566942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 259.577761][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 259.607588][ T6217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 259.631942][ T6217] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 259.657168][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 259.689870][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 259.931940][ T6397] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 259.972639][ T6397] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 259.993365][ T6397] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 260.011201][ T6397] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 260.100559][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 260.110273][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 260.144721][ T6156] device veth0_vlan entered promiscuous mode [ 260.195399][ T6156] device veth1_vlan entered promiscuous mode [ 260.219501][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 260.249728][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 260.269650][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 260.288576][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 260.319440][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 260.385411][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 260.400149][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 260.410547][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 260.422284][ T6156] device veth0_macvtap entered promiscuous mode [ 260.499602][ T4390] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.531000][ T6156] device veth1_macvtap entered promiscuous mode [ 260.570183][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 260.583840][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 260.593027][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 260.611162][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 260.636395][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.657277][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.667775][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.686820][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.697084][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.716299][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.727603][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.739488][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.751409][ T6156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.800185][ T4390] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.826464][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 260.848939][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 260.879869][ T4390] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.895578][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.910039][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.920207][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.931109][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.941808][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.952720][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.962878][ T6156] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.973856][ T6156] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.986193][ T6156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.997468][ T6217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.020334][ T6397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.029371][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 261.053190][ T6228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 261.101007][ T4390] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.140207][ T6156] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.164076][ T6156] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.183347][ T6156] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.207189][ T6156] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.286566][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.302053][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.386013][ T6397] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.415580][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 261.425678][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 261.470614][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 261.486725][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 261.497541][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 261.512148][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 261.524340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.534925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.543581][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.550741][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.589933][ T6217] device veth0_vlan entered promiscuous mode [ 261.596920][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.607375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.619286][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.632614][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.639748][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.647647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 261.685862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 261.696485][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.707311][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.717627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.730863][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 261.739839][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 261.754140][ T6217] device veth1_vlan entered promiscuous mode [ 261.760852][ T4866] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.783117][ T4866] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.791134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 261.803209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 261.836984][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 261.846800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 261.855458][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 261.865882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.891760][ T6397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 261.948592][ T4866] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.957407][ T4866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.966189][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 261.984797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 262.003058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 262.017813][ T6217] device veth0_macvtap entered promiscuous mode [ 262.107793][ T6217] device veth1_macvtap entered promiscuous mode [ 