last executing test programs: 1m45.653176234s ago: executing program 4 (id=158): shmat(0x0, &(0x7f0000ffa000/0x3000)=nil, 0x400c) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000040)=""/222) 1m44.766654232s ago: executing program 4 (id=161): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x4c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1m43.113478367s ago: executing program 4 (id=163): socket$inet_udp(0x2, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001700), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000300)=r0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000000280)=0x2e55, 0x4) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x5600, 0xa, 0x8) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000004100)={0x2020}, 0x2020) 1m41.152001588s ago: executing program 4 (id=168): syz_mount_image$squashfs(&(0x7f0000000740), &(0x7f0000000280)='./file1\x00', 0x400, &(0x7f0000000500)=ANY=[], 0x29, 0x20e, &(0x7f0000000780)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 1m37.065012103s ago: executing program 4 (id=174): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file1\x00', 0x2a18c46, &(0x7f00000011c0)={[{@fat=@gid}, {@uni_xlateno}, {@fat=@flush}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@shortname_win95}, {@shortname_lower}, {@shortname_mixed}, {@rodir}, {@rodir}, {@shortname_win95}]}, 0x7f, 0x2c1, &(0x7f0000001880)="$eJzs3b2KY2UYAOD3ZJKZZBWSwkoED2hhFXb3CibICIuplFNoo4s7C5KEhQkE/MHsVvaClZU3YOcFeAE23oGFpWLnFuKR5OTkP7MbycwO8jzNeXO+7z3fz3xkhkDe+fi1Qe/Bo+HDJ1/+GvV6EpXTOI2nSbSiEqXHsUt9ZwsAcHM9zfP4My88q+/xyqtq5SrnBQBcnef+/X90bVMCAK7Y+x98+G6n2z17L03rEYOvR1kSxbVo7zyMT6Mf53E7mvF3RD5XxC/f655FM03LDwNGjcgiBh/9PHvd+T1imn8nmtFazy8/UUin4s3BeJRNRp5ca3EriejkSdHlbjTjlYi8FrOHFJd37nXP7qab+ZEdx1tvfDeb/z/n0Y5m/PJJPIp+PJg+YpH/1Z00fTv/9q8vihVkEcl4lJ1M+y3k/gICAAAAAAAAAAAAAAAAAAAAAOBg2ulca7l+TlkNsN1eb69mEX8MyvxFfaDTmNYHmlX4GS/V17mdpmlZxmeU1aKo71ONV6tRfVHrBgAAAAAAAAAAAAAAAAAAgJtk+Nnnvfv9/vnFSvBTPgkal/ZZD6pLd8qv9T87a3vQ+yFifuf72Df9kiCOZlPrJ0tDFEFSNu3xwB93NJ3sM7HGtkGjsmsPq/0oJv/N/pvw+r4LfP6gtZhqebp695OY7/zj2e6uZtW3H5KlU1cew4thsseBzLds3VER3NrMOj7QJhy/9F/TG7GtabLi2nwzV7Pqa5tZO+zPdP2dIjnsGw8AAAAAAAAAAAAAAAAAALBh8aXf+G2j8ckLmRIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXLvF//+fB9Fav7MejGfJ0zuVyzufXAy3DNu65mUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP/dvAAAA//+PLU+w") syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) 1m36.013048185s ago: executing program 1 (id=176): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000280)={[{@errors_remount}, {@block_validity}]}, 0x3, 0xbaf, &(0x7f0000002f00)="$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") syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2, &(0x7f0000000740), 0x7, 0x4f5, &(0x7f0000000800)="$eJzs3E9sFFUcAODfbLe0hSIVEaWiFtHYaGyhoHAwMRhNPGhixIMem7YQZKGmrYkQAkti8GhIvBrj0asHr2q8GE4mXvFoYkiI4QJ4WjO7s+12O136Z9tK+33Jsu/NvJn33r55s2/eYxvAljWQ/pNE9EbEzYjYFRGF5gQDtbd7dy6N3b9zaSzKlcrJf5L0sLibxjNJ9r4jiwwWIgpfJHM7GkxfuHh2tFSamMriwzPnPh2evnDxlTPnRk9PnJ44P3L8+NEjh4+9NvLq8iuVk19ar7v9lyf373vn4+vvjRXr27uz98Z6tMtADOQVpeqFdme2wXY2hJNiq5RvrH1hWLL0+k+bq7Pa/3dFR7RsPGATqVQqla4s3Llwd7nS7OqCLcBDK4mNLgGwMepf9Onzb/2VN07YtnZDkA11+0TtASit973sFfFsdWN9HqSz6fm2nQaiGB+V//02faXx4hrMQwAANPr5RH0k2DT+64vY25DukWwNpS8iHo2I3RHxWETsiYjHo5b2iYh4sun8HRFRaZH/QFN84fizcGt1NWwtHf+9nq1tzY3/onEVrK8ji+2MqA+YJw5ln8lgdHadOlOaONwij1/e+uOrxfal9a+P/9JXmn99LJiV41axa/4x46MzoyuucJPbVyP6i831T4oRyexKQBIR+yKi/9dvlnzevobwmZe+3z8baZpkfHD9qyq562htWKqofBfxYq39yzGv/edyTFqvTw53R2ni0HB6FRzKzePG79fez9ueLKX+P/7VfNjbx346mfWs1Uvbf3vD9R/19du5+vclEcnseu30Iie6snge1/78ctFnmpVe/9uSD3ui4bn089GZmanDEduSd2PB9pHZZd56vPoe5Vr9Bw/m9//d2THpJ/FURKQX8dMR8UzUnhAHonLlQEQ8FxEHF69+/Pbm85+svP5rK63/eO79b177z63Xp4F069S8LaOlpFxLPbdlNtBx9sDN+/35+S+t/Y9WQ4PZlvz7XzLvFrGwFPmBVX58AAAA8FAoRERvw1xSbxQKQ0O1OaA9sb1QmpyeeTmZ/Oz8eO03An0NaWvzwZ1Jff6zryE+0hQ/ks0bf93RU40PjU2WxjeozkDNjmqfTwpDs/eCWv9P/d2eKWbg/8xPfmDrelD/33t9nQoCrDvf/7BVTV1uiJQXSVT2P2Vgc1rK97+5QNic8vp/i//P7YEBNomK7gxb2nL6//y0N3a1vTDAuirGB7PhwoaWBFhvxv+wJS3pR/IrDlS68nd1x8LE0d36hB2xsmL05OS1IYF0ZLXK89RbbXlH9eTuKrY+qv7XFBZNE4XlFb5r7k9GJKtp01Orb4vTe9t98XdWsvWxdl82P6xJP31g454dLbW+b4z0tv1WBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsCb+CwAA//+0FNMg") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) open(&(0x7f0000000300)='.\x00', 0x101000, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000ac0)=0x48000) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) userfaultfd(0x80001) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) r6 = dup(0xffffffffffffffff) sendmsg$nl_netfilter(r6, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008045) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 1m30.03605324s ago: executing program 1 (id=182): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000a1c000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000b17000/0x2000)=nil) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}, 0x2000c8d0) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa04009078010000004700000000000000001100000000000000000000440c0001ac1414bb4e210000443c0001e0000001000000000000000000000000ac1414000bdf000000000000000000000000000000000000ac1e000100000000ac141400000000008864301a46783332030c846a5a"], 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x2e, 0x5f, 0x30, 0x841df97cf26f7de9]}}, &(0x7f0000000100)=""/189, 0x2e, 0xbd, 0x1}, 0x28) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) pwritev2(r5, &(0x7f0000000440)=[{&(0x7f00000002c0)="696489f0000000000000", 0xa}, {&(0x7f0000000380)="b11f975220", 0x5}], 0x2, 0xe331, 0x200, 0x4) 1m29.849201794s ago: executing program 4 (id=184): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 1m29.294663045s ago: executing program 32 (id=184): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 1m28.875897264s ago: executing program 1 (id=188): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f000015ee00)={&(0x7f000015ecc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f000015edc0)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) recvmsg(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x10060) 1m28.521178381s ago: executing program 1 (id=189): socket$inet_udp(0x2, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001700), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000300)=r0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r5, r1, &(0x7f0000000100)=0x3, 0x5) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000000280)=0x2e55, 0x4) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x5600, 0xa, 0x8) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000004100)={0x2020}, 0x2020) 1m25.297668309s ago: executing program 1 (id=193): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) lsetxattr$security_capability(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121500, 0x20) fchown(r0, 0xffffffffffffffff, 0x0) 1m23.769104461s ago: executing program 1 (id=195): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x7e832, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='smaps\x00') r1 = memfd_create(&(0x7f0000000240)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\x80\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\xaf\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda`\xcd>\xef\xed\xe0\xfc\x8fm\xa1.\xd1\xb2I\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x004\xb0q\x85\x18\xf4\x89P8\xd3\x9e\x14\x80G>\x1a8\xb5\xa6D\xda\xa2g\xb8\xe6\xbd\t\xff_Y\xaft\xadR\xe1z\xfd\x95\x1f^\xd3E\xe64\x85\xf1\xeb\xa1\x84\x04\x14\r\xb8*\x18\xfb\xc6\x8b\xeb]6\xf7\xbc\x05x\x1c\xe9C\xa0\x9e\xed\xbd\x9d\x1ar\xa00\xe5\x8a\x9ce\x10\xa6\xfc1\xb7\xc1Q\xf1\xa9@\xc5\x1e\xff\xb1\x8d\xdf\x12\x1e\xfb\xde\x8b\x17\x1a)\'?R\xd4\x8f\xd9\x8e\\z\xf3o\x01>\xaa\x17^Mg]|\xf8mw\xbd)S\x16\xa6\x8c\xea\x8d0;4\xab\x0e$\x15h4\xe1\x9e\xc5O0\xb2\x11\xc5B\xee\x9f\xe0\xc7\x8a\x91\xadeo\xcc\x8a\xc6\xcc\v\xb4\xdf\xc4\x00\xaf\x94\t?`\xdbg\x8c\xef\xed\xe0\xfc\x8fm\xa1.\xd1\xb2I\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x004\xb0q\x85\x18\xf4\x89P8\xd3\x9e\x14\x80G>\x1a8\xb5\xa6D\xda\xa2g\xb8\xe6\xbd\t\xff_Y\xaft\xadR\xe1z\xfd\x95\x1f^\xd3E\xe64\x85\xf1\xeb\xa1\x84\x04\x14\r\xb8*\x18\xfb\xc6\x8b\xeb]6\xf7\xbc\x05x\x1c\xe9C\xa0\x9e\xed\xbd\x9d\x1ar\xa00\xe5\x8a\x9ce\x10\xa6\xfc1\xb7\xc1Q\xf1\xa9@\xc5\x1e\xff\xb1\x8d\xdf\x12\x1e\xfb\xde\x8b\x17\x1a)\'?R\xd4\x8f\xd9\x8e\\z\xf3o\x01>\xaa\x17^Mg]|\xf8mw\xbd)S\x16\xa6\x8c\xea\x8d0;4\xab\x0e$\x15h4\xe1\x9e\xc5O0\xb2\x11\xc5B\xee\x9f\xe0\xc7\x8a\x91\xadeo\xcc\x8a\xc6\xcc\v\xb4\xdf\xc4\x00\xaf\x94\t?`\xdbg\x8c0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x48000) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 15.632436943s ago: executing program 5 (id=328): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x0, 0x1e9, &(0x7f00000001c0)="$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") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b000000000000"], 0x50) socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@noquota}, {@debug}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0xffffffff, 0x80, 0xfffffffe, 0x3, 0x10007e, 0x20000006, 0x50, 0x6, 0x10000, 0x80005, 0x2, 0x8, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x10001, 0x8, 0x4c74, 0xff0, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xff7ffff3, 0x2, 0xc8, 0xf9, 0x9, 0x7, 0x6c7, 0x9, 0x2, 0x1000003, 0x1, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x8101, 0x1, 0xeaf, 0xffff80f1, 0x1, 0x206, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x40000009, 0x5, 0x7fff, 0x0, 0x5, 0xc303, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x8001, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x8005, 0xd, 0x800003, 0x200, 0x400080, 0xffffffff, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x1000ac8, 0xc1, 0x2, 0x1000003, 0x7ff, 0x129, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0x5, 0xcef, 0x1ff, 0x200, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0xff, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0xb77, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000200)='./file0\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x101000, 0x0) openat(r3, 0x0, 0x521000, 0x5) 15.124226794s ago: executing program 3 (id=329): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000300)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f00005c2000/0x2000)=nil, 0x2000, 0x27ffff7, 0x4012011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000440)={0xa, 0x7, 0x5, 0x7f, 0x1, 0x0, [{0x100, 0x8, 0xaf, '\x00', 0x1200}]}) 14.421298558s ago: executing program 0 (id=330): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000280)={[{@errors_remount}, {@block_validity}]}, 0x3, 0xbaf, &(0x7f0000002f00)="$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") syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2, &(0x7f0000000740), 0x7, 0x4f5, &(0x7f0000000800)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) open(&(0x7f0000000300)='.\x00', 0x101000, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000ac0)=0x48000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) userfaultfd(0x80001) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) r6 = dup(0xffffffffffffffff) sendmsg$nl_netfilter(r6, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008045) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 14.420578558s ago: executing program 5 (id=331): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x184}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x800, 0x1c, 0x2, 0x0, 0x8}) 14.404834999s ago: executing program 2 (id=332): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a0}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x11}, @empty}}}], 0x20}}], 0x1, 0x8000004) 14.085064056s ago: executing program 3 (id=333): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf4e) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x2, 0xfffffffffffffffa}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 14.084827356s ago: executing program 5 (id=334): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0xee) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000100)={0x28}, 0x28) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109042, 0x23) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 12.660706285s ago: executing program 2 (id=335): socket$inet_udp(0x2, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001700), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000300)=r0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendfile(r4, r1, &(0x7f0000000100)=0x3, 0x5) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000280)=0x2e55, 0x4) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x5600, 0xa, 0x8) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) 12.613957786s ago: executing program 3 (id=336): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x79a0, 0x4) sendto(r0, &(0x7f00000003c0)="cec17299253d97363be011fae774c95eff3d8fd74ca2974f22ee90adb120661dae2d9d1a15e80b3f", 0x28, 0x20008804, 0x0, 0x0) 12.471446559s ago: executing program 6 (id=226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xfff1, 0xffff}, {0x0, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {0x0, 0xc}, {0x8}}}, 0x24}}, 0x40004) 12.129302756s ago: executing program 0 (id=337): socket$inet_udp(0x2, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000300)=r0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendfile(r4, r1, &(0x7f0000000100)=0x3, 0x5) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000280)=0x2e55, 0x4) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x5600, 0xa, 0x8) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) 11.544768789s ago: executing program 3 (id=338): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mremap(&(0x7f0000a1c000/0x2000)=nil, 0x2000, 0x2000, 0x2, &(0x7f0000b17000/0x2000)=nil) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}, 0x2000c8d0) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500007800000000000190780a010102ac1414aa04009078010000004700000000000000001100000000000000000000440c0001ac1414bb4e210000443c0001e0000001000000000000000000000000ac1414000bdf000000000000000000000000000000000000ac1e000100000000ac141400000000008864301a46783332030c846a5a"], 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x80, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x2e, 0x5f, 0x30, 0x841df97cf26f7de9]}}, &(0x7f0000000100)=""/189, 0x2e, 0xbd, 0x1}, 0x28) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000f40)={'pimreg\x00', 0x6002}) pwritev2(r5, &(0x7f0000000440)=[{&(0x7f00000002c0)="696489f0000000000000", 0xa}, {&(0x7f0000000380)="b11f975220", 0x5}], 0x2, 0xe331, 0x200, 0x4) 11.372992092s ago: executing program 2 (id=339): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@nombcache}, {@data_err_ignore}]}, 0xfe, 0x55b, &(0x7f0000000980)="$eJzs3c9vFFUcAPDvbFt+FaUkhKgH04SDGGRLW39g4gGPRokkesdNOzSkW5Z0t4RWEuEgFy+GmBgjifEP8O6R+A/4V5AoCTGk0YOXNbOdhaXdH6UsdGU/n2TgvXmzvHkz8328t283G8DQmsz+KES8GhHfJhGHWspGIy+c3Dhu/cG1uWxLol7/7K8kknxf8/gk/3s8z7wSEb99HXGisLXe6uraYqlcTpfz/FRt6fJUdXXt5MWl0kK6kF6amZ09/c7szPvvvbv1xXt31tY3z/3zw6d3Pjr9zbH173+5d/hWEmfiYF7W2o6ncL01MxmT+TUZizObDpzuQ2WDJNntE2BHRvI4H4usDzgUI3nUAy++ryKiDgypRPzDkGqOA5pz+67z4PqLN8u7/+HGBGhr+5ON90ZiX2NudGA9eWxmlF2JiT7Un9Xx65+3b2Vb9O99CICert+IiFOjo4/1fy9HS/+3c6e2cczmOvR/8PzcycY/b+1tM/4pPBz/RJvxz3ib2N2J3vFfuNeHajrKxn8ftB3/Ply0mhjJcy81xnxjyYWL5TTr27Ju8niM7c3y3dZzTq/frXcqax3/ZVtWf3MsmJ/HvdFN613zpVrpadrc6v6NiNd6jH+TNvc/ux7ntlnH0fT2653Kerf/2ar/HPFG2/v/aK6TdF+fnGo8D1PNp2Krv28e/b1T/bvd/uz+H+je/omkdb22+uR1/LTv37RT2WSSL5o+4fO/J/m8kd6T77taqtWWpyP2JJ9s3T/z6LXNfPP4rP3Hj7WP/27P//6I+GKb7b955GbHQwfh/s8/0f3vkKgnHYvufvzlj53q317/93YjdTzfs53+r8uZPpZ4mmsHAAAAAAAAg6YQEQcjKRQfpguFYnHj8x1H4kChXKnWTlyorFyaj8Z3ZSdirNBc6R5v+TzEdP552GZ+ZlN+NiIOR8R3I/sb+eJcpTy/240HAAAAAAAAAAAAAAAAAACAATHe4fv/mT9GdvvsgGfOT37D8OoZ//34pSdgIPn/H4aX+IfhJf5heIl/GF7iH4aX+IfhJf5heIl/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KtzZ89mW339wbW5LD9/ZXVlsXLl5HxaXSwurcwV5yrLl4sLlcpCOS3OVZZ6/XvlSuXy9EysXJ2qpUltqrq6dn6psnKpdv7iUmkhPZ+OPZdWAQAAAAAAAAAAAAAAAAAAwP9LdXVtsVQup8sSEjtKjA7GaUj0ObHbPRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPJfAAAA//9j0zaD") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) fallocate(r1, 0x10, 0x800, 0x8000) 11.372741222s ago: executing program 5 (id=340): getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x5c, r1, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @action={{{}, {0x8}, @broadcast, @device_a, @initial, {0x0, 0x400}}, @sp_mp_open={0xf, 0x1, {0x4, {}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x0, 0x0, {0x2, 0x1ffc, 0x0, 0x3, 0x0, 0x1, 0x0, 0x3, 0x1}, 0x1, 0x5, 0x5}}}}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 9.413206963s ago: executing program 0 (id=341): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/14, 0xe}], 0x27, 0x0, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) fsopen(0x0, 0x0) 9.221046947s ago: executing program 5 (id=342): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x0, 0x1e9, &(0x7f00000001c0)="$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") syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b000000000000"], 0x50) socket$packet(0x11, 0x3, 0x300) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000000)={[{@noquota}, {@debug}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x4d7, &(0x7f0000001480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0xffffffff, 0x80, 0xfffffffe, 0x3, 0x10007e, 0x20000006, 0x50, 0x6, 0x10000, 0x80005, 0x2, 0x8, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x4, 0x7, 0x10001, 0x8, 0x4c74, 0xff0, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0xff7ffff3, 0x2, 0xc8, 0xf9, 0x9, 0x7, 0x6c7, 0x9, 0x2, 0x1000003, 0x1, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x4400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x8101, 0x1, 0xeaf, 0xffff80f1, 0x1, 0x206, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x40000009, 0x5, 0x7fff, 0x0, 0x5, 0xc303, 0x4, 0x6, 0x5, 0x5, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x8001, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x8005, 0xd, 0x800003, 0x200, 0x400080, 0xffffffff, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0x1000ac8, 0xc1, 0x2, 0x1000003, 0x7ff, 0x129, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0x40bb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x0, 0x5, 0xcef, 0x1ff, 0x200, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffe, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0xff, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0xb77, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000200)='./file0\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x101000, 0x0) openat(r3, 0x0, 0x521000, 0x5) 9.220905907s ago: executing program 3 (id=343): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x1410, 0x1, 0x70bd29, 0x25dfdc01, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0xc0) 9.178492148s ago: executing program 3 (id=344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a0}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r4) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x11}, @empty}}}], 0x20}}], 0x1, 0x8000004) 9.149594789s ago: executing program 6 (id=345): syz_usb_disconnect(0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_all\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) 8.969226802s ago: executing program 0 (id=346): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r2, @ANYBLOB="050000000001ff0000004400000008000300", @ANYRES32=r3, @ANYBLOB="1400238005001d000000000008001700020000000400bf0008006b00010100004400238008001c00010000000600030036"], 0xc8}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000840) 8.803596126s ago: executing program 2 (id=347): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000280)={[{@errors_remount}, {@block_validity}]}, 0x3, 0xbaf, &(0x7f0000002f00)="$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") syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2, &(0x7f0000000740), 0x7, 0x4f5, &(0x7f0000000800)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) open(&(0x7f0000000300)='.\x00', 0x101000, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000ac0)=0x48000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) userfaultfd(0x80001) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r5, 0x118, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) r6 = dup(0xffffffffffffffff) sendmsg$nl_netfilter(r6, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="7c0100001009010329bd7000fddbdf250300000ab900a0800400198008001e00000000000c004100670e000000000000008867c72f239bc85208a310ec0fcdc24bfdce6cb0723f526c01fc0b5458bae917cd1edec040acb53f6555cbced2e4cfbb29b8bfceab4928309046578a37a9f3433710c1344478ce7b3055fee3de4412644bc424a7a14136b8b675bcde36c0cb113996a72e182746232bdc99f6a2ae9a11f4eb304598668dfba7c62bc81f3db532bc3e8bcd5afb8636c16119d7ab9b698a28571d4dfb41c9754242ccc0000000d672caa0e1d75e66b45ebdb5dac76022d6ee1e00fa8d09d3068281842882dd01e172bf2e80e4d3eff03b4d3a2f1cdf629c568c815d83a96556b071b0eefcdf114ba77cce391e1b739330f9d4add9996a29117044b08f2d561b6fb575ccf39549b7b9dc1fec72d050dfff1d44cb78c78a098418b27881704148e32e8d1cde8a0a7bceb533012d491268493fcb39ee0c43c2a54341c1368f667ad8be157dde63fabed8d85059745a45900000001199e4d84e20630e032407254c6578367ed93b4e1eaf7ab709aade8ec142310d05e1641e04e13c45bcd081bba6ac3094dce7f710"], 0x17c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008045) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 8.768102067s ago: executing program 0 (id=348): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000700)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="345eca85835bc96c2dce6d616e676c65000000000000000800000000000000000000000000000000000000000000c06526c1b21b0c3dc84442dd379b52dbc3243c77fa"], 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xa, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendfile(r0, r0, 0x0, 0x1000000000007) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) 2.85493676s ago: executing program 6 (id=349): socket$inet_udp(0x2, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001700), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000300)=r0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendfile(r4, r1, &(0x7f0000000100)=0x3, 0x5) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000280)=0x2e55, 0x4) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x5600, 0xa, 0x8) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) 2.580730766s ago: executing program 5 (id=350): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') 2.548485117s ago: executing program 2 (id=351): socket$inet_udp(0x2, 0x2, 0x0) pipe2$watch_queue(&(0x7f0000000000), 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x81) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001700), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000300)=r0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000) sendfile(r4, r1, &(0x7f0000000100)=0x3, 0x5) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x7, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000280)=0x2e55, 0x4) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x5600, 0xa, 0x8) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/devices\x00', 0x0, 0x0) 182.33µs ago: executing program 6 (id=352): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup(r1, &(0x7f0000000700)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x9, 0x12) 0s ago: executing program 2 (id=353): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000540)=[@increfs], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 57.305888][ T4171] cgroup: Unknown subsys name 'net' [ 57.415561][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.941099][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 60.338030][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 60.391678][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 60.406577][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 60.492099][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 60.548832][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.556319][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.564737][ T4193] device bridge_slave_0 entered promiscuous mode [ 60.579419][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.586924][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.595634][ T4193] device bridge_slave_1 entered promiscuous mode [ 60.603226][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 60.655336][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.662524][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.671368][ T4195] device bridge_slave_0 entered promiscuous mode [ 60.683655][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.691069][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.698849][ T4192] device bridge_slave_0 entered promiscuous mode [ 60.715333][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.724807][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.732237][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.740543][ T4195] device bridge_slave_1 entered promiscuous mode [ 60.754101][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.762091][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.770503][ T4192] device bridge_slave_1 entered promiscuous mode [ 60.783787][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.835938][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.843303][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.851347][ T4186] device bridge_slave_0 entered promiscuous mode [ 60.871524][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.882685][ T4193] team0: Port device team_slave_0 added [ 60.891133][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.900372][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.907452][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.918486][ T4186] device bridge_slave_1 entered promiscuous mode [ 60.929426][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.939974][ T4193] team0: Port device team_slave_1 added [ 60.947697][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.987880][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.995327][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.003982][ T4187] device bridge_slave_0 entered promiscuous mode [ 61.031226][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.046540][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.053800][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.062040][ T4187] device bridge_slave_1 entered promiscuous mode [ 61.082575][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.094996][ T4192] team0: Port device team_slave_0 added [ 61.102256][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.109225][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.135663][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.157214][ T4195] team0: Port device team_slave_0 added [ 61.165837][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.181444][ T4192] team0: Port device team_slave_1 added [ 61.193796][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.201605][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.227857][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.240139][ T4195] team0: Port device team_slave_1 added [ 61.247704][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.259077][ T4186] team0: Port device team_slave_0 added [ 61.274265][ T4186] team0: Port device team_slave_1 added [ 61.333980][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.341098][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.368418][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.382594][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.389898][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.416495][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.430365][ T4187] team0: Port device team_slave_0 added [ 61.438076][ T4187] team0: Port device team_slave_1 added [ 61.444403][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.452111][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.478204][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.490160][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.497216][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.524100][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.536261][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.543926][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.570476][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.597021][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.604361][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.630918][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.653282][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.660545][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.687140][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.721445][ T4193] device hsr_slave_0 entered promiscuous mode [ 61.728463][ T4193] device hsr_slave_1 entered promiscuous mode [ 61.744283][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.751714][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.778265][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.833165][ T4192] device hsr_slave_0 entered promiscuous mode [ 61.840459][ T4192] device hsr_slave_1 entered promiscuous mode [ 61.847081][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.855127][ T4192] Cannot create hsr debugfs directory [ 61.868852][ T4186] device hsr_slave_0 entered promiscuous mode [ 61.876490][ T4186] device hsr_slave_1 entered promiscuous mode [ 61.883368][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.891082][ T4186] Cannot create hsr debugfs directory [ 61.900390][ T4195] device hsr_slave_0 entered promiscuous mode [ 61.907152][ T4195] device hsr_slave_1 entered promiscuous mode [ 61.914597][ T4195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.922646][ T4195] Cannot create hsr debugfs directory [ 61.938430][ T4187] device hsr_slave_0 entered promiscuous mode [ 61.945891][ T4187] device hsr_slave_1 entered promiscuous mode [ 61.952880][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.960502][ T4187] Cannot create hsr debugfs directory [ 62.080489][ T1111] Bluetooth: hci0: command 0x0409 tx timeout [ 62.087398][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 62.100368][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 62.106491][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 62.113542][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 62.324960][ T4186] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.342865][ T4186] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.353972][ T4186] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.368330][ T4186] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.403168][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.412098][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.435092][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.465657][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.478237][ T4193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.504020][ T4193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.514113][ T4193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 62.528091][ T4193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 62.601660][ T4195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.620459][ T4195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.629264][ T4195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.664066][ T4195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.684220][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.720678][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.743622][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.752818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 62.763150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.777002][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.786129][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.797111][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.826458][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.838883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 62.848160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.859086][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.866640][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.875883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 62.918737][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.948019][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 62.958175][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.967275][ T1238] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.974487][ T1238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.983233][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 62.992372][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.001140][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.019252][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.036614][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.050974][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.061453][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.071773][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.080766][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.088546][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.100516][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.109042][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.118020][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.127119][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.135923][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.145129][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.166597][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.176554][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.198326][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.207123][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.223911][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.237032][ T1238] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.244281][ T1238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.254465][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.263242][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.272541][ T1238] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.280296][ T1238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.290706][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.299583][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.308183][ T1238] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.315252][ T1238] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.323402][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.331843][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.349495][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.359181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.368333][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.375720][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.387155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.403103][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.415909][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.453771][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.463553][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.480596][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.489574][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.504593][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.526404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.538330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.547351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 63.557281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.566444][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.573683][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.583134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.592212][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.601194][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 63.611523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.621024][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.628200][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.635976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.645690][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 63.654484][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 63.663447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.672388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 63.680991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 63.695939][ T4193] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.706622][ T4193] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.734249][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.743318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.752849][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.762222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.771045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 63.780835][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 63.789253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 63.798339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.807523][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.826602][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.839314][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.852046][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 63.865178][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.872972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.881701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 63.893481][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 63.901281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.908936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 63.918230][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.957444][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.978385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 63.989623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.001881][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.012229][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.021060][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.028133][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.036507][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.046019][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.055053][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.062190][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.070303][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.079357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.113055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.121862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.137098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.147155][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.160393][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 64.166680][ T4234] Bluetooth: hci4: command 0x041b tx timeout [ 64.173908][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.176357][ T4234] Bluetooth: hci3: command 0x041b tx timeout [ 64.190256][ T4234] Bluetooth: hci2: command 0x041b tx timeout [ 64.194050][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.204073][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 64.222778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.231869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.240313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.251483][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.260416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.269063][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.278142][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.286970][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.298122][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.334520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.344387][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.355799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.364752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.372702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.383139][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.394002][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.403618][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.413559][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.423157][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.433660][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.473842][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.512907][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.530678][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.550309][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.567236][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.602233][ T4186] device veth0_vlan entered promiscuous mode [ 64.619373][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.629277][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.644639][ T4193] device veth0_vlan entered promiscuous mode [ 64.664017][ T4186] device veth1_vlan entered promiscuous mode [ 64.674554][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.683814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.693132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.702373][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.711479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.724726][ T4193] device veth1_vlan entered promiscuous mode [ 64.736876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 64.747424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.755748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.782101][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.828885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.837549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 64.846688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 64.857252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 64.866350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 64.875133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 64.884541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 64.894734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 64.908606][ T4186] device veth0_macvtap entered promiscuous mode [ 64.921165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 64.933164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 64.941866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 64.954699][ T4186] device veth1_macvtap entered promiscuous mode [ 64.966244][ T4187] device veth0_vlan entered promiscuous mode [ 64.995247][ T4187] device veth1_vlan entered promiscuous mode [ 65.016673][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.027846][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.037779][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.048208][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 65.057641][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.065685][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.073551][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.081478][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.091844][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.100978][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.111243][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.120407][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.128935][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.138198][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.147263][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.167293][ T4193] device veth0_macvtap entered promiscuous mode [ 65.177722][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.187949][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.196901][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.206078][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.232485][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.246095][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.256551][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.267551][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.278034][ T4193] device veth1_macvtap entered promiscuous mode [ 65.303381][ T4195] device veth0_vlan entered promiscuous mode [ 65.312462][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 65.323207][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.332361][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.355270][ T4187] device veth0_macvtap entered promiscuous mode [ 65.375483][ T4195] device veth1_vlan entered promiscuous mode [ 65.387791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 65.398253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.407930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.432307][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.452576][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.468107][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.479016][ T4187] device veth1_macvtap entered promiscuous mode [ 65.489509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.498005][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.507159][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.531278][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.543645][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.555163][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.577479][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.591886][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.602687][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.613510][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.625223][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.644551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.654275][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.663220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 65.673400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 65.686303][ T4193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.700762][ T4193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.709501][ T4193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.718613][ T4193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.770876][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.783741][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.794080][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.806047][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.817245][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.830178][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.838920][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.847996][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.859119][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.874758][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.894925][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.917334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.926906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.936411][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.944917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.954954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.963903][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.972715][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.989089][ T4195] device veth0_macvtap entered promiscuous mode [ 66.028533][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.038668][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.046609][ T4195] device veth1_macvtap entered promiscuous mode [ 66.074974][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.084598][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.094658][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.113447][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.124910][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.155549][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.165515][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.174345][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.185941][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.199427][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.210743][ T4192] device veth0_vlan entered promiscuous mode [ 66.249998][ T4232] Bluetooth: hci0: command 0x040f tx timeout [ 66.256440][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.264247][ T4264] loop1: detected capacity change from 0 to 512 [ 66.274519][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 66.285925][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.296938][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 66.297067][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.303768][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 66.314936][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.331303][ T4232] Bluetooth: hci1: command 0x040f tx timeout [ 66.338432][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.349417][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.363168][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.393591][ T4264] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 66.413217][ T4264] FAT-fs (loop1): error, invalid access to FAT (entry 0x0f0009ff) [ 66.424426][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.437046][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.452831][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.465020][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.477011][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.490572][ T4192] device veth1_vlan entered promiscuous mode [ 66.499119][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.510694][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.520734][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.533035][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.543033][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.555293][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.568891][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.592816][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.601731][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.612313][ T4243] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.627329][ T4195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.642416][ T4243] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.651913][ T4195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.663584][ T4195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.672747][ T4195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.846839][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.856209][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.865408][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.094927][ T4268] loop1: detected capacity change from 0 to 4096 [ 67.278591][ T4268] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,block_validity,. Quota mode: writeback. [ 67.427430][ T4268] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 68.320086][ T23] Bluetooth: hci2: command 0x0419 tx timeout [ 68.600549][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 68.606657][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 68.630022][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 68.636195][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 68.662232][ T4192] device veth0_macvtap entered promiscuous mode [ 68.750452][ T1238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.774504][ T1238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.855740][ T4192] device veth1_macvtap entered promiscuous mode [ 68.875017][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.900425][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.910772][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.921713][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.196911][ T4280] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.321877][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.455476][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.748167][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.758875][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.773851][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.798426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.823659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.833379][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.888316][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.907527][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.918477][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.929436][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.941108][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.951619][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.963715][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.974460][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.987321][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.000200][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.039337][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.059178][ T4292] loop2: detected capacity change from 0 to 16 [ 70.068731][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.082106][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.091000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.103472][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.125715][ T4292] erofs: (device loop2): mounted with root inode @ nid 36. [ 70.136758][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.154451][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.173372][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.210713][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.220047][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 70.251931][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.292592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.395831][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.462143][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.563461][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.605122][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.693391][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 70.885331][ T4300] overlayfs: failed to get redirect (-117) [ 71.472318][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.483481][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.490204][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.557938][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.574421][ T4302] loop3: detected capacity change from 0 to 256 [ 71.581574][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.591488][ T1111] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.615106][ T1111] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.624389][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.637133][ T1111] usb 2-1: config 0 descriptor?? [ 71.921231][ T4309] netlink: 'syz.3.11': attribute type 1 has an invalid length. [ 72.118402][ T1111] plantronics 0003:047F:FFFF.0001: unknown main item tag 0xd [ 72.145771][ T1111] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 72.165291][ T4294] loop0: detected capacity change from 0 to 40427 [ 72.219772][ T4234] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 72.300896][ T4294] F2FS-fs (loop0): invalid crc value [ 72.331986][ T4294] F2FS-fs (loop0): Found nat_bits in checkpoint [ 72.372431][ T1111] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 72.627477][ T4317] loop4: detected capacity change from 0 to 4096 [ 73.035198][ T4317] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,block_validity,. Quota mode: writeback. [ 73.150560][ T4317] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 73.517999][ T1111] usb 2-1: USB disconnect, device number 2 [ 73.550021][ T4294] F2FS-fs (loop0): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 73.609652][ C0] sched: RT throttling activated [ 73.767892][ T4324] fido_id[4324]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 73.975388][ T4311] loop3: detected capacity change from 0 to 40427 [ 74.048623][ T4311] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 74.113508][ T4311] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 74.205900][ T4311] F2FS-fs (loop3): invalid crc value [ 74.276278][ T4311] F2FS-fs (loop3): Found nat_bits in checkpoint [ 74.442023][ T4311] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 74.476258][ T4311] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 74.789933][ T4234] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.840204][ T4234] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 74.865954][ T4332] syz.1.17 uses obsolete (PF_INET,SOCK_PACKET) [ 74.910499][ T4234] usb 3-1: string descriptor 0 read error: -71 [ 74.916942][ T4234] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 74.954640][ T4234] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.100035][ T4234] usb 3-1: can't set config #1, error -71 [ 75.170364][ T4234] usb 3-1: USB disconnect, device number 2 [ 76.189936][ T4233] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.277082][ T4195] attempt to access beyond end of device [ 76.277082][ T4195] loop3: rw=2049, want=45104, limit=40427 [ 76.304353][ T4344] 9pnet: Insufficient options for proto=fd [ 76.365998][ T4346] loop2: detected capacity change from 0 to 256 [ 76.459894][ T4233] usb 5-1: Using ep0 maxpacket: 16 [ 76.537580][ T4351] device syzkaller0 entered promiscuous mode [ 76.580210][ T4233] usb 5-1: config 1 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 76.604911][ T4233] usb 5-1: config 1 interface 0 has no altsetting 0 [ 76.628778][ T4354] loop2: detected capacity change from 0 to 256 [ 76.721244][ T4354] exfat: Deprecated parameter 'namecase' [ 76.727903][ T4354] exfat: Deprecated parameter 'namecase' [ 76.734217][ T4354] exfat: Deprecated parameter 'namecase' [ 76.779822][ T4233] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0102, bcdDevice= 0.40 [ 76.796314][ T4233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.818795][ T4354] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 76.844306][ T4233] usb 5-1: Product: syz [ 76.853146][ T4233] usb 5-1: Manufacturer: syz [ 77.026856][ T4233] usb 5-1: SerialNumber: syz [ 77.296632][ T4360] loop1: detected capacity change from 0 to 4096 [ 77.668121][ T4360] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,block_validity,. Quota mode: writeback. [ 77.777452][ T4360] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 77.964464][ T4359] binder_alloc: 4358: binder_alloc_buf, no vma [ 78.365423][ T4370] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 78.599929][ T4233] usbhid 5-1:1.0: can't add hid device: -71 [ 78.609858][ T4233] usbhid: probe of 5-1:1.0 failed with error -71 [ 78.629104][ T4233] usb 5-1: USB disconnect, device number 2 [ 79.239112][ T4375] loop3: detected capacity change from 0 to 1024 [ 79.425273][ T4375] EXT4-fs (loop3): Unrecognized mount option "dont_measure" or missing value [ 80.368098][ T4386] loop0: detected capacity change from 0 to 256 [ 80.559821][ T4269] Bluetooth: hci5: command 0x1003 tx timeout [ 80.568189][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 81.663447][ T4396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'. [ 82.035506][ T4197] Bluetooth: hci3: Received unexpected HCI Event 00000000 [ 82.630213][ T4414] loop1: detected capacity change from 0 to 4096 [ 83.388774][ T4414] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,block_validity,. Quota mode: writeback. [ 83.535830][ T4233] Bluetooth: hci5: command 0x1001 tx timeout [ 83.632480][ T4414] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 83.665668][ T4197] Bluetooth: hci5: sending frame failed (-49) [ 84.881473][ T4423] loop3: detected capacity change from 0 to 512 [ 85.779909][ T4423] EXT4-fs (loop3): Ignoring removed bh option [ 86.335163][ T4426] dccp_invalid_packet: P.Data Offset(4) too small [ 86.609810][ T4235] Bluetooth: hci5: command 0x1009 tx timeout [ 86.610847][ T4423] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 86.732474][ T4423] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.47: iget: bad i_size value: 3298534883338 [ 86.748139][ T4423] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.47: couldn't read orphan inode 15 (err -117) [ 86.764015][ T4423] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000002,grpid,bh,grpid,noauto_da_alloc,max_dir_size_kb=0x0000000000000005,init_itable=0x0000000000000009,init_itable,usrjquota=,nolazytime,norecovery,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 86.888104][ T4423] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.47: Unrecognised inode hash code 4 [ 86.900297][ T4423] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.47: Corrupt directory, running e2fsck is recommended [ 86.914540][ T4423] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.47: Unrecognised inode hash code 4 [ 86.926344][ T4423] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.47: Corrupt directory, running e2fsck is recommended [ 86.970162][ T1347] cfg80211: failed to load regulatory.db [ 87.621850][ T4435] netlink: 'syz.2.51': attribute type 4 has an invalid length. [ 87.672854][ T4436] overlayfs: failed to resolve './bus': -2 [ 87.736666][ T4436] loop0: detected capacity change from 0 to 512 [ 87.777910][ T4436] ======================================================= [ 87.777910][ T4436] WARNING: The mand mount option has been deprecated and [ 87.777910][ T4436] and is ignored by this kernel. Remove the mand [ 87.777910][ T4436] option from the mount to silence this warning. [ 87.777910][ T4436] ======================================================= [ 87.904614][ T4436] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 87.917915][ T4436] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 88.045809][ T4441] loop3: detected capacity change from 0 to 256 [ 88.350805][ T4436] EXT4-fs error (device loop0): ext4_read_inode_bitmap:140: comm syz.0.52: Invalid inode bitmap blk 4 in block_group 0 [ 88.701718][ T4436] EXT4-fs (loop0): mounted filesystem without journal. Opts: quota,norecovery,mblk_io_submit,quota,nobarrier,grpquota,nombcache,barrier=0x000000000000000c,dioread_nolock,noblock_validity,data_err=ignore,norecovery,,errors=continue. Quota mode: writeback. [ 90.365378][ T4430] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 91.548676][ T4462] loop3: detected capacity change from 0 to 512 [ 92.557665][ T4467] loop3: detected capacity change from 0 to 16 [ 94.109985][ T4477] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 94.191091][ T4467] erofs: (device loop3): mounted with root inode @ nid 36. [ 94.888570][ T4491] overlayfs: failed to get redirect (-117) [ 95.952691][ T4498] loop1: detected capacity change from 0 to 1024 [ 97.073703][ T4498] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.239960][ T4498] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,nojournal_checksum,lazytime,noauto_da_alloc,. Quota mode: writeback. [ 97.434406][ T4515] netlink: 'syz.4.73': attribute type 10 has an invalid length. [ 97.461978][ T4518] Zero length message leads to an empty skb [ 97.519345][ T4515] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.582411][ T4515] bond0: (slave team0): Enslaving as an active interface with an up link [ 97.733873][ T4526] loop0: detected capacity change from 0 to 1024 [ 98.630068][ T4526] EXT4-fs (loop0): Ignoring removed orlov option [ 98.874322][ T4526] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,user_xattr,norecovery,debug_want_extra_isize=0x0000000000000010,orlov,usrquota,grpquota,norecovery,,errors=continue. Quota mode: writeback. [ 99.082435][ T4544] loop4: detected capacity change from 0 to 4096 [ 99.631343][ T4526] EXT4-fs (loop0): shut down requested (2) [ 100.071625][ T4549] loop2: detected capacity change from 0 to 16 [ 100.775479][ T4549] erofs: (device loop2): mounted with root inode @ nid 36. [ 100.914909][ T4544] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,block_validity,. Quota mode: writeback. [ 101.065720][ T4544] EXT4-fs (loop4): Online resizing not supported with bigalloc [ 101.319201][ T4549] overlayfs: failed to get redirect (-117) [ 102.618965][ T4571] loop2: detected capacity change from 0 to 512 [ 102.768912][ T4571] EXT4-fs (loop2): Unrecognized mount option "subj_user=" or missing value [ 102.771324][ T4584] loop4: detected capacity change from 0 to 512 [ 102.812774][ T4584] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 102.831103][ T4585] loop1: detected capacity change from 0 to 1024 [ 102.857961][ T4584] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.98: corrupted inode contents [ 102.873547][ T4584] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 102.884458][ T4584] EXT4-fs error (device loop4): ext4_do_update_inode:5229: inode #15: comm syz.4.98: corrupted inode contents [ 102.896770][ T4584] EXT4-fs error (device loop4): ext4_evict_inode:332: inode #15: comm syz.4.98: mark_inode_dirty error [ 102.909077][ T4584] EXT4-fs (loop4): 1 orphan inode deleted [ 102.915410][ T4584] EXT4-fs (loop4): mounted filesystem without journal. Opts: discard,grpid,bsddf,noquota,dioread_nolock,noinit_itable,,errors=continue. Quota mode: none. [ 104.424449][ T4585] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,norecovery,min_batch_time=0x0000000000000001,nombcache,debug_want_extra_isize=0x0000000000000080,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,usrquota,barrier=0x0000000000000007,barrier=0x00. Quota mode: writeback. [ 104.905831][ T4585] netlink: 'syz.1.97': attribute type 2 has an invalid length. [ 105.738238][ T4613] overlayfs: unrecognized mount option "fscontext=staff_u" or missing value [ 105.789337][ T4617] overlayfs: unrecognized mount option "verity=off" or missing value [ 105.832638][ T4616] device syzkaller0 entered promiscuous mode [ 105.845373][ T4618] loop2: detected capacity change from 0 to 512 [ 105.957916][ T4618] EXT4-fs (loop2): Ignoring removed nobh option [ 105.965549][ T4621] loop0: detected capacity change from 0 to 128 [ 105.982933][ T4611] loop4: detected capacity change from 0 to 512 [ 105.989929][ T4618] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.003558][ T4618] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 106.035102][ T4618] EXT4-fs (loop2): 1 truncate cleaned up [ 106.058328][ T4611] EXT4-fs (loop4): Unrecognized mount option "smackfsroot=ext4" or missing value [ 106.060011][ T4618] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,nobh,acl,,errors=continue. Quota mode: none. [ 106.091998][ T4621] EXT4-fs (loop0): mounted filesystem without journal. Opts: journal_dev=0x0000000000000005,,errors=continue. Quota mode: none. [ 106.172695][ T4621] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.431862][ T4631] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 106.462531][ T4631] IPv6: NLM_F_REPLACE set, but no existing node found! [ 107.470087][ T4648] loop4: detected capacity change from 0 to 16 [ 107.530976][ T4648] erofs: (device loop4): mounted with root inode @ nid 36. [ 107.644298][ T4648] overlayfs: failed to get redirect (-117) [ 107.837483][ T4650] loop1: detected capacity change from 0 to 4096 [ 108.683344][ T4650] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,block_validity,. Quota mode: writeback. [ 108.789105][ T4650] EXT4-fs (loop1): Online resizing not supported with bigalloc [ 109.613370][ T4660] tipc: Started in network mode [ 109.618603][ T4660] tipc: Node identity 7f000001, cluster identity 4711 [ 109.637061][ T4660] tipc: Enabling of bearer rejected, failed to enable media [ 110.267379][ T4666] device syzkaller0 entered promiscuous mode [ 111.191848][ T4677] capability: warning: `syz.3.121' uses 32-bit capabilities (legacy support in use) [ 112.273716][ T4687] loop1: detected capacity change from 0 to 16 [ 112.372453][ T4687] erofs: (device loop1): mounted with root inode @ nid 36. [ 112.444614][ T4687] overlayfs: failed to get redirect (-117) [ 112.919236][ T4699] loop3: detected capacity change from 0 to 4096 [ 116.608448][ T7] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 116.617337][ T7] Bluetooth: hci4: Injecting HCI hardware error event [ 116.625712][ T4197] Bluetooth: hci4: hardware error 0x00 [ 116.698706][ T4708] loop2: detected capacity change from 0 to 256 [ 117.986159][ T4724] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 118.381957][ T4716] device syzkaller0 entered promiscuous mode [ 119.016669][ T4741] loop3: detected capacity change from 0 to 16 [ 119.072930][ T4741] erofs: (device loop3): mounted with root inode @ nid 36. [ 120.582461][ T4766] loop2: detected capacity change from 0 to 4096 [ 121.621898][ T4770] loop1: detected capacity change from 0 to 512 [ 121.865329][ T4770] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 121.953369][ T4766] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,block_validity,. Quota mode: writeback. [ 122.082062][ T4766] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 122.459931][ T4770] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=remount-ro,. Quota mode: writeback. [ 122.519891][ T4770] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.247499][ T4795] device syzkaller0 entered promiscuous mode [ 126.169228][ T4808] loop2: detected capacity change from 0 to 1024 [ 128.811414][ T4808] EXT4-fs warning (device loop2): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop2. [ 130.483784][ T4843] loop4: detected capacity change from 0 to 8 [ 132.972829][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.979146][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.487341][ T26] audit: type=1326 audit(1783854629.723:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4853 comm="syz.3.171" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f53c65fae59 code=0x0 [ 134.547264][ T4192] SQUASHFS error: Unable to read directory block [631:72] [ 134.615698][ T4192] SQUASHFS error: Unable to read inode 0x0 [ 134.623019][ T4192] SQUASHFS error: Unable to read inode 0x0 [ 135.935033][ T4869] device syzkaller0 entered promiscuous mode [ 136.485069][ T4878] loop1: detected capacity change from 0 to 4096 [ 142.650811][ T4903] loop2: detected capacity change from 0 to 16 [ 142.730850][ T4903] erofs: (device loop2): mounted with root inode @ nid 36. [ 147.089042][ T4934] loop1: detected capacity change from 0 to 1024 [ 147.174395][ T4934] EXT4-fs (loop1): Ignoring removed bh option [ 147.292724][ T4935] device syzkaller0 entered promiscuous mode [ 147.340658][ T4934] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000005,bh,init_itable,. Quota mode: none. [ 147.851262][ T4186] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 148.116512][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 148.414669][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 148.466924][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 148.478544][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 148.479479][ T4928] chnl_net:caif_netlink_parms(): no params data found [ 148.616024][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 148.769771][ T4186] EXT4-fs error (device loop1): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 148.959654][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 149.175754][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 149.285341][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 149.716211][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 149.723175][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 149.746049][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 149.753482][ T4186] EXT4-fs error (device loop1): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 150.321689][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 150.479772][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 150.553162][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 150.611620][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 150.855240][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 150.887074][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 151.082558][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 151.192075][ T4186] EXT4-fs error (device loop1): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 151.235807][ T4928] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.345020][ T4928] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.627852][ T4928] device bridge_slave_0 entered promiscuous mode [ 151.638813][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 151.664652][ T4928] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.672983][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 151.698058][ T4928] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.708175][ T4928] device bridge_slave_1 entered promiscuous mode [ 151.718636][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 151.774639][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 151.782028][ T4986] fuse: Bad value for 'fd' [ 151.795764][ T4984] device syzkaller0 entered promiscuous mode [ 151.802151][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 151.826655][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 151.865719][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 152.022836][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.049989][ T4991] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 152.078905][ T4991] device bond1 entered promiscuous mode [ 152.080427][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 152.084900][ T4991] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.109094][ T4928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.121012][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 152.123516][ T4928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.368945][ T4995] loop3: detected capacity change from 0 to 4096 [ 152.406249][ T4991] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.418620][ T4991] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 152.429654][ T4991] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 152.458676][ T4991] bond1: (slave ip6gre1): making interface the new active one [ 152.466972][ T4991] device ip6gre1 entered promiscuous mode [ 152.483028][ T4991] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 152.634963][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 152.913901][ T4186] EXT4-fs warning: 2 callbacks suppressed [ 152.913946][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 153.067442][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 153.224286][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 153.252363][ T4186] EXT4-fs error: 29 callbacks suppressed [ 153.252947][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 153.482829][ T4928] team0: Port device team_slave_0 added [ 153.554306][ T4928] team0: Port device team_slave_1 added [ 153.605183][ T1347] Bluetooth: hci2: command 0x040f tx timeout [ 153.632147][ T4186] EXT4-fs: 29 callbacks suppressed [ 153.632162][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 153.725808][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.477585][ T4928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.562988][ T4928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.595454][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 154.868985][ T4928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.893791][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.907506][ T4928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.051882][ T4995] EXT4-fs: error -4 creating inode table initialization thread [ 155.061843][ T4995] EXT4-fs (loop3): mount failed [ 155.077809][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 155.259113][ T4186] EXT4-fs error (device loop1): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 155.281732][ T4928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.389304][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 155.409046][ T4928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.428249][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 155.477826][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 155.580778][ T4928] device hsr_slave_0 entered promiscuous mode [ 155.608628][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 155.617037][ T4928] device hsr_slave_1 entered promiscuous mode [ 155.629351][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 155.651497][ T4928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.659087][ T4928] Cannot create hsr debugfs directory [ 155.725589][ T1347] Bluetooth: hci2: command 0x0419 tx timeout [ 155.743112][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.831307][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 155.847381][ T4186] EXT4-fs error (device loop1): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 155.876043][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 155.884296][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 156.059415][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 156.084564][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 156.092804][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 157.866326][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 157.883823][ T4186] EXT4-fs error (device loop1): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 157.914392][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 157.923755][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 157.946108][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 157.977789][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 157.985763][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 158.010048][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 158.033768][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 158.063022][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 158.107724][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 158.158703][ T5019] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 158.199790][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 158.227434][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 158.276939][ T4186] EXT4-fs error: 20 callbacks suppressed [ 158.276964][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 158.422049][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 158.473080][ T4186] EXT4-fs error (device loop1): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 158.701033][ T4186] EXT4-fs: 22 callbacks suppressed [ 158.701167][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 158.843947][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 159.012811][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 159.172835][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 159.187601][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 159.228860][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 159.274844][ T4186] EXT4-fs error (device loop1): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 159.301802][ T4928] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.329715][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 159.338682][ T4186] EXT4-fs warning (device loop1): empty_inline_dir:1888: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 159.367273][ T4928] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.376695][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 159.418816][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 159.436587][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 159.509887][ T4928] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.529311][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 159.537630][ T4928] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 159.549248][ T4186] EXT4-fs error (device loop1): empty_inline_dir:1881: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 159.666042][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 159.685737][ T4186] EXT4-fs error (device loop1): ext4_read_inline_dir:1626: inode #12: block 7: comm syz-executor: path /37/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0 [ 159.724015][ T5042] device syzkaller0 entered promiscuous mode [ 159.744105][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 159.759086][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 159.767620][ T4186] EXT4-fs (loop1): Remounting filesystem read-only [ 164.136924][ T5085] loop3: detected capacity change from 0 to 256 [ 164.152834][ T4928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.499136][ T5085] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 164.913534][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.941271][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.142839][ T4928] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.193317][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.274014][ T26] audit: type=1804 audit(1783854661.343:3): pid=5094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.229" name="/newroot/55/file1/file0" dev="loop3" ino=1048602 res=1 errno=0 [ 165.346652][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.466363][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.473537][ T4270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.610347][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.655168][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.737607][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.744825][ T4270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.824906][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.914596][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.953577][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.144502][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.154505][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.166402][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.176477][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.187035][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.418981][ T5117] loop3: detected capacity change from 0 to 4096 [ 167.609271][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.625685][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.912681][ T5117] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,block_validity,. Quota mode: writeback. [ 168.602327][ T4230] Bluetooth: hci0: command 0x0409 tx timeout [ 169.501557][ T4928] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.525755][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.535579][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.779791][ T4230] Bluetooth: hci0: command 0x041b tx timeout [ 171.293904][ T4928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.415854][ T5168] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 171.469302][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 171.480320][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.021369][ T154] device hsr_slave_0 left promiscuous mode [ 172.061097][ T154] device hsr_slave_1 left promiscuous mode [ 172.112228][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.170471][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.230618][ T5176] loop3: detected capacity change from 0 to 1024 [ 172.250860][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.292356][ T5182] loop2: detected capacity change from 0 to 4096 [ 172.299468][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.333738][ T154] device bridge_slave_1 left promiscuous mode [ 172.353686][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.437539][ T154] device bridge_slave_0 left promiscuous mode [ 172.443882][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.466507][ T5176] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.496463][ T154] device veth1_macvtap left promiscuous mode [ 172.872979][ T5182] EXT4-fs (loop2): Test dummy encryption mode enabled [ 173.050479][ T154] device veth0_macvtap left promiscuous mode [ 173.056721][ T154] device veth1_vlan left promiscuous mode [ 173.092703][ T5182] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000008,user_xattr,nodioread_nolock,test_dummy_encryption,inode_readahead_blks=0x0000000000000000,nodelalloc,noblock_validity,init_itable,journal_dev=0x0000000000000003,noinit_itable,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 173.180715][ T154] device veth0_vlan left promiscuous mode [ 173.603280][ T4275] Bluetooth: hci0: command 0x040f tx timeout [ 175.047067][ T154] team0 (unregistering): Port device team_slave_1 removed [ 175.084442][ T154] team0 (unregistering): Port device team_slave_0 removed [ 175.119229][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.147466][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.287054][ T154] bond0 (unregistering): (slave team0): Releasing backup interface [ 175.311787][ T154] bond0 (unregistering): Released all slaves [ 175.520846][ T5104] chnl_net:caif_netlink_parms(): no params data found [ 175.791704][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 177.459880][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.622148][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.679774][ T5104] device bridge_slave_0 entered promiscuous mode [ 177.707855][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.719529][ T5244] loop3: detected capacity change from 0 to 128 [ 177.732143][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.747284][ T5104] device bridge_slave_1 entered promiscuous mode [ 177.894175][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.920950][ T5244] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,dioread_lock,nouid32,,errors=continue. Quota mode: none. [ 178.120474][ T5244] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.399355][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.121663][ T5104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.156843][ T5104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.273220][ T5104] team0: Port device team_slave_0 added [ 179.289526][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.335240][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.396521][ T4928] device veth0_vlan entered promiscuous mode [ 179.416842][ T5104] team0: Port device team_slave_1 added [ 179.430415][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.445463][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.506847][ T4928] device veth1_vlan entered promiscuous mode [ 181.640386][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 181.862386][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.012965][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.032509][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.061261][ T5287] loop2: detected capacity change from 0 to 16 [ 182.070526][ T5104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.085826][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.097238][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.107620][ T5281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.257'. [ 182.157480][ T5287] erofs: (device loop2): mounted with root inode @ nid 36. [ 182.182672][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.210288][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.267155][ T5104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.324052][ T4928] device veth0_macvtap entered promiscuous mode [ 182.484959][ T5296] overlayfs: failed to get redirect (-117) [ 183.182858][ T5104] device hsr_slave_0 entered promiscuous mode [ 183.254428][ T5104] device hsr_slave_1 entered promiscuous mode [ 183.272407][ T5104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.327617][ T5303] netlink: 28 bytes leftover after parsing attributes in process `syz.0.263'. [ 183.373072][ T5104] Cannot create hsr debugfs directory [ 183.383698][ T4928] device veth1_macvtap entered promiscuous mode [ 183.406304][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.420241][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.354049][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.419622][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.465959][ T5310] netlink: 'syz.3.264': attribute type 11 has an invalid length. [ 184.490345][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.532688][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.542718][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.553650][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.564030][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.685541][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.741150][ T4928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.367761][ T5313] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 185.489930][ T5313] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 186.602336][ T4234] Bluetooth: hci1: command 0x0406 tx timeout [ 186.608520][ T4234] Bluetooth: hci3: command 0x0406 tx timeout [ 186.869872][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 187.121088][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 187.378817][ T5334] input: syz0 as /devices/virtual/input/input7 [ 188.928271][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.939733][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.950134][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.961046][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.974556][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.985593][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.995921][ T4928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.006783][ T4928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.038110][ T4928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.076484][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.096204][ T1238] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.168700][ T4928] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.188227][ T4928] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.198008][ T4928] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.212536][ T4928] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.413246][ T5382] loop3: detected capacity change from 0 to 4096 [ 194.177667][ T5382] EXT4-fs: failed to create workqueue [ 194.183309][ T5382] EXT4-fs (loop3): mount failed [ 194.215431][ T4418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.392110][ T4418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.410109][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.416521][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.473563][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.611090][ T5104] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 194.672870][ T4416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.702158][ T4416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.755533][ T5104] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 194.790400][ T5104] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 194.860114][ T5104] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 194.906448][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 196.560190][ T5104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.824128][ T5104] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.898199][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 196.937111][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.413491][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.737154][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.770252][ T4416] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.777416][ T4416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.709900][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.717951][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.745389][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.790427][ T4416] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.797543][ T4416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.890046][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.930594][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 199.096682][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 199.121722][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 199.200811][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.260778][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.311188][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.353070][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.512239][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.525657][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.685388][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.717199][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.696826][ T154] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.877278][ T154] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.386814][ T154] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.586158][ T5104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.686297][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 204.701607][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 204.957438][ T5516] loop2: detected capacity change from 0 to 16 [ 205.028821][ T5516] erofs: (device loop2): mounted with root inode @ nid 36. [ 205.410206][ T5522] capability: warning: `syz.5.306' uses deprecated v2 capabilities in a way that may be insecure [ 205.890586][ T5524] overlayfs: failed to get redirect (-117) [ 206.423412][ T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.508465][ T4197] Bluetooth: Unexpected continuation frame (len 48) [ 207.564896][ T5533] device syzkaller0 entered promiscuous mode [ 210.344308][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 210.377071][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 210.470584][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 210.551088][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 210.553624][ T5566] loop5: detected capacity change from 0 to 128 [ 210.597086][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 210.616958][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 210.754924][ T5104] device veth0_vlan entered promiscuous mode [ 210.782998][ T5566] EXT4-fs (loop5): inline encryption not supported [ 211.033586][ T5579] loop2: detected capacity change from 0 to 4096 [ 211.232358][ T5579] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,block_validity,. Quota mode: writeback. [ 211.356405][ T5566] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrquota,inlinecrypt,,errors=continue. Quota mode: writeback. [ 211.605493][ T5566] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.451739][ T5104] device veth1_vlan entered promiscuous mode [ 213.479464][ T5104] device veth0_macvtap entered promiscuous mode [ 213.499556][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 213.541737][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 213.608987][ T5104] device veth1_macvtap entered promiscuous mode [ 213.655106][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 213.792626][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.406517][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.638986][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.759748][ T5617] overlayfs: failed to clone upperpath [ 215.769051][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.779032][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.789545][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.802292][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.839779][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.859636][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.887185][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.899564][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.956696][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.988987][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.009493][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.027247][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.037818][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.038330][ T5624] loop5: detected capacity change from 0 to 16 [ 216.048415][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.048431][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.048448][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.048473][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.048486][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.049925][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.077336][ T5624] erofs: (device loop5): mounted with root inode @ nid 36. [ 216.115305][ T5104] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.229743][ T5104] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.240701][ T5104] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.249541][ T5104] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.352027][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 216.430913][ T5627] overlayfs: failed to get redirect (-117) [ 216.561727][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 216.762827][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 217.078835][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 217.121538][ T5629] loop3: detected capacity change from 0 to 128 [ 217.179746][ T5629] EXT4-fs (loop3): Ignoring removed nobh option [ 217.303690][ T5629] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 217.318956][ T5629] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 217.409757][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.417622][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.178044][ T5645] loop5: detected capacity change from 0 to 1024 [ 218.213986][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 218.683518][ T4418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.700697][ T5645] EXT4-fs (loop5): Ignoring removed bh option [ 218.730921][ T4418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.858272][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 218.929169][ T5645] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 222.248588][ T5682] loop2: detected capacity change from 0 to 1024 [ 222.395577][ T5692] loop5: detected capacity change from 0 to 16 [ 222.462730][ T5682] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,data_err=ignore,,errors=continue. Quota mode: none. [ 222.529989][ T5692] erofs: (device loop5): mounted with root inode @ nid 36. [ 222.643041][ T5709] netlink: 72 bytes leftover after parsing attributes in process `syz.0.346'. [ 222.736049][ T5699] device syzkaller0 entered promiscuous mode [ 222.785665][ T5709] netlink: 48 bytes leftover after parsing attributes in process `syz.0.346'. [ 222.880121][ T5714] overlayfs: failed to get redirect (-117) [ 223.873913][ T5725] loop2: detected capacity change from 0 to 4096 [ 231.783142][ T5736] ================================================================== [ 231.791537][ T5736] BUG: KASAN: use-after-free in dvb_frontend_release+0x3f8/0x4a0 [ 231.799389][ T5736] Read of size 4 at addr ffff88814b67b63c by task syz.5.350/5736 [ 231.807128][ T5736] [ 231.809470][ T5736] CPU: 1 PID: 5736 Comm: syz.5.350 Not tainted syzkaller #0 [ 231.816770][ T5736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 231.827104][ T5736] Call Trace: [ 231.830406][ T5736] [ 231.833352][ T5736] dump_stack_lvl+0x188/0x250 [ 231.838062][ T5736] ? show_regs_print_info+0x20/0x20 [ 231.843465][ T5736] ? _printk+0xda/0x130 [ 231.847832][ T5736] ? dvb_frontend_release+0x3f8/0x4a0 [ 231.853225][ T5736] ? load_image+0x410/0x410 [ 231.857851][ T5736] print_address_description+0x60/0x2d0 [ 231.863683][ T5736] ? dvb_frontend_release+0x3f8/0x4a0 [ 231.869080][ T5736] kasan_report+0xdf/0x130 [ 231.873517][ T5736] ? dvb_frontend_release+0x3f8/0x4a0 [ 231.879018][ T5736] dvb_frontend_release+0x3f8/0x4a0 [ 231.884236][ T5736] ? dvb_frontend_open+0x12d0/0x12d0 [ 231.889534][ T5736] __fput+0x212/0x8c0 [ 231.893967][ T5736] task_work_run+0x125/0x1a0 [ 231.898605][ T5736] get_signal+0x123e/0x12e0 [ 231.903161][ T5736] arch_do_signal_or_restart+0xe6/0x12a0 [ 231.908834][ T5736] ? pick_file+0x18c/0x220 [ 231.913280][ T5736] ? __lock_acquire+0x7b50/0x7b50 [ 231.918332][ T5736] ? do_raw_spin_lock+0x128/0x2f0 [ 231.923377][ T5736] ? __rwlock_init+0x140/0x140 [ 231.928191][ T5736] ? get_sigframe_size+0x10/0x10 [ 231.933190][ T5736] ? exit_to_user_mode_loop+0x3b/0x130 [ 231.938796][ T5736] exit_to_user_mode_loop+0x9e/0x130 [ 231.944188][ T5736] exit_to_user_mode_prepare+0xee/0x180 [ 231.949771][ T5736] syscall_exit_to_user_mode+0x16/0x40 [ 231.955269][ T5736] do_syscall_64+0x58/0xa0 [ 231.959718][ T5736] ? clear_bhb_loop+0x30/0x80 [ 231.964430][ T5736] ? clear_bhb_loop+0x30/0x80 [ 231.969264][ T5736] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 231.975191][ T5736] RIP: 0033:0x7fd062896e59 [ 231.979641][ T5736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.999276][ T5736] RSP: 002b:00007ffefd55d598 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 232.007817][ T5736] RAX: 0000000000000000 RBX: 00007ffefd55d680 RCX: 00007fd062896e59 [ 232.015823][ T5736] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 232.023819][ T5736] RBP: 00000000000388e3 R08: 0000000000000001 R09: 0000000000000000 [ 232.031819][ T5736] R10: 0000001b2e320000 R11: 0000000000000246 R12: 00007ffefd55d6c0 [ 232.039795][ T5736] R13: 00007fd062b1efac R14: 0000000000038952 R15: 00007fd062b1efa0 [ 232.047803][ T5736] [ 232.050837][ T5736] [ 232.053153][ T5736] Allocated by task 1: [ 232.057215][ T5736] __kasan_kmalloc+0xaf/0xe0 [ 232.061804][ T5736] dvb_register_device+0x300/0x1dc0 [ 232.067032][ T5736] dvb_register_frontend+0x629/0x900 [ 232.072343][ T5736] vidtv_bridge_probe+0x9c1/0xf30 [ 232.077360][ T5736] platform_probe+0x137/0x1c0 [ 232.082051][ T5736] really_probe+0x276/0xc70 [ 232.086546][ T5736] __driver_probe_device+0x1f5/0x390 [ 232.091830][ T5736] driver_probe_device+0x4f/0x420 [ 232.096969][ T5736] __driver_attach+0x45d/0x660 [ 232.101758][ T5736] bus_for_each_dev+0x182/0x1f0 [ 232.106636][ T5736] bus_add_driver+0x324/0x5d0 [ 232.111342][ T5736] driver_register+0x32d/0x430 [ 232.116139][ T5736] vidtv_bridge_init+0x39/0x70 [ 232.120938][ T5736] do_one_initcall+0x272/0x730 [ 232.125722][ T5736] do_initcall_level+0x13d/0x1f0 [ 232.130656][ T5736] do_initcalls+0x4b/0x90 [ 232.134980][ T5736] kernel_init_freeable+0x3d5/0x560 [ 232.140183][ T5736] kernel_init+0x19/0x1b0 [ 232.144533][ T5736] ret_from_fork+0x1f/0x30 [ 232.148962][ T5736] [ 232.151284][ T5736] Freed by task 5736: [ 232.155257][ T5736] kasan_set_track+0x4b/0x70 [ 232.159882][ T5736] kasan_set_free_info+0x1f/0x40 [ 232.164813][ T5736] ____kasan_slab_free+0xd5/0x110 [ 232.169835][ T5736] slab_free_freelist_hook+0xec/0x170 [ 232.175202][ T5736] kfree+0xef/0x2a0 [ 232.179008][ T5736] dvb_generic_release+0x11c/0x1b0 [ 232.184126][ T5736] dvb_frontend_release+0x134/0x4a0 [ 232.189330][ T5736] __fput+0x212/0x8c0 [ 232.193313][ T5736] task_work_run+0x125/0x1a0 [ 232.197929][ T5736] get_signal+0x123e/0x12e0 [ 232.202422][ T5736] arch_do_signal_or_restart+0xe6/0x12a0 [ 232.208056][ T5736] exit_to_user_mode_loop+0x9e/0x130 [ 232.213365][ T5736] exit_to_user_mode_prepare+0xee/0x180 [ 232.218918][ T5736] syscall_exit_to_user_mode+0x16/0x40 [ 232.224384][ T5736] do_syscall_64+0x58/0xa0 [ 232.228806][ T5736] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.234688][ T5736] [ 232.237017][ T5736] The buggy address belongs to the object at ffff88814b67b600 [ 232.237017][ T5736] which belongs to the cache kmalloc-256 of size 256 [ 232.251149][ T5736] The buggy address is located 60 bytes inside of [ 232.251149][ T5736] 256-byte region [ffff88814b67b600, ffff88814b67b700) [ 232.264426][ T5736] The buggy address belongs to the page: [ 232.270055][ T5736] page:ffffea00052d9e80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x14b67a [ 232.280400][ T5736] head:ffffea00052d9e80 order:1 compound_mapcount:0 [ 232.286993][ T5736] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 232.295184][ T5736] raw: 057ff00000010200 dead000000000100 dead000000000122 ffff888016c41b40 [ 232.304140][ T5736] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 232.312727][ T5736] page dumped because: kasan: bad access detected [ 232.319137][ T5736] page_owner tracks the page as allocated [ 232.324850][ T5736] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 19311087616, free_ts 0 [ 232.342819][ T5736] get_page_from_freelist+0x24f6/0x2670 [ 232.348423][ T5736] __alloc_pages+0x1ee/0x480 [ 232.353011][ T5736] alloc_page_interleave+0x24/0x1e0 [ 232.358203][ T5736] new_slab+0xc0/0x4b0 [ 232.362345][ T5736] ___slab_alloc+0x807/0xdd0 [ 232.366955][ T5736] __kmalloc_node+0x142/0x3a0 [ 232.371717][ T5736] kvmalloc_node+0x84/0x130 [ 232.376438][ T5736] v4l2_ctrl_new+0x70f/0x1310 [ 232.381242][ T5736] v4l2_ctrl_new_std+0x247/0x300 [ 232.386183][ T5736] handler_new_ref+0x14f/0x8d0 [ 232.390964][ T5736] v4l2_ctrl_add_handler+0x197/0x280 [ 232.396282][ T5736] vivid_create_controls+0x26e6/0x3380 [ 232.401754][ T5736] vivid_probe+0x39ff/0x6240 [ 232.406424][ T5736] platform_probe+0x137/0x1c0 [ 232.411093][ T5736] really_probe+0x276/0xc70 [ 232.415594][ T5736] __driver_probe_device+0x1f5/0x390 [ 232.420895][ T5736] page_owner free stack trace missing [ 232.426279][ T5736] [ 232.428614][ T5736] Memory state around the buggy address: [ 232.434353][ T5736] ffff88814b67b500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 232.442518][ T5736] ffff88814b67b580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 232.450614][ T5736] >ffff88814b67b600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 232.458683][ T5736] ^ [ 232.464585][ T5736] ffff88814b67b680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 232.472641][ T5736] ffff88814b67b700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 232.480697][ T5736] ================================================================== [ 232.488855][ T5736] Disabling lock debugging due to kernel taint [ 232.509434][ T5736] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 232.516803][ T5736] CPU: 1 PID: 5736 Comm: syz.5.350 Tainted: G B syzkaller #0 [ 232.525500][ T5736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 232.535842][ T5736] Call Trace: [ 232.539152][ T5736] [ 232.542094][ T5736] dump_stack_lvl+0x188/0x250 [ 232.546812][ T5736] ? show_regs_print_info+0x20/0x20 [ 232.552021][ T5736] ? load_image+0x410/0x410 [ 232.556550][ T5736] panic+0x2f8/0x850 [ 232.560540][ T5736] ? bpf_jit_dump+0xd0/0xd0 [ 232.565075][ T5736] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 232.571052][ T5736] ? _raw_spin_unlock+0x40/0x40 [ 232.575908][ T5736] ? print_memory_metadata+0x314/0x400 [ 232.581395][ T5736] ? dvb_frontend_release+0x3f8/0x4a0 [ 232.586808][ T5736] check_panic_on_warn+0x80/0xa0 [ 232.591759][ T5736] ? dvb_frontend_release+0x3f8/0x4a0 [ 232.597147][ T5736] end_report+0x6d/0xf0 [ 232.601308][ T5736] kasan_report+0x102/0x130 [ 232.605801][ T5736] ? dvb_frontend_release+0x3f8/0x4a0 [ 232.611172][ T5736] dvb_frontend_release+0x3f8/0x4a0 [ 232.616476][ T5736] ? dvb_frontend_open+0x12d0/0x12d0 [ 232.621755][ T5736] __fput+0x212/0x8c0 [ 232.625746][ T5736] task_work_run+0x125/0x1a0 [ 232.630342][ T5736] get_signal+0x123e/0x12e0 [ 232.634841][ T5736] arch_do_signal_or_restart+0xe6/0x12a0 [ 232.640465][ T5736] ? pick_file+0x18c/0x220 [ 232.644871][ T5736] ? __lock_acquire+0x7b50/0x7b50 [ 232.649891][ T5736] ? do_raw_spin_lock+0x128/0x2f0 [ 232.654907][ T5736] ? __rwlock_init+0x140/0x140 [ 232.659667][ T5736] ? get_sigframe_size+0x10/0x10 [ 232.664635][ T5736] ? exit_to_user_mode_loop+0x3b/0x130 [ 232.670091][ T5736] exit_to_user_mode_loop+0x9e/0x130 [ 232.675465][ T5736] exit_to_user_mode_prepare+0xee/0x180 [ 232.681000][ T5736] syscall_exit_to_user_mode+0x16/0x40 [ 232.686453][ T5736] do_syscall_64+0x58/0xa0 [ 232.690859][ T5736] ? clear_bhb_loop+0x30/0x80 [ 232.695538][ T5736] ? clear_bhb_loop+0x30/0x80 [ 232.700397][ T5736] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 232.706294][ T5736] RIP: 0033:0x7fd062896e59 [ 232.710723][ T5736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.730349][ T5736] RSP: 002b:00007ffefd55d598 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 232.738763][ T5736] RAX: 0000000000000000 RBX: 00007ffefd55d680 RCX: 00007fd062896e59 [ 232.746737][ T5736] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 232.754890][ T5736] RBP: 00000000000388e3 R08: 0000000000000001 R09: 0000000000000000 [ 232.762864][ T5736] R10: 0000001b2e320000 R11: 0000000000000246 R12: 00007ffefd55d6c0 [ 232.770846][ T5736] R13: 00007fd062b1efac R14: 0000000000038952 R15: 00007fd062b1efa0 [ 232.778859][ T5736] [ 232.781960][ T5736] Kernel Offset: disabled [ 232.786279][ T5736] Rebooting in 86400 seconds..