last executing test programs: 8.874494671s ago: executing program 3 (id=164): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$char_usb(r1, &(0x7f0000000080)=""/161, 0xa1) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_NOTIFY_STORE(r4, &(0x7f00000020c0)=ANY=[], 0x2b) dup3(r4, r3, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x64) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0x8901, 0x0) 8.564392698s ago: executing program 3 (id=167): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ppoll(0x0, 0x0, &(0x7f00000005c0)={0x77359400}, 0x0, 0x0) 7.628488297s ago: executing program 3 (id=171): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) mlockall(0x1) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000080)=""/172) 6.536361259s ago: executing program 0 (id=174): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x36) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x8, 0x0, 0x0, 0x3c91, {{0xf, 0x4, 0x0, 0x19, 0x3c, 0x67, 0x0, 0x0, 0x0, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@multicast1}]}, @timestamp_addr={0x44, 0x14, 0xaf, 0x1, 0xd, [{@remote}, {@dev={0xac, 0x14, 0x14, 0x19}}]}, @ra={0x94, 0x4}, @noop, @noop]}}}}}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000240), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) 6.512848841s ago: executing program 3 (id=175): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[], 0x1, 0x603, &(0x7f0000000640)="$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") socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x0, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18003e0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000), 0x0}, 0x38) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0x36}, {0x0}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001) recvmmsg(r2, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040)='N', 0x1, 0x0, 0x0, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 5.443837221s ago: executing program 1 (id=177): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 5.443336821s ago: executing program 0 (id=178): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) 5.252907507s ago: executing program 0 (id=179): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0) link(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240)='./file2/file0\x00') truncate(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) ioprio_get$uid(0x3, 0x0) 4.848960661s ago: executing program 4 (id=182): r0 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) futex(&(0x7f0000004080)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") lsetxattr(0x0, &(0x7f0000001040)=@known='trusted.overlay.origin\x00', 0x0, 0x0, 0x0) flock(r0, 0x1) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) 4.598596042s ago: executing program 4 (id=183): r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) rt_sigreturn() writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000180)}], 0x1) 4.26413763s ago: executing program 0 (id=184): r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) read$char_usb(r1, &(0x7f00000002c0)=""/181, 0xb5) close(r1) openat$fuse(0xffffffffffffff9c, &(0x7f0000001280), 0x2, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5421, 0x0) 4.176169938s ago: executing program 4 (id=185): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) r3 = dup3(r2, r1, 0x0) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001640)=ANY=[], 0x10}], 0x1}, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[], 0x10}], 0x1}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x989680}}, 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) write$P9_RRENAME(r4, 0x0, 0x0) 4.085777376s ago: executing program 1 (id=186): r0 = gettid() timer_create(0x0, &(0x7f0000000100)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000580)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000005c0)=ANY=[], 0x10}], 0x1}, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r3, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) close(r4) socket$inet6_udp(0xa, 0x2, 0x0) 4.064869697s ago: executing program 4 (id=187): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) bind$unix(0xffffffffffffffff, 0x0, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0x5511, &(0x7f0000015b80)="$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") r2 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x4000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x4000010, 0xffffffffffffffff, 0x0) syz_open_pts(r0, 0x208103) ioctl$EXT4_IOC_GROUP_ADD(r2, 0xc0185879, &(0x7f00000004c0)={0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2401}) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000140)={0x0, 0x2, 0x3, 0x6, 0x10}) 4.008644352s ago: executing program 0 (id=188): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYBLOB="3db1bd3c9389ce300f92cc8091d7dfbdcfffeed8bb90e543382e29209562d6483c6fcfdf79d0b465e6bc8ea70762049054a683ca4394e098765d85fa3b798fc191119debc7d45cce724609d275eabc974abf88d2270db005808488efc289084aff3069b2b0a78cdfa1f780c10f6c51d7c9ced6ab3e8a7aa716d5ebe1e8cb6255366a32ca4bfad14e3b1315ec", @ANYRESHEX, @ANYRESHEX, @ANYRES16, @ANYRES64], 0x1, 0x61ca, &(0x7f0000006940)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x107042, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = open(0x0, 0x0, 0x0) fallocate(r1, 0x0, 0x0, 0x1001f0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfea7}], 0x1, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}]}, 0x3, 0x4de, &(0x7f0000000c40)="$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") stat(0x0, 0x0) 4.007327602s ago: executing program 3 (id=189): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x36) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x8, 0x0, 0x0, 0x3c91, {{0xf, 0x4, 0x0, 0x19, 0x3c, 0x67, 0x0, 0x0, 0x0, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@multicast1}]}, @timestamp_addr={0x44, 0x14, 0xaf, 0x1, 0xd, [{@remote}, {@dev={0xac, 0x14, 0x14, 0x19}}]}, @ra={0x94, 0x4}, @noop, @noop]}}}}}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000240), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40800}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) 2.861808279s ago: executing program 2 (id=190): r0 = gettid() timer_create(0x0, &(0x7f0000000280)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) r3 = dup3(r2, r1, 0x0) close(0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$eventfd(r3, &(0x7f00000000c0), 0x8) close(r1) socket$inet_udp(0x2, 0x2, 0x0) 2.855489539s ago: executing program 3 (id=191): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x12, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, &(0x7f00000000c0), 0x496, 0x0, &(0x7f0000000140)="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"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = syz_usb_connect$cdc_ncm(0x0, 0xcc, &(0x7f0000000d00)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x2, 0x1, 0x5, 0x0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, ';'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x77, 0x40, 0x0, 0xff}, {0x6, 0x24, 0x1a, 0x311, 0x8}, [@country_functional={0x10, 0x24, 0x7, 0x4, 0xfc00, [0x9, 0x1, 0x7ff, 0x7f, 0x6]}, @country_functional={0xc, 0x24, 0x7, 0xd9, 0x0, [0x3, 0x17c, 0x543]}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x8}, @mdlm_detail={0x27, 0x24, 0x13, 0x7f, "d9f62b8b787a06263152755fc26d0ffd3185cc6f4ec2b3ca3f875b6e356f9c5682cf3d"}, @mdlm={0x15, 0x24, 0x12, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x81, 0xbf, 0xf3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x3, 0x80, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x1f, 0x4d}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x7f, 0x4, 0x0, 0x10, 0x40}, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="050f34000510100a012100000000ff01010000ff000a1003020600070003000710021232090003100b0b10010c100008050400e9"], 0x1, [{0x101, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]}]}) r6 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_usb_control_io$cdc_ncm(r5, &(0x7f00000009c0)={0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="0024f8000000f823b718f59a3ac120a29be448eb20ffd4a1cbdbe751e8391e6c0aac82810bb4a414eef45bd1234ea4e31bfa60c7f49fd515440d887370b8a17623b1491b01173d6ba4deea3bb8a110c80f50bb2b3326188d515e3e0252286c7925fe187b81bcfd9213e9664003581865dda608032290b5a4782f737226d6a702d7a54dd73430b6abebbc544992090138430c7899f4b55ab523a1361d702de958d94f6b7c6c3ea9be39b012c06f9b9e8ed026d1a798bd6e455ab7d6cff785d87147da89ba9024093579898f970e13543cc3fd1026e5dcf788175506c47ed627da6b9fcb741f78436abc46d90d9360314bc3837dc097dc07"], &(0x7f0000000980)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x44, &(0x7f0000000a00)={0x40, 0x9, 0x18, "39629046a25102e9b18ba51e183aa0291da28610314dd76c"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000ac0)={0x20, 0x80, 0x1c, {0x9, 0x1, 0x1, 0x4, 0x0, 0x1000, 0x4, 0x0, 0x4a8c, 0x3ff, 0x8, 0xfff}}, &(0x7f0000000b00)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000b40)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000b80)={0x20, 0x87, 0x2, 0x2}, &(0x7f0000000bc0)={0x20, 0x89, 0x2, 0x1}}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r8, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) pipe2(&(0x7f0000000600), 0x400) read$FUSE(0xffffffffffffffff, &(0x7f0000001400)={0x2020}, 0x2020) socket$packet(0x11, 0x2, 0x300) 2.684110124s ago: executing program 1 (id=192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5fd0fb13dfb0ca6e}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) 2.652398686s ago: executing program 1 (id=193): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt', 0x0, 0x0) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000f78500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200000000d1088500000085000000b7000000000000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.983133973s ago: executing program 4 (id=194): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r5, &(0x7f00000000c0)='./file1\x00', 0x0) link(&(0x7f0000000080)='./file1\x00', &(0x7f0000000240)='./file2/file0\x00') truncate(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) ioprio_get$uid(0x3, 0x0) 1.648167981s ago: executing program 2 (id=195): r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000bbdffc)) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) dup3(r1, 0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[{0x0, 0x10}], 0x1}, 0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, 0x0, 0x42043, 0x4a) r3 = socket$inet6_udp(0xa, 0x2, 0x0) dup3(r3, r2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() r4 = msgget$private(0x0, 0x0) msgrcv(r4, 0x0, 0x0, 0x0, 0x1000) 1.235209046s ago: executing program 1 (id=196): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) r2 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.034141323s ago: executing program 2 (id=197): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(r2) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[], 0x10}], 0x1}, 0x0) socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, './file0/file0\x00'}, 0x6e) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}], 0xa, "8855d1bef46f"}, 0xe) r3 = socket$nl_route(0x10, 0x3, 0x0) getpeername(r3, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, &(0x7f0000000040)=0x80) close(r4) rt_sigreturn() socket$inet6(0xa, 0x3, 0x6) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 599.58135ms ago: executing program 2 (id=198): r0 = gettid() r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x0, 0x0) rt_sigreturn() pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) dup(0xffffffffffffffff) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x0) msgsnd(r1, &(0x7f0000002140)=ANY=[@ANYBLOB="03"], 0x8, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) readv(r3, 0x0, 0x0) close(r3) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) poll(0x0, 0x0, 0x401) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x0, &(0x7f0000ffd000/0x1000)=nil) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') 380.548987ms ago: executing program 2 (id=199): r0 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r3, 0xf, 0x0) 340.210121ms ago: executing program 4 (id=200): socket$igmp6(0xa, 0x3, 0x2) r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x0, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_PIE_OFF(r0, 0x7006) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x28, 0x0, 0x201, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000180), 0xc082, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) r5 = syz_open_pts(r4, 0x0) dup3(r4, r5, 0x0) 267.684578ms ago: executing program 1 (id=201): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x36) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x8, 0x0, 0x0, 0x3c91, {{0xf, 0x4, 0x0, 0x19, 0x3c, 0x67, 0x0, 0x0, 0x0, 0x0, @local, @remote, {[@timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@multicast1}]}, @timestamp_addr={0x44, 0x14, 0xaf, 0x1, 0xd, [{@remote}, {@dev={0xac, 0x14, 0x14, 0x19}}]}, @ra={0x94, 0x4}, @noop, @noop]}}}}}) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000240), 0xc, &(0x7f0000000980)={0x0}, 0x1, 0x0, 0x0, 0x40800}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) 184.848094ms ago: executing program 0 (id=202): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="a5", 0x1}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f00000008c0)=""/155, 0x9b}], 0x1}, 0x10100) sendmsg$sock(r1, &(0x7f0000004b80)={0x0, 0x0, &(0x7f0000004b40)=[{&(0x7f0000004a40)="82", 0x1}], 0x1}, 0x40001) 0s ago: executing program 2 (id=203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5fd0fb13dfb0ca6e}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.66' (ED25519) to the list of known hosts. [ 52.575397][ T3534] cgroup: Unknown subsys name 'net' [ 52.678388][ T3534] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.967779][ T3534] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 55.597316][ T3559] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.598747][ T3561] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.605728][ T3559] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.612559][ T3561] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.620329][ T3559] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.626570][ T3561] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.634501][ T3559] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.641589][ T3561] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.647903][ T3559] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.654361][ T3561] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.661389][ T3559] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.668352][ T3561] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.675512][ T3559] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.683141][ T3561] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.688933][ T3559] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.698044][ T3561] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.703259][ T3559] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.710241][ T3561] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.716710][ T3559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.723922][ T3561] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.731343][ T3559] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.737573][ T3561] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.744867][ T3559] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.751606][ T3561] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.758616][ T3559] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.765735][ T3561] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.776375][ T3559] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.793076][ T3548] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.800620][ T3559] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.800841][ T3562] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.122261][ T3546] chnl_net:caif_netlink_parms(): no params data found [ 56.182044][ T3550] chnl_net:caif_netlink_parms(): no params data found [ 56.250599][ T3544] chnl_net:caif_netlink_parms(): no params data found [ 56.344827][ T3553] chnl_net:caif_netlink_parms(): no params data found [ 56.401351][ T3550] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.409585][ T3550] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.417745][ T3550] device bridge_slave_0 entered promiscuous mode [ 56.426170][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.433456][ T3546] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.441108][ T3546] device bridge_slave_0 entered promiscuous mode [ 56.450451][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.457560][ T3546] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.465572][ T3546] device bridge_slave_1 entered promiscuous mode [ 56.485243][ T3545] chnl_net:caif_netlink_parms(): no params data found [ 56.493854][ T3550] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.500907][ T3550] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.508883][ T3550] device bridge_slave_1 entered promiscuous mode [ 56.523843][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.530923][ T3544] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.538757][ T3544] device bridge_slave_0 entered promiscuous mode [ 56.574535][ T3544] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.581587][ T3544] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.589578][ T3544] device bridge_slave_1 entered promiscuous mode [ 56.625800][ T3550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.637792][ T3546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.655930][ T3544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.674480][ T3553] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.681568][ T3553] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.690310][ T3553] device bridge_slave_0 entered promiscuous mode [ 56.698369][ T3550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.717249][ T3546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.727961][ T3544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.748752][ T3553] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.756017][ T3553] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.763805][ T3553] device bridge_slave_1 entered promiscuous mode [ 56.803896][ T3550] team0: Port device team_slave_0 added [ 56.817254][ T3544] team0: Port device team_slave_0 added [ 56.825567][ T3544] team0: Port device team_slave_1 added [ 56.844151][ T3550] team0: Port device team_slave_1 added [ 56.851414][ T3553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.862787][ T3546] team0: Port device team_slave_0 added [ 56.892584][ T3553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.903123][ T3546] team0: Port device team_slave_1 added [ 56.922784][ T3545] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.929870][ T3545] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.938232][ T3545] device bridge_slave_0 entered promiscuous mode [ 56.968881][ T3544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.976119][ T3544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.002415][ T3544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.014769][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.022457][ T3545] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.030130][ T3545] device bridge_slave_1 entered promiscuous mode [ 57.037926][ T3550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.044966][ T3550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.071214][ T3550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.092946][ T3553] team0: Port device team_slave_0 added [ 57.099222][ T3546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.106350][ T3546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.132727][ T3546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.144349][ T3544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.151299][ T3544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.177620][ T3544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.207332][ T3550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.214396][ T3550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.240418][ T3550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.253372][ T3553] team0: Port device team_slave_1 added [ 57.263803][ T3546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.270752][ T3546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.301477][ T3546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.340679][ T3553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.347847][ T3553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.373959][ T3553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.396170][ T3545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.421244][ T3553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.428276][ T3553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.454492][ T3553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.477267][ T3546] device hsr_slave_0 entered promiscuous mode [ 57.484100][ T3546] device hsr_slave_1 entered promiscuous mode [ 57.492173][ T3545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.539719][ T3550] device hsr_slave_0 entered promiscuous mode [ 57.546664][ T3550] device hsr_slave_1 entered promiscuous mode [ 57.553378][ T3550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.561069][ T3550] Cannot create hsr debugfs directory [ 57.570715][ T3544] device hsr_slave_0 entered promiscuous mode [ 57.577689][ T3544] device hsr_slave_1 entered promiscuous mode [ 57.584569][ T3544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.592267][ T3544] Cannot create hsr debugfs directory [ 57.616921][ T3545] team0: Port device team_slave_0 added [ 57.624670][ T3545] team0: Port device team_slave_1 added [ 57.655575][ T3553] device hsr_slave_0 entered promiscuous mode [ 57.662566][ T3553] device hsr_slave_1 entered promiscuous mode [ 57.669044][ T3553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.677069][ T3553] Cannot create hsr debugfs directory [ 57.705315][ T3545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.712522][ T3545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.738650][ T3545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.754299][ T3545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.761249][ T3545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.787268][ T3545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.852872][ T3562] Bluetooth: hci4: command tx timeout [ 57.852872][ T3560] Bluetooth: hci0: command tx timeout [ 57.853077][ T3560] Bluetooth: hci3: command tx timeout [ 57.858491][ T3562] Bluetooth: hci2: command tx timeout [ 57.863959][ T3560] Bluetooth: hci1: command tx timeout [ 57.939293][ T3545] device hsr_slave_0 entered promiscuous mode [ 57.946040][ T3545] device hsr_slave_1 entered promiscuous mode [ 57.953531][ T3545] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.961091][ T3545] Cannot create hsr debugfs directory [ 58.168607][ T3544] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.182849][ T3544] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.200822][ T3544] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.219822][ T3544] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.261386][ T3553] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.282666][ T3553] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.309516][ T3553] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.322229][ T3553] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.362475][ T3546] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.374358][ T3546] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.395013][ T3546] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.407182][ T3546] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.439708][ T3550] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.468273][ T3550] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.477662][ T3550] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.499483][ T3550] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.529442][ T3544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.567320][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.577004][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.585951][ T3545] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.598011][ T3545] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.608750][ T3544] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.626790][ T3545] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.640231][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.649373][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.658398][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.665775][ T3593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.693875][ T3545] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.704650][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.712918][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.721390][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.730288][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.737414][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.745061][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.778910][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.787501][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.797464][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.806655][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.815242][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.823656][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.832153][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.853606][ T3546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.875639][ T3553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.883400][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.891219][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.900392][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.925490][ T3544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.947362][ T3546] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.966018][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.979811][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.998624][ T3553] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.018657][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.027867][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.041658][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.050871][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.063912][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.071297][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.090847][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.099126][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.108326][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.117375][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.124466][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.133128][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.141583][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.150294][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.159333][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.167897][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.176552][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.185208][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.192346][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.201147][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.209076][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.230344][ T3550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.263746][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.277888][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.287451][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.296834][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.305924][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.314729][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.323490][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.332756][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.341078][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.348179][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.364796][ T3550] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.374186][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.402389][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.410064][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.418133][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.427232][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.435755][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.442830][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.450686][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.459616][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.468882][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.513824][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.524525][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.534419][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.541515][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.549436][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.557188][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.564989][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.574115][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.582735][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.591238][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.600319][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.608878][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.617142][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.625816][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.636013][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.643908][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.658611][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.667686][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.676499][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.685517][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.708456][ T3553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.727091][ T3553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.737313][ T3544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.752618][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.761110][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.769512][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.778254][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.787583][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.796105][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.806497][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.842813][ T3545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.861583][ T3546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.905619][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.920082][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.931998][ T3560] Bluetooth: hci1: command tx timeout [ 59.932659][ T3562] Bluetooth: hci2: command tx timeout [ 59.937394][ T3560] Bluetooth: hci3: command tx timeout [ 59.942895][ T3559] Bluetooth: hci4: command tx timeout [ 59.948147][ T3560] Bluetooth: hci0: command tx timeout [ 59.969309][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.988696][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.997918][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.011195][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.033165][ T3545] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.077372][ T3544] device veth0_vlan entered promiscuous mode [ 60.089667][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.101136][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.110199][ T3598] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.117411][ T3598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.131306][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.140061][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.174894][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.186112][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.195042][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.203184][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.211664][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.220495][ T3594] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.227596][ T3594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.235479][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.244167][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.253100][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.279767][ T3546] device veth0_vlan entered promiscuous mode [ 60.290864][ T3544] device veth1_vlan entered promiscuous mode [ 60.301255][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.310305][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.319679][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.328258][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.335741][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.343227][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.352933][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.360649][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.376666][ T3546] device veth1_vlan entered promiscuous mode [ 60.391628][ T3550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.398937][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.408309][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.430644][ T3545] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 60.444030][ T3545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.472262][ T3553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.479312][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.493447][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.500931][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.509412][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.518720][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.527741][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.536374][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.546455][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.554952][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.582567][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.590238][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.613259][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.635843][ T3544] device veth0_macvtap entered promiscuous mode [ 60.679951][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.688769][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.712600][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.721385][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.732761][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.743190][ T3544] device veth1_macvtap entered promiscuous mode [ 60.762872][ T3546] device veth0_macvtap entered promiscuous mode [ 60.786930][ T3553] device veth0_vlan entered promiscuous mode [ 60.816770][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.826226][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.840279][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.849454][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.865572][ T3546] device veth1_macvtap entered promiscuous mode [ 60.888993][ T3544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.910052][ T3553] device veth1_vlan entered promiscuous mode [ 60.924779][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.932867][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.940560][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.948750][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.956802][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.965423][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.991034][ T3544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.007222][ T3544] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.016915][ T3544] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.025853][ T3544] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.034689][ T3544] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.053665][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.065299][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.074238][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.086087][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.093642][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 61.102941][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.114835][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.126137][ T3546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.139281][ T3545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.163958][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.172828][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.181322][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.190316][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.201001][ T3546] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.214550][ T3546] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.225853][ T3546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.239124][ T3553] device veth0_macvtap entered promiscuous mode [ 61.262741][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.271442][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.280626][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.289442][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.298796][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.308578][ T3546] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.317600][ T3546] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.330097][ T3546] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.339097][ T3546] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.364477][ T3553] device veth1_macvtap entered promiscuous mode [ 61.378530][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 61.394942][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 61.430201][ T3550] device veth0_vlan entered promiscuous mode [ 61.448653][ T3545] device veth0_vlan entered promiscuous mode [ 61.464333][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.473686][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.482044][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 61.490232][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 61.514017][ T3553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.526152][ T3553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.536339][ T3553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.547630][ T3553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.561348][ T3553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.573908][ T3553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.585400][ T3553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.595318][ T3553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.605881][ T3553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.617522][ T3553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.625275][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.633458][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.641082][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 61.649163][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 61.656975][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.665686][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.674596][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.683363][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.696547][ T3550] device veth1_vlan entered promiscuous mode [ 61.724541][ T3553] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.735977][ T3553] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.745119][ T3553] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.754174][ T3553] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.769381][ T3545] device veth1_vlan entered promiscuous mode [ 61.796281][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.805541][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.853051][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.861169][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.887389][ T3545] device veth0_macvtap entered promiscuous mode [ 61.894535][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.906667][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.914717][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 61.923251][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 61.931267][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.939726][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.947603][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.957029][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.975299][ T3550] device veth0_macvtap entered promiscuous mode [ 61.992598][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.000961][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 62.012016][ T3560] Bluetooth: hci4: command tx timeout [ 62.017436][ T3560] Bluetooth: hci2: command tx timeout [ 62.023645][ T47] Bluetooth: hci3: command tx timeout [ 62.023758][ T3562] Bluetooth: hci1: command tx timeout [ 62.029059][ T47] Bluetooth: hci0: command tx timeout [ 62.041168][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.051462][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 62.060066][ T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.071075][ T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.074479][ T3545] device veth1_macvtap entered promiscuous mode [ 62.090232][ T3550] device veth1_macvtap entered promiscuous mode [ 62.119297][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.127499][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 62.136094][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.172605][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.186370][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.200501][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.211510][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.221368][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.231957][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.243491][ T3550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.256548][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.270781][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.280994][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.297693][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.307678][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.336218][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.346312][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.357120][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.369382][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.384104][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.395402][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.405413][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.417563][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.428730][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.439924][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.448357][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.453374][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.459213][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.476913][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.486995][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.506064][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.517637][ T3550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.527646][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.538911][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.549384][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.560082][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.571287][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.583444][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.594087][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.605514][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.624752][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.627383][ T3631] loop0: detected capacity change from 0 to 2048 [ 62.642993][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.650946][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.654018][ T3631] ext4: Unknown parameter 'nouser_xattr' [ 62.668415][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.677541][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.687419][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.704458][ T3545] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.715644][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.719824][ T3545] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.737879][ T3545] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.756182][ T3545] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.761769][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.768953][ T3550] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.781902][ T3631] capability: warning: `syz.0.7' uses deprecated v2 capabilities in a way that may be insecure [ 62.785318][ T3550] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.806194][ T3550] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.815553][ T3550] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.861179][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.914862][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.935889][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.007584][ T3637] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 63.035117][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.170910][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.180951][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.192850][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.236924][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.252922][ T3645] process 'syz.3.4' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 63.436377][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.480463][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.074787][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.092654][ T47] Bluetooth: hci1: command tx timeout [ 64.098087][ T47] Bluetooth: hci3: command tx timeout [ 64.102736][ T3560] Bluetooth: hci0: command tx timeout [ 64.103563][ T3562] Bluetooth: hci2: command tx timeout [ 64.108850][ T3560] Bluetooth: hci4: command tx timeout [ 64.140395][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.164399][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.172797][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.180740][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.188993][ T47] Bluetooth: hci5: sending frame failed (-49) [ 64.195883][ T3560] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 64.221058][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.352073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.360396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 64.368716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 64.377031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 64.385347][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 64.613444][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 64.622350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 64.652025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.660371][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 64.668782][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 65.102069][ T27] audit: type=1326 audit(1721227982.608:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3676 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2412175a19 code=0x7ffc0000 [ 65.162674][ T27] audit: type=1326 audit(1721227982.628:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3676 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f2412175a19 code=0x7ffc0000 [ 65.225012][ T3679] loop0: detected capacity change from 0 to 2048 [ 65.247034][ T27] audit: type=1326 audit(1721227982.628:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3676 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2412175a19 code=0x7ffc0000 [ 65.337492][ T27] audit: type=1326 audit(1721227982.628:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3676 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2412175a19 code=0x7ffc0000 [ 65.354850][ T3679] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz.0.17: bad orphan inode 8192 [ 65.392020][ T3554] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.408033][ T3679] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 65.924156][ T3554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.014722][ T3554] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.123324][ T3554] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 66.341860][ T3554] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.357289][ T3554] usb 4-1: config 0 descriptor?? [ 66.536020][ T3544] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor: corrupted in-inode xattr [ 66.555062][ T3711] loop4: detected capacity change from 0 to 128 [ 66.582947][ T3544] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor: corrupted in-inode xattr [ 66.651446][ T3711] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 66.671652][ T47] Bluetooth: hci5: sending frame failed (-49) [ 66.678476][ T3560] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 66.689434][ T3711] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 66.835404][ T3550] EXT4-fs (loop4): unmounting filesystem. [ 66.835741][ T3554] elo 0003:04E7:0030.0001: item fetching failed at offset 2/5 [ 66.890189][ T3554] elo 0003:04E7:0030.0001: parse failed [ 66.903072][ T3554] elo: probe of 0003:04E7:0030.0001 failed with error -22 [ 66.948665][ T3544] EXT4-fs (loop0): unmounting filesystem. [ 67.038981][ T3554] usb 4-1: USB disconnect, device number 2 [ 67.042449][ T3544] syz-executor (3544) used greatest stack depth: 19704 bytes left [ 67.048931][ T3702] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.089523][ T3724] futex_wake_op: syz.4.34 tries to shift op by 32; fix this program [ 67.115149][ T3726] loop2: detected capacity change from 0 to 2048 [ 67.219826][ T3726] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.35: bad orphan inode 8192 [ 67.245389][ T3726] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 67.254868][ T3702] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.351901][ T3604] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 67.428769][ T3702] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.407611][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.419216][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.427623][ T3604] usb 2-1: Using ep0 maxpacket: 16 [ 69.433475][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.441688][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.450155][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.458286][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.557317][ T3545] EXT4-fs (loop2): unmounting filesystem. [ 69.576036][ T3702] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.632113][ T3604] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 69.650387][ T3604] usb 2-1: config 0 has no interface number 0 [ 69.668625][ T3747] loop4: detected capacity change from 0 to 128 [ 69.670696][ T3604] usb 2-1: config 0 interface 2 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 69.697555][ T3747] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 69.708058][ T3747] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 69.713302][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 69.797215][ T3744] bridge0: port 3(veth3) entered blocking state [ 69.808533][ T3744] bridge0: port 3(veth3) entered disabled state [ 69.809956][ T3550] EXT4-fs (loop4): unmounting filesystem. [ 69.820751][ T3744] device veth3 entered promiscuous mode [ 69.852047][ T3604] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 69.865736][ T3604] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 69.880826][ T3604] usb 2-1: Product: syz [ 69.886195][ T3604] usb 2-1: SerialNumber: syz [ 69.893766][ T3604] usb 2-1: config 0 descriptor?? [ 69.912599][ T3725] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 70.847742][ T3604] usb 2-1: invalid MIDI in EP 0 [ 71.131324][ T3604] snd-usb-audio: probe of 2-1:0.2 failed with error -22 [ 71.229217][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.235791][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.238633][ T3604] usb 2-1: USB disconnect, device number 2 [ 71.822011][ T3559] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 71.832758][ T3536] udevd[3536]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 72.758150][ T3789] loop3: detected capacity change from 0 to 2048 [ 72.873067][ T3789] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.50: bad orphan inode 8192 [ 73.104957][ T3789] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 74.338634][ T3813] loop1: detected capacity change from 0 to 128 [ 74.632770][ T3813] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 74.665056][ T3813] ext4 filesystem being mounted at /9/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 74.732672][ T3546] EXT4-fs (loop3): unmounting filesystem. [ 75.048257][ T3553] EXT4-fs (loop1): unmounting filesystem. [ 75.084364][ T3741] chnl_net:caif_netlink_parms(): no params data found [ 75.271985][ T3554] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 75.561789][ T3554] usb 4-1: Using ep0 maxpacket: 16 [ 76.825769][ T26] cfg80211: failed to load regulatory.db [ 77.052017][ T3554] usb 4-1: config 0 has no interfaces? [ 77.195886][ T3554] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 77.205069][ T3554] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 77.214109][ T3554] usb 4-1: Product: syz [ 77.218365][ T3554] usb 4-1: SerialNumber: syz [ 77.279964][ T3554] usb 4-1: config 0 descriptor?? [ 77.282199][ T3741] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.337786][ T3741] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.369269][ T3849] loop1: detected capacity change from 0 to 512 [ 77.399051][ T3741] device bridge_slave_0 entered promiscuous mode [ 77.448223][ T3849] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 77.457491][ T3741] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.470000][ T3741] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.489165][ T3741] device bridge_slave_1 entered promiscuous mode [ 77.549587][ T3849] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz.1.60: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 77.638127][ T3595] usb 4-1: USB disconnect, device number 3 [ 77.676997][ T3849] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.60: couldn't read orphan inode 15 (err -117) [ 77.691370][ T3849] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 77.700044][ T3849] ext2 filesystem being mounted at /11/file2 supports timestamps until 2038 (0x7fffffff) [ 77.894751][ T3741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.195996][ T3741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.465022][ T3553] EXT4-fs (loop1): unmounting filesystem. [ 78.549211][ T3865] 9pnet: p9_errstr2errno: server reported unknown error JS [ 78.600669][ T3741] team0: Port device team_slave_0 added [ 78.646230][ T3741] team0: Port device team_slave_1 added [ 78.828440][ T3880] loop4: detected capacity change from 0 to 512 [ 78.954818][ T3880] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.000347][ T3880] EXT4-fs: Ignoring removed oldalloc option [ 79.161990][ T3595] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 79.430299][ T3880] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.64: invalid indirect mapped block 11 (level 0) [ 79.471895][ T3595] usb 4-1: Using ep0 maxpacket: 32 [ 79.552844][ T3741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.581905][ T3880] EXT4-fs (loop4): Remounting filesystem read-only [ 79.600175][ T3741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.605071][ T3880] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz.4.64: attempt to clear invalid blocks 1024 len 1 [ 79.627397][ T3595] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 79.691035][ T3595] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 79.711466][ T3741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.757658][ T3595] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 79.818454][ T3741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.826180][ T3595] usb 4-1: string descriptor 0 read error: -22 [ 79.851965][ T3595] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.861363][ T3741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.867221][ T3880] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 79.932910][ T3595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.989190][ T3741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.032783][ T3880] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.64: invalid indirect mapped block 1819239214 (level 0) [ 80.070916][ T3880] EXT4-fs (loop4): 1 truncate cleaned up [ 80.097190][ T3880] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 80.189702][ T3868] EXT4-fs error (device loop4): __ext4_remount:6425: comm syz.4.64: Abort forced by user [ 80.220391][ T3868] EXT4-fs (loop4): Remounting filesystem read-only [ 80.246132][ T3868] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 80.325927][ T3741] device hsr_slave_0 entered promiscuous mode [ 80.352314][ T3550] EXT4-fs (loop4): unmounting filesystem. [ 80.365663][ T3741] device hsr_slave_1 entered promiscuous mode [ 80.405272][ T3741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.437496][ T3741] Cannot create hsr debugfs directory [ 80.485813][ T3874] loop1: detected capacity change from 0 to 32768 [ 80.552305][ T3913] overlayfs: failed to get inode (-116) [ 80.558285][ T3913] overlayfs: failed to get inode (-116) [ 80.564141][ T3913] overlayfs: failed to get inode (-116) [ 80.569850][ T3913] overlayfs: failed to get inode (-116) [ 80.633679][ T3874] [ 80.633679][ T3874] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.633679][ T3874] [ 80.807123][ T3874] [ 80.807123][ T3874] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.807123][ T3874] [ 80.896166][ T3916] [ 80.896166][ T3916] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.896166][ T3916] [ 80.956128][ T3874] [ 80.956128][ T3874] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 80.956128][ T3874] [ 81.021488][ T3702] device hsr_slave_0 left promiscuous mode [ 81.042709][ T3874] [ 81.042709][ T3874] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.042709][ T3874] [ 81.074625][ T3916] [ 81.074625][ T3916] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.074625][ T3916] [ 81.087687][ T3702] device hsr_slave_1 left promiscuous mode [ 81.121278][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.131233][ T3874] [ 81.131233][ T3874] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.131233][ T3874] [ 81.141429][ T3924] loop4: detected capacity change from 0 to 1024 [ 81.148670][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.151334][ T3916] jfs: Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿ" or missing value [ 81.183443][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.191036][ T3874] [ 81.191036][ T3874] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.191036][ T3874] [ 81.217852][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.245550][ T3702] device bridge_slave_1 left promiscuous mode [ 81.253492][ T133] [ 81.253492][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.253492][ T133] [ 81.284753][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.296202][ T3553] [ 81.296202][ T3553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.296202][ T3553] [ 81.325225][ T3553] [ 81.325225][ T3553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 81.325225][ T3553] [ 81.341677][ T3702] device bridge_slave_0 left promiscuous mode [ 81.365180][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.490517][ T3702] device veth1_macvtap left promiscuous mode [ 81.517147][ T3702] device veth0_macvtap left promiscuous mode [ 81.531823][ T3593] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.555767][ T3702] device veth1_vlan left promiscuous mode [ 81.586203][ T3702] device veth0_vlan left promiscuous mode [ 81.771958][ T3593] usb 5-1: Using ep0 maxpacket: 32 [ 81.912157][ T3593] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.955947][ T3593] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.007294][ T3945] loop1: detected capacity change from 0 to 40427 [ 82.016096][ T3593] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 82.030864][ T3945] F2FS-fs (loop1): invalid crc value [ 82.135859][ T3593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.148059][ T3945] F2FS-fs (loop1): Found nat_bits in checkpoint [ 82.243428][ T3593] hub 5-1:4.0: USB hub found [ 82.269473][ T3945] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 82.452042][ T3593] hub 5-1:4.0: 2 ports detected [ 82.492040][ T3595] cdc_ncm 4-1:1.0: bind() failure [ 82.524153][ T3595] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 82.652589][ T3595] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 82.671980][ T3593] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 82.672063][ T3593] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 82.685106][ T3595] usbtest: probe of 4-1:1.1 failed with error -71 [ 82.688054][ T3595] usb 4-1: USB disconnect, device number 4 [ 82.722837][ T3593] usb 5-1: USB disconnect, device number 2 [ 83.438354][ T3702] team0 (unregistering): Port device team_slave_1 removed [ 83.502889][ T3702] team0 (unregistering): Port device team_slave_0 removed [ 83.546277][ T3983] loop3: detected capacity change from 0 to 32768 [ 83.638328][ T3983] [ 83.638328][ T3983] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 83.638328][ T3983] [ 84.309538][ T3702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.322626][ T3983] [ 84.322626][ T3983] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.322626][ T3983] [ 84.368079][ T3983] [ 84.368079][ T3983] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.368079][ T3983] [ 84.389416][ T3983] [ 84.389416][ T3983] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.389416][ T3983] [ 84.400031][ T3983] [ 84.400031][ T3983] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.400031][ T3983] [ 84.417705][ T133] [ 84.417705][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.417705][ T133] [ 84.418184][ T27] audit: type=1800 audit(1721228001.928:6): pid=3990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.73" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 84.449257][ T27] audit: type=1800 audit(1721228001.958:7): pid=3983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.73" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 84.507210][ T3983] [ 84.507210][ T3983] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.507210][ T3983] [ 84.525825][ T3702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.545017][ T3983] [ 84.545017][ T3983] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.545017][ T3983] [ 84.557576][ T3983] [ 84.557576][ T3983] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.557576][ T3983] [ 84.570701][ T3983] [ 84.570701][ T3983] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.570701][ T3983] [ 84.778969][ T3983] [ 84.778969][ T3983] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 84.778969][ T3983] [ 85.253254][ T133] [ 85.253254][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.253254][ T133] [ 85.344202][ T3546] [ 85.344202][ T3546] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.344202][ T3546] [ 85.359645][ T3546] [ 85.359645][ T3546] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 85.359645][ T3546] [ 85.757918][ T4003] loop3: detected capacity change from 0 to 2048 [ 86.093426][ T4005] overlayfs: failed to get inode (-116) [ 86.099179][ T4005] overlayfs: failed to get inode (-116) [ 86.104933][ T4005] overlayfs: failed to get inode (-116) [ 86.110601][ T4005] overlayfs: failed to get inode (-116) [ 86.613707][ T4003] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.78: bad orphan inode 8192 [ 86.649189][ T4003] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.328317][ T3702] bond0 (unregistering): Released all slaves [ 87.519942][ T3546] EXT4-fs (loop3): unmounting filesystem. [ 87.877565][ T3598] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.071727][ C1] sched: RT throttling activated [ 89.154489][ T3598] usb 2-1: Using ep0 maxpacket: 32 [ 89.272065][ T3598] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 89.350501][ T3598] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 89.391275][ T3598] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 89.494528][ T3598] usb 2-1: string descriptor 0 read error: -22 [ 89.575863][ T4055] overlayfs: failed to get inode (-116) [ 89.581577][ T4055] overlayfs: failed to get inode (-116) [ 89.587311][ T4055] overlayfs: failed to get inode (-116) [ 89.593035][ T4055] overlayfs: failed to get inode (-116) [ 89.826087][ T4053] loop4: detected capacity change from 0 to 40427 [ 89.837847][ T3598] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 89.837881][ T4053] F2FS-fs (loop4): invalid crc value [ 89.852862][ T3598] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.886151][ T4053] F2FS-fs (loop4): Found nat_bits in checkpoint [ 89.892477][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 89.937160][ T3598] usb 2-1: can't set config #1, error -32 [ 89.950765][ T3598] usb 2-1: USB disconnect, device number 3 [ 89.969967][ T4053] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 90.115544][ T4069] loop1: detected capacity change from 0 to 512 [ 90.180465][ T4069] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 90.233228][ T4069] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #15: comm syz.1.92: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 90.336529][ T4069] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.92: couldn't read orphan inode 15 (err -117) [ 90.353472][ T4069] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 90.353630][ T4069] ext2 filesystem being mounted at /18/file2 supports timestamps until 2038 (0x7fffffff) [ 90.416625][ T4075] loop2: detected capacity change from 0 to 2048 [ 90.448817][ T27] audit: type=1804 audit(1721228007.958:8): pid=4069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.92" name="/newroot/18/file2/file0" dev="loop1" ino=18 res=1 errno=0 [ 90.505655][ T4075] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.93: bad orphan inode 8192 [ 90.506044][ T4075] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 91.235167][ T4049] loop3: detected capacity change from 0 to 32768 [ 91.353817][ T4049] [ 91.353817][ T4049] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.353817][ T4049] [ 91.454969][ T3545] EXT4-fs (loop2): unmounting filesystem. [ 91.475226][ T4049] [ 91.475226][ T4049] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.475226][ T4049] [ 91.504336][ T3553] EXT4-fs (loop1): unmounting filesystem. [ 91.522549][ T4049] [ 91.522549][ T4049] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.522549][ T4049] [ 91.593795][ T3741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.602171][ T4049] [ 91.602171][ T4049] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.602171][ T4049] [ 91.655102][ T3741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.701775][ T4049] [ 91.701775][ T4049] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.701775][ T4049] [ 91.713970][ T3741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.750935][ T3741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.796894][ T27] audit: type=1800 audit(1721228009.308:9): pid=4087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.88" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 91.822380][ T132] [ 91.822380][ T132] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.822380][ T132] [ 91.907604][ T3546] [ 91.907604][ T3546] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.907604][ T3546] [ 91.913465][ T27] audit: type=1800 audit(1721228009.318:10): pid=4049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.88" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 91.991297][ T3546] [ 91.991297][ T3546] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.991297][ T3546] [ 92.011799][ T3596] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.105220][ T3741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.202623][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.225875][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.271826][ T3596] usb 2-1: Using ep0 maxpacket: 32 [ 92.280895][ T3741] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.314444][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.343607][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.391906][ T3596] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 92.393972][ T3604] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.410172][ T3604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.419734][ T3596] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 92.445151][ T3596] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 92.484650][ T3559] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.493495][ T3559] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.501070][ T3559] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.510737][ T3559] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.518267][ T3596] usb 2-1: string descriptor 0 read error: -22 [ 92.525269][ T3559] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.532635][ T3559] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.540898][ T3596] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.550420][ T3596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.801509][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.812478][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.841539][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.863409][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.870543][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.912105][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 93.675350][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 93.736853][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 93.747826][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 93.752173][ T3596] cdc_ncm 2-1:1.0: bind() failure [ 93.760507][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 93.782715][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.792076][ T3596] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 93.811860][ T3596] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 93.842033][ T3596] usbtest: probe of 2-1:1.1 failed with error -71 [ 93.843303][ T3741] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 93.869380][ T3741] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 93.892781][ T3596] usb 2-1: USB disconnect, device number 4 [ 93.909040][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.924009][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.099193][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.110707][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 94.119220][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 94.131631][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 94.147828][ T4120] overlayfs: failed to get inode (-116) [ 94.153868][ T4120] overlayfs: failed to get inode (-116) [ 94.159569][ T4120] overlayfs: failed to get inode (-116) [ 94.165319][ T4120] overlayfs: failed to get inode (-116) [ 94.582719][ T3559] Bluetooth: hci2: command tx timeout [ 94.623032][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 94.742105][ T4143] loop3: detected capacity change from 0 to 2048 [ 94.755626][ T4110] chnl_net:caif_netlink_parms(): no params data found [ 94.782118][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 94.789612][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 94.821643][ T4143] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.104: bad orphan inode 8192 [ 94.829127][ T3741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.861803][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 94.867299][ T4143] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 94.992237][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 95.035032][ T7] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 95.045381][ T7] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 95.090439][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.099218][ T7] usb 5-1: string descriptor 0 read error: -22 [ 95.110867][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.119843][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.974147][ T3546] EXT4-fs (loop3): unmounting filesystem. [ 95.980402][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.078278][ T4110] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.095983][ T4110] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.129499][ T4110] device bridge_slave_0 entered promiscuous mode [ 96.158314][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.169601][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.500884][ T4166] loop3: detected capacity change from 0 to 40427 [ 96.510740][ T4166] F2FS-fs (loop3): invalid crc value [ 96.525309][ T3741] device veth0_vlan entered promiscuous mode [ 96.542489][ T4166] F2FS-fs (loop3): Found nat_bits in checkpoint [ 96.592508][ T4110] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.599625][ T4166] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 96.601920][ T4110] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.652139][ T3559] Bluetooth: hci2: command tx timeout [ 96.663803][ T4110] device bridge_slave_1 entered promiscuous mode [ 96.761871][ T7] cdc_ncm 5-1:1.0: bind() failure [ 96.802340][ T7] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 96.817100][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.825088][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.831988][ T7] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 96.837388][ T3741] device veth1_vlan entered promiscuous mode [ 96.874373][ T4110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.892418][ T7] usbtest: probe of 5-1:1.1 failed with error -71 [ 96.916533][ T4110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.945816][ T7] usb 5-1: USB disconnect, device number 3 [ 96.986743][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.001990][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.033835][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.057278][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.093121][ T3741] device veth0_macvtap entered promiscuous mode [ 97.119700][ T4110] team0: Port device team_slave_0 added [ 97.139019][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.160110][ T3741] device veth1_macvtap entered promiscuous mode [ 97.182346][ T4110] team0: Port device team_slave_1 added [ 97.201641][ T4161] loop1: detected capacity change from 0 to 32768 [ 97.226222][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.250860][ T4161] [ 97.250860][ T4161] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.250860][ T4161] [ 97.264517][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.310676][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.331752][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.344685][ T4161] [ 97.344685][ T4161] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.344685][ T4161] [ 97.370204][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.392245][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.409905][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.420466][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.439151][ T3741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.504602][ T4161] [ 97.504602][ T4161] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.504602][ T4161] [ 97.516706][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.548776][ T4161] [ 97.548776][ T4161] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.548776][ T4161] [ 97.559720][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.566481][ T4161] [ 97.566481][ T4161] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.566481][ T4161] [ 97.621067][ T27] audit: type=1800 audit(1721228015.108:11): pid=4161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.105" name="bus" dev="loop1" ino=7 res=0 errno=0 [ 97.719851][ T132] [ 97.719851][ T132] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 97.719851][ T132] [ 97.923327][ T27] audit: type=1800 audit(1721228015.168:12): pid=4185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.105" name="bus" dev="loop1" ino=7 res=0 errno=0 [ 97.973281][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.166181][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.261907][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.303527][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.357909][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.390908][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.403495][ T3741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.408742][ T3553] [ 98.408742][ T3553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.408742][ T3553] [ 98.473881][ T4110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.482992][ T3553] [ 98.482992][ T3553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.482992][ T3553] [ 98.508048][ T4110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.591803][ T4110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.731977][ T3559] Bluetooth: hci2: command tx timeout [ 98.733495][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 98.751082][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 98.761170][ T4199] overlayfs: failed to get inode (-116) [ 98.767074][ T4199] overlayfs: failed to get inode (-116) [ 98.772838][ T4199] overlayfs: failed to get inode (-116) [ 98.778512][ T4199] overlayfs: failed to get inode (-116) [ 98.786762][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.804735][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.893947][ T3741] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.910475][ T3741] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.920183][ T3741] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.928954][ T3741] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.945292][ T4110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.952652][ T4110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.049093][ T4110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.169983][ T4110] device hsr_slave_0 entered promiscuous mode [ 99.241365][ T4110] device hsr_slave_1 entered promiscuous mode [ 99.249289][ T4110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.260786][ T4110] Cannot create hsr debugfs directory [ 99.330660][ T3702] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.479209][ T3702] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.536103][ T3701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.565829][ T3701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.623569][ T3702] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.651927][ T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.676540][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.705084][ T3701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.741532][ T3701] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.788559][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.858719][ T3702] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.902037][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 100.042046][ T26] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 100.231796][ T26] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 100.241582][ T26] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 100.305752][ T26] usb 2-1: string descriptor 0 read error: -22 [ 100.321841][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 100.331061][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.812098][ T3559] Bluetooth: hci2: command tx timeout [ 101.401929][ T26] cdc_ncm 2-1:1.0: bind() failure [ 101.422090][ T26] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 101.452576][ T26] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 101.491937][ T26] usbtest: probe of 2-1:1.1 failed with error -71 [ 101.511921][ T26] usb 2-1: USB disconnect, device number 5 [ 101.720917][ T4254] overlayfs: failed to get inode (-116) [ 101.726833][ T4254] overlayfs: failed to get inode (-116) [ 101.733160][ T4254] overlayfs: failed to get inode (-116) [ 101.738850][ T4254] overlayfs: failed to get inode (-116) [ 102.010021][ T4244] loop0: detected capacity change from 0 to 32768 [ 102.080647][ T4260] loop3: detected capacity change from 0 to 40427 [ 102.094019][ T4260] F2FS-fs (loop3): invalid crc value [ 102.112263][ T4244] [ 102.112263][ T4244] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.112263][ T4244] [ 102.175461][ T4260] F2FS-fs (loop3): Found nat_bits in checkpoint [ 102.232355][ T4260] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 102.307754][ T4274] [ 102.307754][ T4274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.307754][ T4274] [ 102.358346][ T4110] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.395390][ T4110] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.423613][ T4274] [ 102.423613][ T4274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.423613][ T4274] [ 102.534999][ T4274] [ 102.534999][ T4274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.534999][ T4274] [ 102.535194][ T4274] [ 102.535194][ T4274] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.535194][ T4274] [ 102.581310][ T27] audit: type=1800 audit(1721228020.058:13): pid=4274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.116" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 102.609166][ T133] [ 102.609166][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.609166][ T133] [ 102.727435][ T4244] [ 102.727435][ T4244] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.727435][ T4244] [ 102.748349][ T4110] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.809321][ T27] audit: type=1800 audit(1721228020.188:14): pid=4244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.116" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 102.902084][ T4244] [ 102.902084][ T4244] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.902084][ T4244] [ 102.938563][ T4110] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.954763][ T4244] [ 102.954763][ T4244] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.954763][ T4244] [ 102.965452][ T4244] [ 102.965452][ T4244] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.965452][ T4244] [ 102.982063][ T4244] [ 102.982063][ T4244] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.982063][ T4244] [ 102.995609][ T133] [ 102.995609][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.995609][ T133] [ 103.084065][ T3741] [ 103.084065][ T3741] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.084065][ T3741] [ 103.105713][ T3741] [ 103.105713][ T3741] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 103.105713][ T3741] [ 103.412433][ T4110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.507622][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.720679][ T4292] loop3: detected capacity change from 0 to 2048 [ 104.136703][ T4292] ext4: Unknown parameter 'nouser_xattr' [ 104.323913][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.337420][ T3782] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.775258][ T4316] overlayfs: failed to get inode (-116) [ 105.781141][ T4316] overlayfs: failed to get inode (-116) [ 105.787089][ T4316] overlayfs: failed to get inode (-116) [ 105.792850][ T4316] overlayfs: failed to get inode (-116) [ 105.942373][ T27] audit: type=1400 audit(1721228023.448:15): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4321 comm="syz.1.132" [ 105.977104][ T4110] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.979879][ T4322] loop1: detected capacity change from 0 to 512 [ 106.328542][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.354768][ T4322] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 106.367443][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.392319][ T4322] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038 (0x7fffffff) [ 106.420634][ T4337] loop4: detected capacity change from 0 to 1024 [ 106.437846][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.444994][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.490339][ T4331] loop3: detected capacity change from 0 to 40427 [ 106.500698][ T4331] F2FS-fs (loop3): invalid crc value [ 106.522539][ T4331] F2FS-fs (loop3): Found nat_bits in checkpoint [ 106.535360][ T4322] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.132: corrupted inode contents [ 106.562262][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.587407][ T4331] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 106.611692][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.620931][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.628116][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.684684][ T4322] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #2: comm syz.1.132: mark_inode_dirty error [ 106.766119][ T4322] EXT4-fs error (device loop1): ext4_do_update_inode:5210: inode #2: comm syz.1.132: corrupted inode contents [ 106.782354][ T4322] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.132: mark_inode_dirty error [ 107.091302][ T3553] EXT4-fs (loop1): unmounting filesystem. [ 107.357456][ T3702] device hsr_slave_0 left promiscuous mode [ 107.386234][ T3702] device hsr_slave_1 left promiscuous mode [ 107.438880][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.456889][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.473527][ T3702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.491120][ T3702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.503144][ T3702] device bridge_slave_1 left promiscuous mode [ 107.515952][ T4332] loop0: detected capacity change from 0 to 32768 [ 107.517693][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.557338][ T4332] [ 107.557338][ T4332] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.557338][ T4332] [ 107.570663][ T3702] device bridge_slave_0 left promiscuous mode [ 107.583949][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.621823][ T3591] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.638104][ T4332] [ 107.638104][ T4332] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.638104][ T4332] [ 107.649360][ T4332] [ 107.649360][ T4332] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.649360][ T4332] [ 107.680886][ T4332] [ 107.680886][ T4332] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.680886][ T4332] [ 107.691668][ T3702] device veth1_macvtap left promiscuous mode [ 107.702807][ T3702] device veth0_macvtap left promiscuous mode [ 107.709114][ T3702] device veth1_vlan left promiscuous mode [ 107.715194][ T3702] device veth0_vlan left promiscuous mode [ 107.729705][ T4332] [ 107.729705][ T4332] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.729705][ T4332] [ 107.767260][ T27] audit: type=1800 audit(1721228025.278:16): pid=4332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.136" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 107.792981][ T133] [ 107.792981][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.792981][ T133] [ 107.819659][ T27] audit: type=1800 audit(1721228025.278:17): pid=4356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.136" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 107.849129][ T4332] [ 107.849129][ T4332] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.849129][ T4332] [ 107.859918][ T4332] [ 107.859918][ T4332] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.859918][ T4332] [ 107.881105][ T4332] [ 107.881105][ T4332] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.881105][ T4332] [ 107.899204][ T4332] [ 107.899204][ T4332] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.899204][ T4332] [ 107.924669][ T4332] [ 107.924669][ T4332] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 107.924669][ T4332] [ 108.022182][ T3591] usb 5-1: Using ep0 maxpacket: 32 [ 108.085606][ T132] [ 108.085606][ T132] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.085606][ T132] [ 108.222651][ T3591] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.334050][ T3591] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.424506][ T3591] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 108.473821][ T3591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.611273][ T3741] [ 108.611273][ T3741] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.611273][ T3741] [ 108.636675][ T3741] [ 108.636675][ T3741] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 108.636675][ T3741] [ 108.649177][ T3591] hub 5-1:4.0: USB hub found [ 108.861996][ T3591] hub 5-1:4.0: 2 ports detected [ 108.871489][ T4363] loop0: detected capacity change from 0 to 256 [ 109.244934][ T4369] overlayfs: failed to get inode (-116) [ 109.250658][ T4369] overlayfs: failed to get inode (-116) [ 109.256483][ T4369] overlayfs: failed to get inode (-116) [ 109.262853][ T4369] overlayfs: failed to get inode (-116) [ 109.484610][ T3591] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 109.491362][ T3591] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 111.092990][ T3591] usb 5-1: USB disconnect, device number 4 [ 111.420708][ T3702] team0 (unregistering): Port device team_slave_1 removed [ 111.454305][ T3702] team0 (unregistering): Port device team_slave_0 removed [ 111.506092][ T3702] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.561429][ T3702] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.599929][ T4385] loop3: detected capacity change from 0 to 512 [ 111.700192][ T4382] loop4: detected capacity change from 0 to 40427 [ 111.724366][ T4382] F2FS-fs (loop4): invalid crc value [ 111.741956][ T4385] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.779092][ T4385] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 111.799375][ T4382] F2FS-fs (loop4): Found nat_bits in checkpoint [ 111.811559][ T4385] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #2: comm syz.3.147: corrupted inode contents [ 111.856009][ T4382] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 111.913969][ T4385] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #2: comm syz.3.147: mark_inode_dirty error [ 111.974367][ T4385] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #2: comm syz.3.147: corrupted inode contents [ 112.025030][ T4385] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.147: mark_inode_dirty error [ 112.085105][ T3546] EXT4-fs (loop3): unmounting filesystem. [ 113.498545][ T4396] loop0: detected capacity change from 0 to 32768 [ 113.518303][ T4396] [ 113.518303][ T4396] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.518303][ T4396] [ 113.564072][ T4396] [ 113.564072][ T4396] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.564072][ T4396] [ 113.571105][ T3702] bond0 (unregistering): Released all slaves [ 113.601943][ T4396] [ 113.601943][ T4396] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.601943][ T4396] [ 113.623293][ T4396] [ 113.623293][ T4396] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.623293][ T4396] [ 113.685539][ T4396] [ 113.685539][ T4396] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.685539][ T4396] [ 113.706356][ T132] [ 113.706356][ T132] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.706356][ T132] [ 113.719674][ T27] audit: type=1800 audit(1721228031.228:18): pid=4409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.149" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 113.770533][ T27] audit: type=1800 audit(1721228031.278:19): pid=4396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.149" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 113.821062][ T4410] [ 113.821062][ T4410] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.821062][ T4410] [ 113.831805][ T4410] [ 113.831805][ T4410] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.831805][ T4410] [ 113.842339][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 113.843431][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 113.889022][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 113.907952][ T4415] overlayfs: failed to get inode (-116) [ 113.913825][ T4415] overlayfs: failed to get inode (-116) [ 113.919506][ T4415] overlayfs: failed to get inode (-116) [ 113.925237][ T4415] overlayfs: failed to get inode (-116) [ 113.936409][ T4410] [ 113.936409][ T4410] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 113.936409][ T4410] [ 113.968484][ T4414] loop4: detected capacity change from 0 to 1024 [ 113.978907][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.010371][ T4410] [ 114.010371][ T4410] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.010371][ T4410] [ 114.022430][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.061219][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.073586][ T4410] [ 114.073586][ T4410] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.073586][ T4410] [ 114.091273][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.128364][ T133] [ 114.128364][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.128364][ T133] [ 114.152703][ T27] audit: type=1800 audit(1721228031.638:20): pid=4410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.149" name="file2" dev="loop0" ino=8 res=0 errno=0 [ 114.221578][ T4110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.248098][ T4110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.265456][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.287386][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.306550][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.315759][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.325284][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.345436][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 114.377983][ T3741] [ 114.377983][ T3741] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.377983][ T3741] [ 114.420368][ T3741] [ 114.420368][ T3741] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 114.420368][ T3741] [ 114.511846][ T3547] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 114.772041][ T3547] usb 5-1: Using ep0 maxpacket: 32 [ 114.902092][ T3547] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.931897][ T3547] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.961963][ T3547] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 114.994236][ T4110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.020466][ T3547] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.078039][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.091453][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.113082][ T3547] hub 5-1:4.0: USB hub found [ 115.175377][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.200570][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.252644][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 115.266766][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 115.305941][ T4110] device veth0_vlan entered promiscuous mode [ 115.319903][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 115.327434][ T3547] hub 5-1:4.0: 2 ports detected [ 115.333820][ T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 115.359336][ T4110] device veth1_vlan entered promiscuous mode [ 115.724741][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 115.787489][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 115.952027][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.122345][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.174273][ T4110] device veth0_macvtap entered promiscuous mode [ 116.213623][ T3547] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 116.220009][ T3547] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 116.262651][ T3547] usb 5-1: USB disconnect, device number 5 [ 116.273939][ T4110] device veth1_macvtap entered promiscuous mode [ 116.354553][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.378948][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.433854][ T4110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.455198][ T4110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.493615][ T4110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.541966][ T4110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.597714][ T4110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.641381][ T4110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.669332][ T4110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.746417][ T4461] overlayfs: failed to get inode (-116) [ 116.752189][ T4461] overlayfs: failed to get inode (-116) [ 116.757855][ T4461] overlayfs: failed to get inode (-116) [ 116.763586][ T4461] overlayfs: failed to get inode (-116) [ 116.863949][ T4110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.925562][ T4110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.969792][ T4110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.009672][ T4110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.077372][ T4110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.095023][ T4110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.106709][ T4110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.117342][ T4110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.127250][ T4110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.137977][ T4110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.160013][ T4110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.190086][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.207286][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.226175][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.248063][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.281970][ T4110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.290706][ T4110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.391760][ T4110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.400494][ T4110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.775173][ T3661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.868314][ T3661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.898832][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.924891][ T4452] loop1: detected capacity change from 0 to 32768 [ 117.995166][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.016770][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.026491][ T4452] [ 118.026491][ T4452] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.026491][ T4452] [ 118.368239][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.438287][ T4452] [ 118.438287][ T4452] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.438287][ T4452] [ 118.551916][ T4452] [ 118.551916][ T4452] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.551916][ T4452] [ 118.593070][ T4452] [ 118.593070][ T4452] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.593070][ T4452] [ 118.629339][ T4493] loop3: detected capacity change from 0 to 1024 [ 118.641876][ T4452] [ 118.641876][ T4452] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.641876][ T4452] [ 118.695693][ T27] audit: type=1800 audit(1721228036.208:21): pid=4452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.165" name="bus" dev="loop1" ino=7 res=0 errno=0 [ 118.807781][ T27] audit: type=1400 audit(1721228036.318:22): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=4495 comm="syz.4.176" [ 118.845863][ T133] [ 118.845863][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 118.845863][ T133] [ 118.891618][ T4498] loop4: detected capacity change from 0 to 512 [ 119.008861][ T4488] read_mapping_page failed! [ 119.087941][ T4488] ERROR: (device loop1): txCommit: [ 119.087941][ T4488] [ 119.202935][ T4498] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 119.310375][ T4498] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038 (0x7fffffff) [ 119.333700][ T27] audit: type=1800 audit(1721228036.848:23): pid=4487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.165" name="bus" dev="loop1" ino=7 res=0 errno=0 [ 119.422724][ T152] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.618405][ T4498] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.176: corrupted inode contents [ 119.648677][ T4498] EXT4-fs error (device loop4): ext4_dirty_inode:6072: inode #2: comm syz.4.176: mark_inode_dirty error [ 119.649179][ T3648] [ 119.649179][ T3648] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.649179][ T3648] [ 119.666475][ T4498] EXT4-fs error (device loop4): ext4_do_update_inode:5210: inode #2: comm syz.4.176: corrupted inode contents [ 119.689830][ T4498] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.176: mark_inode_dirty error [ 119.710141][ T3648] [ 119.710141][ T3648] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.710141][ T3648] [ 119.733719][ T133] [ 119.733719][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.733719][ T133] [ 119.744511][ T152] usb 4-1: Using ep0 maxpacket: 32 [ 119.753602][ T3553] [ 119.753602][ T3553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.753602][ T3553] [ 119.778901][ T3553] [ 119.778901][ T3553] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 119.778901][ T3553] [ 119.810112][ T3550] EXT4-fs (loop4): unmounting filesystem. [ 119.862031][ T152] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.887466][ T152] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.935702][ T152] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 119.971837][ T152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.063197][ T152] hub 4-1:4.0: USB hub found [ 120.161565][ T4517] overlayfs: failed to get inode (-116) [ 120.167466][ T4517] overlayfs: failed to get inode (-116) [ 120.173923][ T4517] overlayfs: failed to get inode (-116) [ 120.179619][ T4517] overlayfs: failed to get inode (-116) [ 120.272095][ T152] hub 4-1:4.0: 2 ports detected [ 120.482070][ T152] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 120.491682][ T152] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 120.622704][ T152] usb 4-1: USB disconnect, device number 5 [ 121.416617][ T4535] loop4: detected capacity change from 0 to 40427 [ 121.519245][ T4535] F2FS-fs (loop4): invalid crc value [ 121.747035][ T4535] F2FS-fs (loop4): Found nat_bits in checkpoint [ 122.204913][ T4535] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 122.680567][ T4561] loop1: detected capacity change from 0 to 128 [ 122.736744][ T4561] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.777349][ T4561] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038 (0x7fffffff) [ 123.111993][ T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 123.830788][ T4534] loop0: detected capacity change from 0 to 32768 [ 123.833000][ T3553] EXT4-fs (loop1): unmounting filesystem. [ 123.858146][ T4534] [ 123.858146][ T4534] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.858146][ T4534] [ 123.941936][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 123.986839][ T4534] [ 123.986839][ T4534] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 123.986839][ T4534] [ 124.003153][ T4534] [ 124.003153][ T4534] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.003153][ T4534] [ 124.043115][ T4534] [ 124.043115][ T4534] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.043115][ T4534] [ 124.061866][ T4534] [ 124.061866][ T4534] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.061866][ T4534] [ 124.061965][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 124.077780][ T133] [ 124.077780][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.077780][ T133] [ 124.083818][ T27] audit: type=1800 audit(1721228041.588:24): pid=4534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.188" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 124.144575][ T4580] overlayfs: failed to get inode (-116) [ 124.150295][ T4580] overlayfs: failed to get inode (-116) [ 124.156079][ T4580] overlayfs: failed to get inode (-116) [ 124.161821][ T4580] overlayfs: failed to get inode (-116) [ 124.202619][ T7] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 124.222243][ T4534] [ 124.222243][ T4534] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.222243][ T4534] [ 124.255801][ T4534] [ 124.255801][ T4534] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.255801][ T4534] [ 124.279161][ T27] audit: type=1800 audit(1721228041.698:25): pid=4579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.188" name="bus" dev="loop0" ino=7 res=0 errno=0 [ 124.305822][ T7] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 124.382066][ T4534] [ 124.382066][ T4534] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.382066][ T4534] [ 124.412085][ T7] usb 4-1: string descriptor 0 read error: -22 [ 124.446710][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.491023][ T4534] [ 124.491023][ T4534] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.491023][ T4534] [ 124.529788][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.602273][ T4534] [ 124.602273][ T4534] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.602273][ T4534] [ 124.618420][ T133] [ 124.618420][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.618420][ T133] [ 124.680673][ T4579] [ 124.680673][ T4579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.680673][ T4579] [ 124.735936][ T4579] [ 124.735936][ T4579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.735936][ T4579] [ 124.782096][ T4579] [ 124.782096][ T4579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.782096][ T4579] [ 124.794012][ T4579] [ 124.794012][ T4579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.794012][ T4579] [ 124.818726][ T4579] [ 124.818726][ T4579] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.818726][ T4579] [ 124.835916][ T133] [ 124.835916][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.835916][ T133] [ 124.846798][ T27] audit: type=1800 audit(1721228042.348:26): pid=4579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.188" name="file2" dev="loop0" ino=8 res=0 errno=0 [ 124.878809][ T3741] [ 124.878809][ T3741] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.878809][ T3741] [ 124.892302][ T3741] [ 124.892302][ T3741] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 124.892302][ T3741] [ 125.019307][ T133] ================================================================== [ 125.027398][ T133] BUG: KASAN: use-after-free in txEnd+0x350/0x560 [ 125.033842][ T133] Write of size 8 at addr ffff88807cc2c840 by task jfsCommit/133 [ 125.041556][ T133] [ 125.043881][ T133] CPU: 1 PID: 133 Comm: jfsCommit Not tainted 6.1.99-syzkaller #0 [ 125.051684][ T133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 125.061749][ T133] Call Trace: [ 125.065030][ T133] [ 125.067959][ T133] dump_stack_lvl+0x1e3/0x2cb [ 125.072655][ T133] ? nf_tcp_handle_invalid+0x642/0x642 [ 125.078130][ T133] ? panic+0x764/0x764 [ 125.082289][ T133] ? _printk+0xd1/0x111 [ 125.086456][ T133] ? __virt_addr_valid+0x17f/0x520 [ 125.091579][ T133] ? __virt_addr_valid+0x17f/0x520 [ 125.096700][ T133] print_report+0x15f/0x4f0 [ 125.101204][ T133] ? __virt_addr_valid+0x17f/0x520 [ 125.106318][ T133] ? __virt_addr_valid+0x17f/0x520 [ 125.111430][ T133] ? __virt_addr_valid+0x44a/0x520 [ 125.116549][ T133] ? __phys_addr+0xb6/0x170 [ 125.121063][ T133] ? txEnd+0x350/0x560 [ 125.125131][ T133] kasan_report+0x136/0x160 [ 125.129633][ T133] ? txEnd+0x350/0x560 [ 125.133710][ T133] kasan_check_range+0x27f/0x290 [ 125.138655][ T133] txEnd+0x350/0x560 [ 125.142552][ T133] jfs_lazycommit+0x610/0xb60 [ 125.147316][ T133] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 125.153313][ T133] ? lockdep_hardirqs_on+0x94/0x130 [ 125.158519][ T133] ? txFreelock+0x580/0x580 [ 125.163019][ T133] ? do_task_dead+0xd0/0xd0 [ 125.167525][ T133] ? _raw_spin_unlock+0x40/0x40 [ 125.172378][ T133] ? __kthread_parkme+0x168/0x1c0 [ 125.177410][ T133] kthread+0x28d/0x320 [ 125.181474][ T133] ? txFreelock+0x580/0x580 [ 125.185977][ T133] ? kthread_blkcg+0xd0/0xd0 [ 125.190564][ T133] ret_from_fork+0x1f/0x30 [ 125.194992][ T133] [ 125.198006][ T133] [ 125.200320][ T133] Allocated by task 4534: [ 125.204640][ T133] kasan_set_track+0x4b/0x70 [ 125.209240][ T133] __kasan_kmalloc+0x97/0xb0 [ 125.213836][ T133] lmLogOpen+0x314/0x1030 [ 125.218177][ T133] jfs_mount_rw+0xe3/0x640 [ 125.222599][ T133] jfs_fill_super+0x67d/0xc40 [ 125.227279][ T133] mount_bdev+0x2c9/0x3f0 [ 125.231619][ T133] legacy_get_tree+0xeb/0x180 [ 125.236302][ T133] vfs_get_tree+0x88/0x270 [ 125.240724][ T133] do_new_mount+0x2ba/0xb40 [ 125.245231][ T133] __se_sys_mount+0x2d5/0x3c0 [ 125.249914][ T133] do_syscall_64+0x3b/0xb0 [ 125.254335][ T133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.260236][ T133] [ 125.262556][ T133] Freed by task 3741: [ 125.266531][ T133] kasan_set_track+0x4b/0x70 [ 125.271126][ T133] kasan_save_free_info+0x27/0x40 [ 125.276150][ T133] ____kasan_slab_free+0xd6/0x120 [ 125.281180][ T133] __kmem_cache_free+0x25c/0x3c0 [ 125.286120][ T133] lmLogClose+0x29d/0x530 [ 125.290453][ T133] jfs_umount+0x298/0x370 [ 125.294785][ T133] jfs_put_super+0x86/0x180 [ 125.299295][ T133] generic_shutdown_super+0x130/0x340 [ 125.304675][ T133] kill_block_super+0x7a/0xe0 [ 125.309357][ T133] deactivate_locked_super+0xa0/0x110 [ 125.314727][ T133] cleanup_mnt+0x490/0x520 [ 125.319146][ T133] task_work_run+0x246/0x300 [ 125.323739][ T133] exit_to_user_mode_loop+0xde/0x100 [ 125.329022][ T133] exit_to_user_mode_prepare+0xb1/0x140 [ 125.334563][ T133] syscall_exit_to_user_mode+0x60/0x270 [ 125.340113][ T133] do_syscall_64+0x47/0xb0 [ 125.344538][ T133] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 125.350442][ T133] [ 125.352760][ T133] The buggy address belongs to the object at ffff88807cc2c800 [ 125.352760][ T133] which belongs to the cache kmalloc-1k of size 1024 [ 125.366813][ T133] The buggy address is located 64 bytes inside of [ 125.366813][ T133] 1024-byte region [ffff88807cc2c800, ffff88807cc2cc00) [ 125.380090][ T133] [ 125.382415][ T133] The buggy address belongs to the physical page: [ 125.388829][ T133] page:ffffea0001f30a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807cc2c000 pfn:0x7cc28 [ 125.400295][ T133] head:ffffea0001f30a00 order:3 compound_mapcount:0 compound_pincount:0 [ 125.408625][ T133] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 125.416616][ T133] raw: 00fff00000010200 ffffea0001f0c408 ffffea00016d9a08 ffff888012441dc0 [ 125.425201][ T133] raw: ffff88807cc2c000 0000000000100007 00000001ffffffff 0000000000000000 [ 125.433776][ T133] page dumped because: kasan: bad access detected [ 125.440192][ T133] page_owner tracks the page as allocated [ 125.445901][ T133] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 3648, tgid 3648 (kworker/u4:6), ts 64927762594, free_ts 64895927513 [ 125.466570][ T133] post_alloc_hook+0x18d/0x1b0 [ 125.471338][ T133] get_page_from_freelist+0x322e/0x33b0 [ 125.476885][ T133] __alloc_pages+0x28d/0x770 [ 125.481475][ T133] alloc_slab_page+0x6a/0x150 [ 125.486159][ T133] new_slab+0x84/0x2d0 [ 125.490235][ T133] ___slab_alloc+0xc20/0x1270 [ 125.494915][ T133] __kmem_cache_alloc_node+0x19f/0x260 [ 125.500379][ T133] __kmalloc+0xa1/0x230 [ 125.504537][ T133] ieee802_11_parse_elems_full+0xc4/0x1380 [ 125.510347][ T133] ieee80211_ibss_rx_queued_mgmt+0x430/0x2dd0 [ 125.516413][ T133] ieee80211_iface_work+0x7aa/0xce0 [ 125.521621][ T133] process_one_work+0x8a9/0x11d0 [ 125.526567][ T133] worker_thread+0xa47/0x1200 [ 125.531282][ T133] kthread+0x28d/0x320 [ 125.535351][ T133] ret_from_fork+0x1f/0x30 [ 125.539786][ T133] page last free stack trace: [ 125.544455][ T133] free_unref_page_prepare+0xf63/0x1120 [ 125.550002][ T133] free_unref_page+0x33/0x3e0 [ 125.554681][ T133] __unfreeze_partials+0x1b7/0x210 [ 125.559798][ T133] put_cpu_partial+0x17b/0x250 [ 125.564566][ T133] qlist_free_all+0x76/0xe0 [ 125.569072][ T133] kasan_quarantine_reduce+0x156/0x170 [ 125.574533][ T133] __kasan_slab_alloc+0x1f/0x70 [ 125.579384][ T133] slab_post_alloc_hook+0x52/0x3a0 [ 125.584498][ T133] __kmem_cache_alloc_node+0x137/0x260 [ 125.589958][ T133] kmalloc_trace+0x26/0xe0 [ 125.594392][ T133] nsim_fib_event_work+0x19be/0x4120 [ 125.599683][ T133] process_one_work+0x8a9/0x11d0 [ 125.604632][ T133] worker_thread+0xd04/0x1200 [ 125.609310][ T133] kthread+0x28d/0x320 [ 125.613377][ T133] ret_from_fork+0x1f/0x30 [ 125.617804][ T133] [ 125.620125][ T133] Memory state around the buggy address: [ 125.625748][ T133] ffff88807cc2c700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 125.633807][ T133] ffff88807cc2c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 125.641865][ T133] >ffff88807cc2c800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.649918][ T133] ^ [ 125.656055][ T133] ffff88807cc2c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.664098][ T133] ffff88807cc2c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.672135][ T133] ================================================================== [ 125.680220][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.694127][ T133] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 125.701332][ T133] CPU: 0 PID: 133 Comm: jfsCommit Not tainted 6.1.99-syzkaller #0 [ 125.709133][ T133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 125.719356][ T133] Call Trace: [ 125.722635][ T133] [ 125.725564][ T133] dump_stack_lvl+0x1e3/0x2cb [ 125.730251][ T133] ? nf_tcp_handle_invalid+0x642/0x642 [ 125.735720][ T133] ? panic+0x764/0x764 [ 125.739777][ T133] ? vscnprintf+0x59/0x80 [ 125.744267][ T133] panic+0x318/0x764 [ 125.748145][ T133] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 125.754290][ T133] ? check_panic_on_warn+0x1d/0xa0 [ 125.759388][ T133] ? memcpy_page_flushcache+0xfc/0xfc [ 125.764745][ T133] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 125.770716][ T133] ? _raw_spin_unlock+0x40/0x40 [ 125.775561][ T133] check_panic_on_warn+0x7e/0xa0 [ 125.780483][ T133] ? txEnd+0x350/0x560 [ 125.784531][ T133] end_report+0x66/0x110 [ 125.788755][ T133] kasan_report+0x143/0x160 [ 125.793240][ T133] ? txEnd+0x350/0x560 [ 125.797290][ T133] kasan_check_range+0x27f/0x290 [ 125.802210][ T133] txEnd+0x350/0x560 [ 125.806089][ T133] jfs_lazycommit+0x610/0xb60 [ 125.810745][ T133] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 125.816623][ T133] ? lockdep_hardirqs_on+0x94/0x130 [ 125.821806][ T133] ? txFreelock+0x580/0x580 [ 125.826288][ T133] ? do_task_dead+0xd0/0xd0 [ 125.830776][ T133] ? _raw_spin_unlock+0x40/0x40 [ 125.835610][ T133] ? __kthread_parkme+0x168/0x1c0 [ 125.840625][ T133] kthread+0x28d/0x320 [ 125.844672][ T133] ? txFreelock+0x580/0x580 [ 125.849156][ T133] ? kthread_blkcg+0xd0/0xd0 [ 125.853724][ T133] ret_from_fork+0x1f/0x30 [ 125.858130][ T133] [ 125.861361][ T133] Kernel Offset: disabled [ 125.865672][ T133] Rebooting in 86400 seconds..