262.210571][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.255105][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.283680][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.318327][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.336799][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.358723][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.376138][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.395446][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.406031][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.426239][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.439289][ T6217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.467328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 262.478963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 262.498984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 262.520310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 262.552676][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.588332][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.618235][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.629815][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.650375][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.678226][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.708276][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.738170][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.748061][ T6217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.802923][ T6217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.825245][ T6217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.897340][ T6585] loop6: detected capacity change from 0 to 1024 [ 263.016406][ T6585] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 263.834308][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 263.843683][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 263.891767][ T6217] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.938262][ T6217] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.947188][ T6217] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.970548][ T6217] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.094026][ T6156] EXT4-fs (loop6): unmounting filesystem. [ 264.351972][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.503614][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.779262][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.874483][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.075209][ T6612] netlink: 43 bytes leftover after parsing attributes in process `syz.6.467'. [ 265.233187][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.434062][ T6397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.676664][ T6628] ip_tables: iptables: counters copy to user failed while replacing table [ 266.944038][ T6632] loop6: detected capacity change from 0 to 1024 [ 267.007203][ T6632] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 267.068429][ T6632] EXT4-fs (loop6): barriers disabled [ 267.073810][ T6632] JBD2: no valid journal superblock found [ 267.116517][ T6632] EXT4-fs (loop6): error loading journal [ 267.401988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 268.060025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 268.689278][ T6648] loop6: detected capacity change from 0 to 8 [ 268.735491][ T6648] SQUASHFS error: Failed to read block 0x4de: -5 [ 268.743641][ T6648] SQUASHFS error: Failed to read block 0x4de: -5 [ 268.759625][ T26] audit: type=1800 audit(1790532106.906:15): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.478" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 268.905967][ T4390] device hsr_slave_0 left promiscuous mode [ 269.067912][ T4390] device hsr_slave_1 left promiscuous mode [ 269.301680][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.329180][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.369979][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.411980][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.424080][ T4390] device bridge_slave_1 left promiscuous mode [ 269.430415][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.442755][ T4390] device bridge_slave_0 left promiscuous mode [ 269.449463][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.508422][ T4390] device veth1_macvtap left promiscuous mode [ 269.509015][ T6651] loop6: detected capacity change from 0 to 512 [ 269.514517][ T4390] device veth0_macvtap left promiscuous mode [ 269.590575][ T4390] device veth1_vlan left promiscuous mode [ 269.617105][ T4390] device veth0_vlan left promiscuous mode [ 270.669149][ T6666] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 271.129621][ T4284] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 271.144303][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 271.152696][ T4284] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 271.168864][ T4284] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 271.188507][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 271.197618][ T4279] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 271.219170][ T6672] loop2: detected capacity change from 0 to 2048 [ 271.327431][ T6672] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 271.356942][ T6672] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.451416][ T6672] fs-verity: sha512 using implementation "sha512-avx2" [ 271.528132][ T6672] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.486: bg 0: block 312: padding at end of block bitmap is not set [ 271.599435][ T6672] fs-verity (loop2, inode 13): ext4_end_enable_verity() failed with err -28 [ 271.851487][ T6075] EXT4-fs (loop2): unmounting filesystem. [ 272.822078][ T4390] team0 (unregistering): Port device team_slave_1 removed [ 272.872367][ T4390] team0 (unregistering): Port device team_slave_0 removed [ 272.923193][ T4390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.009971][ T4390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.296021][ T4279] Bluetooth: hci2: command 0x0409 tx timeout [ 273.672394][ T4390] bond0 (unregistering): Released all slaves [ 273.841969][ T6397] device veth0_vlan entered promiscuous mode [ 273.860062][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 273.871282][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 273.887584][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.912911][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.932118][ T6682] device syzkaller0 entered promiscuous mode [ 274.014910][ T6397] device veth1_vlan entered promiscuous mode [ 274.079086][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 274.100449][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 274.164984][ T6397] device veth0_macvtap entered promiscuous mode [ 274.240937][ T6397] device veth1_macvtap entered promiscuous mode [ 274.369814][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.398160][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.418210][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.438187][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.453641][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.480192][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.503889][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.534992][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.548143][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.573826][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.601078][ T6397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.628705][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 274.649564][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 274.698461][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 274.707364][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 274.745444][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.778829][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.790040][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.804819][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.815678][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.836121][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.846505][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.864431][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.905695][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.917843][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.939422][ T6397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.053008][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 275.078737][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 275.091110][ T6397] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.101841][ T6397] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.112125][ T6397] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.121028][ T6397] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.368342][ T4279] Bluetooth: hci2: command 0x041b tx timeout [ 275.872286][ T6669] chnl_net:caif_netlink_parms(): no params data found [ 275.928002][ T4754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.989291][ T4754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.020467][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 276.034326][ T4755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.069057][ T4755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.103252][ T4866] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 276.194781][ T6733] loop6: detected capacity change from 0 to 2048 [ 276.314516][ T6669] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.356559][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.404602][ T6669] device bridge_slave_0 entered promiscuous mode [ 276.453005][ T6733] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 276.468356][ T6733] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.522535][ T6733] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.498: bg 0: block 312: padding at end of block bitmap is not set [ 276.817531][ T4390] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.113454][ T6669] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.169572][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.199855][ T6669] device bridge_slave_1 entered promiscuous mode [ 277.345945][ T6733] fs-verity (loop6, inode 13): ext4_end_enable_verity() failed with err -28 [ 277.468526][ T4279] Bluetooth: hci2: command 0x040f tx timeout [ 277.578904][ T6156] EXT4-fs (loop6): unmounting filesystem. [ 277.605164][ T4390] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.466128][ T6750] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 278.663424][ T6669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.708652][ T4390] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.726198][ T6669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.916649][ T4390] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.963144][ T6765] loop2: detected capacity change from 0 to 512 [ 279.118010][ T6669] team0: Port device team_slave_0 added [ 279.140037][ T6669] team0: Port device team_slave_1 added [ 279.309353][ T6669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.509221][ T6669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.547069][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 280.071710][ T6669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.115243][ T6669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.297193][ T6669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.378261][ T6669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.527254][ T6669] device hsr_slave_0 entered promiscuous mode [ 280.557208][ T6669] device hsr_slave_1 entered promiscuous mode [ 282.017849][ T6801] loop0: detected capacity change from 0 to 2048 [ 282.219345][ T6801] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 282.227988][ T6801] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.359052][ T6801] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.513: bg 0: block 312: padding at end of block bitmap is not set [ 282.430660][ T6801] fs-verity (loop0, inode 13): ext4_end_enable_verity() failed with err -28 [ 282.466985][ T26] audit: type=1804 audit(1790532120.616:16): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.513" name="/newroot/29/file0/file0/file0" dev="loop0" ino=13 res=1 errno=0 [ 282.620661][ T6113] EXT4-fs (loop0): unmounting filesystem. [ 282.817158][ T6669] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 282.913910][ T6669] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 283.978991][ T6669] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 283.999325][ T6669] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 284.197907][ T4390] device hsr_slave_0 left promiscuous mode [ 284.224386][ T6825] loop5: detected capacity change from 0 to 1024 [ 284.239238][ T4390] device hsr_slave_1 left promiscuous mode [ 284.261812][ T6825] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 284.279678][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.287217][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.348934][ T4390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.356434][ T4390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.469000][ T4390] device bridge_slave_1 left promiscuous mode [ 284.475399][ T4390] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.541278][ T4390] device bridge_slave_0 left promiscuous mode [ 284.547625][ T4390] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.590242][ T6825] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 285.091054][ T6825] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 285.272599][ T6825] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 285.390958][ T6825] syz.5.519 (6825) used greatest stack depth: 19984 bytes left [ 285.451555][ T4390] device veth1_macvtap left promiscuous mode [ 285.467901][ T4390] device veth0_macvtap left promiscuous mode [ 285.498061][ T4390] device veth1_vlan left promiscuous mode [ 285.504120][ T4390] device veth0_vlan left promiscuous mode [ 285.538715][ T6397] EXT4-fs (loop5): unmounting filesystem. [ 285.579272][ T6844] [ 285.581857][ T6844] ====================================================== [ 285.588921][ T6844] WARNING: possible circular locking dependency detected [ 285.595964][ T6844] syzkaller #0 Not tainted [ 285.600407][ T6844] ------------------------------------------------------ [ 285.607450][ T6844] syz.6.522/6844 is trying to acquire lock: [ 285.613372][ T6844] ffffffff8d7b02b0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 285.624644][ T6844] [ 285.624644][ T6844] but task is already holding lock: [ 285.632033][ T6844] ffff888071b29aa0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: configfs_symlink+0x47b/0x13c0 [ 285.642541][ T6844] [ 285.642541][ T6844] which lock already depends on the new lock. [ 285.642541][ T6844] [ 285.652987][ T6844] [ 285.652987][ T6844] the existing dependency chain (in reverse order) is: [ 285.662035][ T6844] [ 285.662035][ T6844] -> #3 (&sb->s_type->i_mutex_key#23){++++}-{3:3}: [ 285.670816][ T6844] down_write+0x36/0x60 [ 285.675545][ T6844] configfs_depend_item_unlocked+0x14f/0x430 [ 285.682099][ T6844] usbg_make_tpg+0x1dd/0x550 [ 285.687255][ T6844] target_fabric_make_tpg+0xa0/0x6d0 [ 285.693102][ T6844] configfs_mkdir+0x511/0x9e0 [ 285.698342][ T6844] vfs_mkdir+0x386/0x570 [ 285.703142][ T6844] do_mkdirat+0x1d8/0x440 [ 285.708038][ T6844] __x64_sys_mkdirat+0x85/0x90 [ 285.713358][ T6844] do_syscall_64+0x4c/0xa0 [ 285.718338][ T6844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.724802][ T6844] [ 285.724802][ T6844] -> #2 (tpg_instances_lock){+.+.}-{3:3}: [ 285.732761][ T6844] __mutex_lock+0x12d/0xae0 [ 285.737828][ T6844] tcm_alloc_inst+0x61/0x190 [ 285.742982][ T6844] usb_get_function_instance+0xd9/0x2e0 [ 285.749090][ T6844] function_make+0x118/0x350 [ 285.754242][ T6844] configfs_mkdir+0x511/0x9e0 [ 285.759507][ T6844] vfs_mkdir+0x386/0x570 [ 285.764305][ T6844] do_mkdirat+0x1d8/0x440 [ 285.769272][ T6844] __x64_sys_mkdirat+0x85/0x90 [ 285.774578][ T6844] do_syscall_64+0x4c/0xa0 [ 285.779547][ T6844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.786012][ T6844] [ 285.786012][ T6844] -> #1 (func_lock){+.+.}-{3:3}: [ 285.793184][ T6844] __mutex_lock+0x12d/0xae0 [ 285.798252][ T6844] usb_get_function_instance+0x2a/0x2e0 [ 285.804361][ T6844] function_make+0x118/0x350 [ 285.809523][ T6844] configfs_mkdir+0x511/0x9e0 [ 285.814770][ T6844] vfs_mkdir+0x386/0x570 [ 285.819568][ T6844] do_mkdirat+0x1d8/0x440 [ 285.824532][ T6844] __x64_sys_mkdirat+0x85/0x90 [ 285.829861][ T6844] do_syscall_64+0x4c/0xa0 [ 285.834840][ T6844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.841312][ T6844] [ 285.841312][ T6844] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 285.849623][ T6844] __lock_acquire+0x2d18/0x7c40 [ 285.855048][ T6844] lock_acquire+0x1bb/0x4a0 [ 285.860125][ T6844] __mutex_lock+0x12d/0xae0 [ 285.865188][ T6844] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 285.871905][ T6844] configfs_symlink+0x5a4/0x13c0 [ 285.877400][ T6844] vfs_symlink+0x245/0x3d0 [ 285.882369][ T6844] do_symlinkat+0x1b6/0x400 [ 285.887424][ T6844] __x64_sys_symlinkat+0x95/0xa0 [ 285.892929][ T6844] do_syscall_64+0x4c/0xa0 [ 285.898001][ T6844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 285.904469][ T6844] [ 285.904469][ T6844] other info that might help us debug this: [ 285.904469][ T6844] [ 285.914734][ T6844] Chain exists of: [ 285.914734][ T6844] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#23 [ 285.914734][ T6844] [ 285.929745][ T6844] Possible unsafe locking scenario: [ 285.929745][ T6844] [ 285.937229][ T6844] CPU0 CPU1 [ 285.942629][ T6844] ---- ---- [ 285.948024][ T6844] lock(&sb->s_type->i_mutex_key#23); [ 285.953535][ T6844] lock(tpg_instances_lock); [ 285.960772][ T6844] lock(&sb->s_type->i_mutex_key#23); [ 285.968800][ T6844] lock(gadget_subsys.su_mutex); [ 285.973913][ T6844] [ 285.973913][ T6844] *** DEADLOCK *** [ 285.973913][ T6844] [ 285.982090][ T6844] 2 locks held by syz.6.522/6844: [ 285.987147][ T6844] #0: ffff888019be8460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 285.996447][ T6844] #1: ffff888071b29aa0 (&sb->s_type->i_mutex_key#23){++++}-{3:3}, at: configfs_symlink+0x47b/0x13c0 [ 286.007380][ T6844] [ 286.007380][ T6844] stack backtrace: [ 286.013293][ T6844] CPU: 0 PID: 6844 Comm: syz.6.522 Not tainted syzkaller #0 [ 286.020691][ T6844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 286.030783][ T6844] Call Trace: [ 286.034113][ T6844] [ 286.037080][ T6844] dump_stack_lvl+0x188/0x24e [ 286.041799][ T6844] ? load_image+0x410/0x410 [ 286.046347][ T6844] ? show_regs_print_info+0x12/0x12 [ 286.051592][ T6844] ? print_circular_bug+0x12b/0x1a0 [ 286.056838][ T6844] check_noncircular+0x296/0x330 [ 286.061825][ T6844] ? add_chain_block+0x9b0/0x9b0 [ 286.066806][ T6844] ? lockdep_lock+0xf1/0x1f0 [ 286.071444][ T6844] ? _find_first_zero_bit+0xd2/0x100 [ 286.076784][ T6844] __lock_acquire+0x2d18/0x7c40 [ 286.081680][ T6844] ? __bfs+0x27a/0x560 [ 286.085797][ T6844] ? __kernel_text_address+0x9/0x30 [ 286.091042][ T6844] ? add_chain_block+0x9b0/0x9b0 [ 286.096030][ T6844] ? lockdep_lock+0xf1/0x1f0 [ 286.100668][ T6844] ? verify_lock_unused+0x140/0x140 [ 286.105911][ T6844] ? lockdep_unlock+0x142/0x2e0 [ 286.110807][ T6844] ? lockdep_lock+0x1f0/0x1f0 [ 286.115535][ T6844] ? __lock_acquire+0x28d6/0x7c40 [ 286.120608][ T6844] lock_acquire+0x1bb/0x4a0 [ 286.125157][ T6844] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 286.131537][ T6844] ? __might_sleep+0xd0/0xd0 [ 286.136227][ T6844] ? read_lock_is_recursive+0x10/0x10 [ 286.141743][ T6844] __mutex_lock+0x12d/0xae0 [ 286.146294][ T6844] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 286.152665][ T6844] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 286.159037][ T6844] ? mutex_lock_nested+0x10/0x10 [ 286.164021][ T6844] ? rwsem_write_trylock+0x135/0x1c0 [ 286.169360][ T6844] ? clear_nonspinnable+0x60/0x60 [ 286.174427][ T6844] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 286.180620][ T6844] ? inode_permission+0xef/0x480 [ 286.185591][ T6844] ? bpf_lsm_inode_permission+0x5/0x10 [ 286.191094][ T6844] ? security_inode_permission+0xac/0xf0 [ 286.196773][ T6844] configfs_symlink+0x5a4/0x13c0 [ 286.201753][ T6844] ? end_current_label_crit_section+0x14b/0x170 [ 286.208049][ T6844] ? common_perm+0x15d/0x1b0 [ 286.212690][ T6844] ? from_kgid+0x14f/0x6a0 [ 286.217147][ T6844] ? make_kgid+0x650/0x650 [ 286.221614][ T6844] ? apparmor_path_symlink+0x1ac/0x230 [ 286.227123][ T6844] ? lookup_one_qstr_excl+0x11c/0x240 [ 286.232548][ T6844] ? detach_groups+0x370/0x370 [ 286.237355][ T6844] ? inode_permission+0xef/0x480 [ 286.242329][ T6844] ? bpf_lsm_inode_symlink+0x5/0x10 [ 286.247571][ T6844] ? security_inode_symlink+0xb2/0x100 [ 286.253077][ T6844] vfs_symlink+0x245/0x3d0 [ 286.257541][ T6844] do_symlinkat+0x1b6/0x400 [ 286.262086][ T6844] ? vfs_symlink+0x3d0/0x3d0 [ 286.266722][ T6844] __x64_sys_symlinkat+0x95/0xa0 [ 286.271700][ T6844] do_syscall_64+0x4c/0xa0 [ 286.276150][ T6844] ? clear_bhb_loop+0x60/0xb0 [ 286.280868][ T6844] ? clear_bhb_loop+0x60/0xb0 [ 286.285583][ T6844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 286.291525][ T6844] RIP: 0033:0x7f8222b9e159 [ 286.295975][ T6844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.315749][ T6844] RSP: 002b:00007f8223b21028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 286.324214][ T6844] RAX: ffffffffffffffda RBX: 00007f8222e25fa0 RCX: 00007f8222b9e159 [ 286.332226][ T6844] RDX: 0000200000001600 RSI: ffffffffffffff9c RDI: 0000200000001500 [ 286.340258][ T6844] RBP: 00007f8222c3506b R08: 0000000000000000 R09: 0000000000000000 [ 286.348268][ T6844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.356288][ T6844] R13: 00007f8222e26038 R14: 00007f8222e25fa0 R15: 00007ffc0bd52928 [ 286.364401][ T6844] [ 286.907689][ T4390] team0 (unregistering): Port device team_slave_1 removed [ 286.945876][ T4390] team0 (unregistering): Port device team_slave_0 removed [ 286.982482][ T4390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.019928][ T4390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.276422][ T4390] bond0 (unregistering): Released all slaves [ 287.399485][ T6669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 287.446942][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 287.467304][ T5546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 287.490267][ T6669] 8021q: adding VLAN 0 to HW filter on device team0 [ 287.533783][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 287.544054][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 287.552987][ T4510] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.560144][ T4510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 287.579900][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 287.588373][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 287.597314][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 287.606054][ T4510] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.613177][ T4510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.624714][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 287.634393][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 287.663847][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 287.694301][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 287.703374][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 287.712098][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 287.721130][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 287.729692][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 287.741626][ T6669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 287.770812][ T6669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 287.793084][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 287.803604][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 287.814130][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 288.021993][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 288.031753][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 288.043702][ T6669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.066412][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 288.077793][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 288.097836][ T6669] device veth0_vlan entered promiscuous mode [ 288.106976][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 288.115945][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 288.133914][ T6669] device veth1_vlan entered promiscuous mode [ 288.143694][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 288.152061][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 288.162015][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 288.184716][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 288.194001][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 288.204692][ T4780] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 288.216307][ T6669] device veth0_macvtap entered promiscuous mode [ 288.227954][ T6669] device veth1_macvtap entered promiscuous mode [ 288.248666][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.261636][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.271645][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.283537][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.293486][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.304065][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.314250][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.324752][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.335301][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.345884][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.356917][ T6669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.365087][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 288.373579][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 288.381982][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 288.390716][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 288.402311][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.417943][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.430131][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.440785][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.451694][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.469922][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.484774][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.497954][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.508055][ T6669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.521372][ T6669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.532487][ T6669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.542558][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 288.551718][ T4510] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 288.565322][ T6669] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.574852][ T6669] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.586640][ T6669] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.596644][ T6669] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.656663][ T6669] ieee80211 phy35: Selected rate control algorithm 'minstrel_ht' [ 288.691860][ T4510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.704378][ T6669] ieee80211 phy36: Selected rate control algorithm 'minstrel_ht' [ 288.712499][ T4510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.726421][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 288.747064][ T4755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.755407][ T4755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.766160][ T4390] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready