last executing test programs: 16.753999213s ago: executing program 2 (id=593): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x90a003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") sched_setscheduler(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000034000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000190000/0x1000)=nil) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x2a, 0x2, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x3}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtfilter={0x24, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff3}, {}, {0xfff3}}}, 0x24}}, 0x0) request_key(&(0x7f0000000080)='id_legacy\x00', &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x0, 0x0, 0xcbf, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0xfe, 0x2, 0x4038a09, 0x4, @loopback={0xe0}, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 10.86417148s ago: executing program 2 (id=607): io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000006040), 0x803) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8001) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040832}, 0xc094) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x38, &(0x7f0000000040)=0x5) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) 10.69126541s ago: executing program 3 (id=610): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1000000000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r3, 0xffffffffffffffff, 0x0) syz_mount_image$cramfs(&(0x7f0000000100), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="4b2c0988996c6b3261d51748e099993b456ef233414331d7c27baebbe53b1bfb4473c620da436723437906ce7f19e505cfa4bdff9d2e603f588254fdf39d49ede54241af1c92f106472aca3b43f60500000000000000f5cdd9774416e4a1bb4efbcb023935c5d2e647d9ff4aa4cc2029a70665a19e11b5fe5cdda5f037be57000ce5d9a7bb3af4efdbda08f1f5ce883f6b7cca6cda6f46e256e1cb37375956dc7e3af8252024811f1ecf758eb7b416175c005f4208da0afec79fad24d185bc3e85c13c5aa225d4143832c348d2c0bacdbac41d651526d71961dbbdb4f70f2808454122af20cd452f70e5e3b6783144e15f9406"], 0x1, 0x147, &(0x7f00000003c0)="$eJzszcFKMmEUxvHndfw+LYwEXViQBS2SxBxHTAhcaCgJ2VAhQStBJwo0IyFcVtCuRRcwi0poJV5DRRvLgbDrEFoELYszw5REq9bnt3gH/udwJmSksoAXACR6luu1g0Ot0dAqMxtqIbeZbI8sweIC4P6eWzF9S+8uPb6TAX0q8ADJnb2qtlCuV2ktbfYQ3ECEugzA2h2ltk4tZrdZc2+LmvJLi9vNOUktZd+7+qB7c9Sy9j0Ab0093Gk/rvW6+cj8zZSEs3x4GhC+4R7UzpXcRMsTkFDUHq4BiExTf4l2I8/RTrtv9AqrakE14oqyGJdjspzoq0+9fOL4As4VzxH9RmwP3/uPQNBZNPspIHRkaoA+uBNjAO4v39XauMsP4HXfC4jm18SBn5NyKfCvVfJ7HZBCEGCMMcYYY4wxxv7oMwAA///0I2dx") 9.384750877s ago: executing program 4 (id=612): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000800850000008200000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 9.307924212s ago: executing program 4 (id=613): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 9.089597015s ago: executing program 3 (id=615): r0 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(0x0, 0x40100001, 0x189002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) 8.334033439s ago: executing program 4 (id=617): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c00018006000600800a00000800028004001180f53945c58a9e71bba8a3216dbd0a490000ab516f4b5705ba49ec9ea64e376e15e75b44c6d7aee083231538e02a60a15dbf583f51ffa49f1bacc43fd3c12706b0048df79cd71ca4fb97fbc81375b8ca85fec219a7940abce4fe68fb48fc8d87436d4a5f751130b70ae096133f39077eb168259b7c75c91525f776011e28195562446e3ac6690d46ce28c082b6a21fb1391f255d0db8b1bdeeac2724093ec14a1f4f2f17cca9836ca4268a97825c3988329dbe9a4c13"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b37, &(0x7f0000000000)={'wlan0\x00'}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5000000002060102000000000000000000000000040007800500010006000000050005000a00000000686173683a69707400000000090002"], 0x50}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r6 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r6, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 6.95647119s ago: executing program 3 (id=624): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x8ace0a3f86283e7d, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x1000003, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f00000004c0)=[@increfs_done={0x40106308, 0x2}, @request_death={0x400c630e, 0x1}, @release={0x40046306, 0x2}, @request_death={0x400c630e, 0x3}, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000400)={@fd, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, &(0x7f0000000300), 0x0, 0x0, 0x1e}}, 0x0}}], 0x0, 0x0, 0x0}) r7 = dup3(r6, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) 5.948870839s ago: executing program 3 (id=627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000b00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 4.989935846s ago: executing program 3 (id=629): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20008840) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x99}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x60b, 0x0) write$char_usb(r2, 0x0, 0x0) ioctl$EVIOCGREP(r2, 0x80084503, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r3 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) 4.92267318s ago: executing program 0 (id=631): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000007000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 4.833527095s ago: executing program 0 (id=633): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) 4.727832501s ago: executing program 1 (id=634): r0 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(0x0, 0x40100001, 0x189002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) 4.626578528s ago: executing program 0 (id=635): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x4051) recvmsg$unix(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x101) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x1}], 0x1}, 0x48844) 4.398902591s ago: executing program 0 (id=636): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4.269393418s ago: executing program 0 (id=637): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x1000003, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f00000004c0)=[@increfs_done={0x40106308, 0x2}, @request_death={0x400c630e, 0x1}, @release={0x40046306, 0x2}, @request_death={0x400c630e, 0x3}, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000400)={@fd, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, &(0x7f0000000300), 0x0, 0x0, 0x1e}}, 0x0}}], 0x0, 0x0, 0x0}) r7 = dup3(r6, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) 3.239683148s ago: executing program 0 (id=638): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) poll(&(0x7f0000000140)=[{r3, 0x8}], 0x1, 0x8000007) 3.238878219s ago: executing program 2 (id=639): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a80100000001000000d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05000000110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68680183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb166dd02d0e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd00000b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e55a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19953b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a085c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x190, 0x0, 0xfffffffffffffff9, [{{0x1, 0x1, 0x10, 0x6, 0x0, 0xb, {0x2, 0x9, 0xfffffffe, 0x1, 0x3, 0x1, 0x0, 0xfff, 0xd, 0x2000, 0x6, 0x0, r2, 0x80, 0x7}}, {0x82, 0xc4, 0xe2, 0x1, '\\\'}\x00\xadu\xf5,\xbab\xc6P\x050\x80c\x8f\xd1\x8c\x03\x00\x9c\xd1_\x17\n\x8b\xc5,*\xa1\xc1d\xe4B\xbd\xf1;\xe56\x12\xcc\x93B\x0e\x15?\xd1X<\xe2\xc9\xd4]z\xbegqq5@H\x1bQ\xe1\xb1d^+r\x97\xb33\t\n\x15\xd8\xe1\x1a\x95G\xea\xfe\x14\x80\x169\x88\xf4\xd1\xe2b\x86J\xaf\xc5\vY|j\n\x10\x81\x8f\x1c\xf8h\x18/)Q\x81\xe3\x7f_\x01FK\x9fpT\xf1\'\xc5\x14f\xe8O=o\xa2Yl*5\x1c\xdd\x05\x1b\x18\xae\xff\x03\x02\x8d\xbc\xa7\xaa!i\x15\xf2\xde\xb8\x8e\xb0P\x94\xca\xea\xa0\x1c)v~,\xcd}\xdc\x12\x10\xd5\x9e\xb0|\x19\\\x80\"\xf7\xbe\x1b\xd3v)bq\xa6\x8d\xe7\n<-\x1d\xc8\xdar$v[\xb8\xc0\xc1o\x7f\vQ\xc2\xb1%\xee\xfd\x8d1u\xc9\x80\xa95\xac)P\xd9:\x10]'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) 2.952036516s ago: executing program 2 (id=640): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000b00)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 2.852736692s ago: executing program 1 (id=641): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x5) sendmsg$sock(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x6020) 1.920012036s ago: executing program 2 (id=642): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000008c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @empty, 0x7}}, 0x7, 0x3}, &(0x7f0000000540)=0x90) 1.8676827s ago: executing program 4 (id=643): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000ffffffff180800002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000400008500000007000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 1.86278078s ago: executing program 1 (id=644): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x3, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a00000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x21, 0x0, 0x0, 0x0, 0x2100, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.753471336s ago: executing program 4 (id=645): r0 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) clock_gettime(0x9, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8f, 0x3b16) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, r5, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050) 1.655282162s ago: executing program 2 (id=646): socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, 0x0, 0x140) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000380)=""/226}, {&(0x7f0000000300)=""/33}, {&(0x7f0000000480)=""/185}, {&(0x7f00000005c0)=""/83}], 0x0, &(0x7f0000000640)=""/79}, 0x7fb7}, {{&(0x7f0000000700)=@l2={0x1f, 0x0, @fixed}, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)=""/87}, {&(0x7f0000000900)=""/194}, {&(0x7f0000000a00)=""/76}, {&(0x7f0000000b00)=""/245}, {&(0x7f0000000c00)=""/67}, {&(0x7f0000000c80)=""/87}], 0x0, &(0x7f0000000d00)=""/152}, 0x3}, {{&(0x7f0000000dc0)=@in={0x2, 0x0, @private}, 0x0, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/135}, {&(0x7f0000000a80)=""/60}, {&(0x7f0000000f80)=""/221}, {&(0x7f0000000f00)=""/34}, {&(0x7f0000001080)=""/236}]}, 0xeaff}, {{&(0x7f00000011c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x0, &(0x7f0000001240)}, 0xfd32}], 0x80000f7, 0x122, 0x0) mount(0x0, 0x0, &(0x7f0000000580)='nfs4\x00', 0x2be9492, 0x0) r3 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r3, 0xee00, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), 0xffffffffffffffff) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r4, 0x0) 1.654705912s ago: executing program 1 (id=647): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x4051) recvmsg$unix(r0, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x101) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x1}], 0x1}, 0x48844) 1.51327835s ago: executing program 1 (id=648): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x10, 0x0, &(0x7f0000000000)='GPL\x00', 0x1000003, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f00000004c0)=[@increfs_done={0x40106308, 0x2}, @request_death={0x400c630e, 0x1}, @release={0x40046306, 0x2}, @request_death={0x400c630e, 0x3}, @exit_looper, @dead_binder_done, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000400)={@fd, @fd={0x66642a85, 0x0, r5}, @ptr={0x70742a85, 0x1, &(0x7f0000000300), 0x0, 0x0, 0x1e}}, 0x0}}], 0x0, 0x0, 0x0}) r7 = dup3(r6, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) 264.925904ms ago: executing program 3 (id=649): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0401273, 0x0) ioprio_get$pid(0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x8c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$kcm(0xa, 0x5, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x2, 0x7, 0x13) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) 199.650908ms ago: executing program 1 (id=650): io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000006040), 0x803) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8001) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040832}, 0xc094) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$BLKTRACETEARDOWN(r5, 0x1276, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r6, 0x0, 0xb8) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) 0s ago: executing program 4 (id=651): r0 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(0x0, 0x40100001, 0x189002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) r3 = accept(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0xffffffffffffffc3, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.212' (ED25519) to the list of known hosts. [ 65.561956][ T4171] cgroup: Unknown subsys name 'net' [ 65.694293][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.257707][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 68.753950][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 68.783997][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 68.845896][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 68.894295][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 68.950732][ T4194] chnl_net:caif_netlink_parms(): no params data found [ 69.002204][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.009839][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.019078][ T4188] device bridge_slave_0 entered promiscuous mode [ 69.028449][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.035561][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.044453][ T4183] device bridge_slave_0 entered promiscuous mode [ 69.072846][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.080202][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.088736][ T4188] device bridge_slave_1 entered promiscuous mode [ 69.096305][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.103606][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.112128][ T4183] device bridge_slave_1 entered promiscuous mode [ 69.161127][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.180361][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.187707][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.195621][ T4192] device bridge_slave_0 entered promiscuous mode [ 69.211637][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.219709][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.228310][ T4192] device bridge_slave_1 entered promiscuous mode [ 69.241866][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.258960][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.276628][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.295114][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.302585][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.311078][ T4190] device bridge_slave_0 entered promiscuous mode [ 69.350459][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.357808][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.366031][ T4190] device bridge_slave_1 entered promiscuous mode [ 69.375931][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.395786][ T4183] team0: Port device team_slave_0 added [ 69.402291][ T4194] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.409561][ T4194] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.418052][ T4194] device bridge_slave_0 entered promiscuous mode [ 69.433616][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.445131][ T4188] team0: Port device team_slave_0 added [ 69.453550][ T4188] team0: Port device team_slave_1 added [ 69.461272][ T4183] team0: Port device team_slave_1 added [ 69.467851][ T4194] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.475048][ T4194] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.483996][ T4194] device bridge_slave_1 entered promiscuous mode [ 69.540051][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.560308][ T4192] team0: Port device team_slave_0 added [ 69.574064][ T4194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.585125][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.595393][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.602638][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.628981][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.644053][ T4192] team0: Port device team_slave_1 added [ 69.651840][ T4194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.661794][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.669114][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.695126][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.720305][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.727877][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.754808][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.780672][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.788282][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.814790][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.860267][ T4194] team0: Port device team_slave_0 added [ 69.869747][ T4190] team0: Port device team_slave_0 added [ 69.876663][ T4194] team0: Port device team_slave_1 added [ 69.892621][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.899816][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.926183][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.955309][ T4190] team0: Port device team_slave_1 added [ 69.981475][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.989466][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.015539][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.031517][ T4183] device hsr_slave_0 entered promiscuous mode [ 70.038818][ T4183] device hsr_slave_1 entered promiscuous mode [ 70.051825][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.059081][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.085696][ T4194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.101049][ T4188] device hsr_slave_0 entered promiscuous mode [ 70.108102][ T4188] device hsr_slave_1 entered promiscuous mode [ 70.114982][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.123034][ T4188] Cannot create hsr debugfs directory [ 70.157849][ T4194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.164856][ T4194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.191434][ T4194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.225062][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.232436][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.258927][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.289514][ T4192] device hsr_slave_0 entered promiscuous mode [ 70.296376][ T4192] device hsr_slave_1 entered promiscuous mode [ 70.303625][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.311362][ T4192] Cannot create hsr debugfs directory [ 70.325135][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.333069][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.340028][ T2856] Bluetooth: hci0: command 0x0409 tx timeout [ 70.360277][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.417437][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 70.442568][ T4194] device hsr_slave_0 entered promiscuous mode [ 70.450144][ T4194] device hsr_slave_1 entered promiscuous mode [ 70.457066][ T4194] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.465094][ T4194] Cannot create hsr debugfs directory [ 70.497361][ T2856] Bluetooth: hci2: command 0x0409 tx timeout [ 70.497402][ T4184] Bluetooth: hci4: command 0x0409 tx timeout [ 70.515443][ T4184] Bluetooth: hci3: command 0x0409 tx timeout [ 70.559066][ T4190] device hsr_slave_0 entered promiscuous mode [ 70.566217][ T4190] device hsr_slave_1 entered promiscuous mode [ 70.573473][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.581257][ T4190] Cannot create hsr debugfs directory [ 70.837366][ T4188] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.854663][ T4188] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.864381][ T4188] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.879741][ T4188] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.937829][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.949765][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.960212][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.970051][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.988398][ T4194] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.008357][ T4194] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.030905][ T4194] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.051923][ T4194] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.121913][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.132293][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.149598][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.165262][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.183522][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.242714][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.259468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.273951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.301311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.310586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.321209][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.328840][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.362429][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.371027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.381476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.391468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.401085][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.408233][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.430802][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.445460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.462037][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.469165][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.478561][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.492117][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.504630][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.526048][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.535482][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.543937][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.558853][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.565836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.575363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.609092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.620368][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.629226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.638172][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.646814][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.655985][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.664982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.692453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.702346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.714499][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.721666][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.733198][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.744487][ T4194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.762330][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.784551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.796912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.812173][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.819667][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.837084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.873307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.882762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.904316][ T4194] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.915173][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.926251][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.936700][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.953306][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.969619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.982920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.006013][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.042082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.056266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.065431][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.072612][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.086328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.094393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.103595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.113943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.123027][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.130307][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.138991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.151464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.160494][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.170867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.188549][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.209573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.220229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.230875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.241121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.248869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.256351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.265562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.277025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.286295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.295608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.313188][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.325307][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.334948][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.351886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.364205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.385465][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.403391][ T4194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.420443][ T4194] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.428463][ T4250] Bluetooth: hci0: command 0x041b tx timeout [ 72.447057][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 72.456000][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 72.465402][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.474315][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.483767][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.493386][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.502721][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.508781][ T4250] Bluetooth: hci1: command 0x041b tx timeout [ 72.510138][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.524451][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.533557][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.542311][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.549612][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.558153][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.566978][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.577797][ T4250] Bluetooth: hci3: command 0x041b tx timeout [ 72.584084][ T4250] Bluetooth: hci4: command 0x041b tx timeout [ 72.605975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.607857][ T4250] Bluetooth: hci2: command 0x041b tx timeout [ 72.630906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.664313][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.671595][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.686021][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.695035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.706086][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.713257][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.723012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.741308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.750703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.762224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.771360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.781714][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.791026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.800915][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.824392][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.835298][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.871176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.879278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.886830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.896247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.907911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.916552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.925268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.934596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.943795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.953668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.962863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.973322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.983123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.000345][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.028610][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 73.042030][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.055567][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 73.073077][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.123460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.141425][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.155733][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 73.167130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.179285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.191496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.205715][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.214969][ T4188] device veth0_vlan entered promiscuous mode [ 73.251055][ T4194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.261853][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.272125][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.289040][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.296706][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.325978][ T4183] device veth0_vlan entered promiscuous mode [ 73.346166][ T4188] device veth1_vlan entered promiscuous mode [ 73.367782][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.387632][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.408042][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.429003][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.440215][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.465696][ T4183] device veth1_vlan entered promiscuous mode [ 73.493774][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.506433][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.515259][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.523269][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.553946][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.578676][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.594234][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.604696][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.628096][ T4188] device veth0_macvtap entered promiscuous mode [ 73.658025][ T4183] device veth0_macvtap entered promiscuous mode [ 73.665634][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.675144][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.686577][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.695745][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.706538][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.719227][ T4188] device veth1_macvtap entered promiscuous mode [ 73.733903][ T4183] device veth1_macvtap entered promiscuous mode [ 73.744879][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.761837][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.774658][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.825256][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.839657][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.853636][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.868331][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.876760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.891476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.899700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.908816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.918125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.927501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.943295][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.953460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.963070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.975227][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.985140][ T4190] device veth0_vlan entered promiscuous mode [ 73.993235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.003420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.014437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.024272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.050334][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.061895][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.073830][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.086750][ T4188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.100047][ T4188] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.109111][ T4188] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.118547][ T4188] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.152025][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.161438][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.170813][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.182443][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.193422][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.202764][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.216821][ T4190] device veth1_vlan entered promiscuous mode [ 74.253346][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.262186][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.270862][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.280777][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.319965][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.334218][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.355656][ T4194] device veth0_vlan entered promiscuous mode [ 74.388745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.397126][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.410628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.422553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.446650][ T4190] device veth0_macvtap entered promiscuous mode [ 74.462436][ T4190] device veth1_macvtap entered promiscuous mode [ 74.474500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.486259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.495056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.503457][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 74.511672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.529868][ T4194] device veth1_vlan entered promiscuous mode [ 74.572815][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.586284][ T4234] Bluetooth: hci1: command 0x040f tx timeout [ 74.595524][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.604110][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.612890][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.621976][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.630556][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.642541][ T4192] device veth0_vlan entered promiscuous mode [ 74.658647][ T4234] Bluetooth: hci2: command 0x040f tx timeout [ 74.665016][ T4234] Bluetooth: hci4: command 0x040f tx timeout [ 74.671904][ T4234] Bluetooth: hci3: command 0x040f tx timeout [ 74.690701][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.707560][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.716439][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.729891][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.741087][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.752684][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.764194][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.796973][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.812900][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.828142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.839390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.848663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.857621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.866479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.876346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.887643][ T4194] device veth0_macvtap entered promiscuous mode [ 74.896319][ T4192] device veth1_vlan entered promiscuous mode [ 74.906415][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.917745][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.939293][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.950361][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.964773][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.984105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.993210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.001724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.010882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.043815][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.053059][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.063681][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.072578][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.088113][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.096237][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.119539][ T4194] device veth1_macvtap entered promiscuous mode [ 75.135771][ T1269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.154058][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.173792][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.187585][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.201568][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.211935][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.225065][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.236155][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.246787][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.266208][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.292081][ T4192] device veth0_macvtap entered promiscuous mode [ 75.318303][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.331236][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.344579][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.355684][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.367960][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.379953][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.393125][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.403891][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.417543][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.428751][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.440497][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.452375][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.473117][ T4192] device veth1_macvtap entered promiscuous mode [ 75.489172][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.499321][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.513890][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.523078][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.539987][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.548978][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.558707][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.570325][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.656813][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.668887][ T4297] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.688719][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.701388][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.720176][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.733834][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.750582][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.763752][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.791426][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.843968][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.895826][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.920068][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.945088][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.960402][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.970932][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.981645][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.991553][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.003545][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.015052][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.026995][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.040389][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.128203][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.140532][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.351361][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.873205][ T1107] Bluetooth: hci0: command 0x0419 tx timeout [ 77.011812][ T1107] Bluetooth: hci1: command 0x0419 tx timeout [ 77.019269][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.043621][ T4250] Bluetooth: hci3: command 0x0419 tx timeout [ 77.058130][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.058203][ T4250] Bluetooth: hci4: command 0x0419 tx timeout [ 77.331159][ T4250] Bluetooth: hci2: command 0x0419 tx timeout [ 77.453230][ T4192] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.490255][ T4192] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.508483][ T4192] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.525546][ T4192] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.768345][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.858302][ T4313] netlink: 'syz.1.7': attribute type 1 has an invalid length. [ 77.866449][ T4313] netlink: 'syz.1.7': attribute type 2 has an invalid length. [ 78.009643][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.284242][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.486936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.494688][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.512871][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.548883][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.562029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.583877][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.835730][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.874242][ T4320] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 78.886500][ T4320] FAT-fs (loop3): unable to read boot sector [ 79.655171][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.672752][ T4279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.704930][ T4279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.799352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 79.833192][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.028880][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 81.048808][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 81.171922][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.181896][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.191245][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.200797][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.210400][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.220088][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.229454][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 81.238938][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 82.657209][ C0] sched: RT throttling activated [ 83.617736][ T4345] loop2: detected capacity change from 0 to 164 [ 84.379102][ T4345] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 84.719427][ T4347] loop3: detected capacity change from 0 to 4096 [ 88.150431][ T7] cfg80211: failed to load regulatory.db [ 93.073670][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 94.516010][ T4389] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 94.526125][ T4389] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 94.535757][ T4389] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 94.546555][ T26] audit: type=1800 audit(1769144484.101:2): pid=4389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.22" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 94.916683][ T4389] syz.0.22 (4389) used greatest stack depth: 18768 bytes left [ 95.838816][ T4406] loop2: detected capacity change from 0 to 8 [ 97.150720][ T4427] loop1: detected capacity change from 0 to 256 [ 97.160351][ T4422] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 97.680907][ T4427] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 100.728365][ T4229] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.737520][ T4449] ODEBUG: Out of memory. ODEBUG disabled [ 101.936918][ T4456] netlink: 'syz.0.41': attribute type 3 has an invalid length. [ 101.967390][ T4229] usb 4-1: device not accepting address 2, error -71 [ 102.046251][ T4456] netlink: 'syz.0.41': attribute type 10 has an invalid length. [ 102.215893][ T4463] loop2: detected capacity change from 0 to 8 [ 102.259805][ T4456] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.287818][ T4456] bond0: (slave team0): Enslaving as an active interface with an up link [ 103.970353][ T4246] Bluetooth: hci2: command 0x0406 tx timeout [ 104.056854][ T4481] loop0: detected capacity change from 0 to 512 [ 104.173136][ T4481] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 104.304347][ T4481] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 104.418025][ T4481] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.47: invalid indirect mapped block 2683928664 (level 1) [ 104.487431][ T4481] EXT4-fs (loop0): Remounting filesystem read-only [ 104.515106][ T4481] EXT4-fs (loop0): 1 truncate cleaned up [ 104.554779][ T4481] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 104.666453][ T26] audit: type=1800 audit(1769144494.251:3): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.47" name="file0" dev="loop0" ino=13 res=0 errno=0 [ 104.750311][ T4500] loop3: detected capacity change from 0 to 8 [ 105.488784][ T4500] cramfs: Unknown parameter 'K' [ 105.583271][ T4505] loop4: detected capacity change from 0 to 2048 [ 105.721063][ T4505] Alternate GPT is invalid, using primary GPT. [ 105.765536][ T4484] loop1: detected capacity change from 0 to 32768 [ 105.787454][ T4505] loop4: p2 p3 p7 [ 105.948746][ T4484] ======================================================= [ 105.948746][ T4484] WARNING: The mand mount option has been deprecated and [ 105.948746][ T4484] and is ignored by this kernel. Remove the mand [ 105.948746][ T4484] option from the mount to silence this warning. [ 105.948746][ T4484] ======================================================= [ 106.226223][ T4484] XFS (loop1): Mounting V5 Filesystem [ 106.496616][ T4484] XFS (loop1): Ending clean mount [ 106.613888][ T4438] udevd[4438]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 106.626768][ T4291] udevd[4291]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 106.668842][ T4356] udevd[4356]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 106.963103][ T4546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.61'. [ 107.517929][ T4554] netlink: 'syz.3.63': attribute type 27 has an invalid length. [ 107.593506][ T4183] XFS (loop1): Unmounting Filesystem [ 107.700779][ T4557] loop4: detected capacity change from 0 to 512 [ 108.448322][ T4554] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.456439][ T4554] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.607339][ T4246] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 108.967759][ T4246] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.017040][ T4246] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 109.064426][ T4246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.206945][ T4246] usb 1-1: config 0 descriptor?? [ 109.350509][ T4246] pwc: Askey VC010 type 2 USB webcam detected. [ 109.757334][ T4246] pwc: recv_control_msg error -32 req 02 val 2b00 [ 109.797338][ T4246] pwc: recv_control_msg error -32 req 02 val 2700 [ 109.837393][ T4246] pwc: recv_control_msg error -32 req 02 val 2c00 [ 109.858944][ T4554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.877326][ T4246] pwc: recv_control_msg error -32 req 04 val 1000 [ 109.917337][ T4246] pwc: recv_control_msg error -32 req 04 val 1300 [ 109.926907][ T4554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.957489][ T4246] pwc: recv_control_msg error -32 req 04 val 1400 [ 110.017369][ T4246] pwc: recv_control_msg error -32 req 02 val 2000 [ 110.077438][ T4246] pwc: recv_control_msg error -32 req 02 val 2100 [ 110.117380][ T4246] pwc: recv_control_msg error -32 req 04 val 1500 [ 110.157375][ T4246] pwc: recv_control_msg error -32 req 02 val 2500 [ 110.197545][ T4246] pwc: recv_control_msg error -32 req 02 val 2400 [ 110.237454][ T4246] pwc: recv_control_msg error -32 req 02 val 2600 [ 110.457148][ T4554] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.466792][ T4554] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.475822][ T4554] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.484886][ T4554] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.497644][ T4246] pwc: recv_control_msg error -71 req 02 val 2800 [ 110.523907][ T4246] pwc: recv_control_msg error -71 req 04 val 1100 [ 110.547623][ T4246] pwc: recv_control_msg error -71 req 04 val 1200 [ 110.573549][ T4246] pwc: Registered as video103. [ 110.602218][ T4246] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 110.656672][ T4246] usb 1-1: USB disconnect, device number 2 [ 110.697857][ T4555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.63'. [ 112.545007][ T4598] loop3: detected capacity change from 0 to 128 [ 115.942856][ T4612] sctp: failed to load transform for md5: -2 [ 116.960005][ T4623] loop4: detected capacity change from 0 to 512 [ 118.252944][ T4641] syz.0.82 uses obsolete (PF_INET,SOCK_PACKET) [ 118.297117][ T4641] device syzkaller1 entered promiscuous mode [ 118.850661][ T4648] loop4: detected capacity change from 0 to 4096 [ 118.935600][ T4648] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 121.457510][ T4670] sctp: failed to load transform for md5: -2 [ 121.542294][ T4648] fscrypt: Error allocating hmac(sha512): -2 [ 121.548418][ T4648] EXT4-fs (loop4): Error processing option "test_dummy_encryption" [-2] [ 121.723010][ T4690] loop2: detected capacity change from 0 to 512 [ 121.748567][ T4675] tipc: Started in network mode [ 121.758128][ T4675] tipc: Node identity ba72302d6c59, cluster identity 4711 [ 121.803602][ T4675] tipc: Enabled bearer , priority 0 [ 121.893190][ T4674] tipc: Disabling bearer [ 122.256493][ T4697] loop1: detected capacity change from 0 to 164 [ 122.646895][ T4697] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 124.378941][ T4720] loop1: detected capacity change from 0 to 8 [ 126.069962][ T4740] loop3: detected capacity change from 0 to 512 [ 126.137259][ T4743] SQUASHFS error: lzo decompression failed, data probably corrupt [ 126.145442][ T4743] SQUASHFS error: Failed to read block 0x0: -5 [ 126.151759][ T4743] SQUASHFS error: Unable to read data cache entry [0] [ 126.158575][ T4743] SQUASHFS error: Unable to read page, block 0, size ff [ 126.165814][ T4743] SQUASHFS error: Unable to read data cache entry [0] [ 126.172659][ T4743] SQUASHFS error: Unable to read page, block 0, size ff [ 126.211681][ T4743] SQUASHFS error: lzo decompression failed, data probably corrupt [ 126.219693][ T4743] SQUASHFS error: Failed to read block 0x0: -5 [ 126.226335][ T4743] SQUASHFS error: lzo decompression failed, data probably corrupt [ 126.234271][ T4743] SQUASHFS error: Failed to read block 0x0: -5 [ 126.248320][ T4743] SQUASHFS error: lzo decompression failed, data probably corrupt [ 126.256348][ T4743] SQUASHFS error: Failed to read block 0x0: -5 [ 126.263718][ T26] audit: type=1800 audit(1769144515.861:4): pid=4743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.99" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 127.215218][ T4758] Zero length message leads to an empty skb [ 127.492495][ T4762] loop1: detected capacity change from 0 to 164 [ 128.618192][ T4762] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 130.750319][ T4778] device syzkaller0 entered promiscuous mode [ 131.166372][ T4795] loop1: detected capacity change from 0 to 512 [ 132.900458][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.906995][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.900709][ T4854] loop2: detected capacity change from 0 to 512 [ 138.970774][ T4917] loop2: detected capacity change from 0 to 40427 [ 139.100187][ T4917] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 139.207461][ T4917] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 140.106457][ T4940] ALSA: mixer_oss: invalid OSS volume '' [ 140.120172][ T4917] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 141.037738][ T4964] loop0: detected capacity change from 0 to 40427 [ 141.504698][ T4964] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 141.511813][ T4964] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 141.530596][ T4964] F2FS-fs (loop0): invalid crc value [ 141.609152][ T4964] F2FS-fs (loop0): Found nat_bits in checkpoint [ 141.668239][ T4964] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 141.675745][ T4964] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 142.895617][ T4987] ALSA: mixer_oss: invalid OSS volume '' [ 144.465161][ T5017] blktrace: Concurrent blktraces are not allowed on loop4 [ 144.839857][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 145.246202][ T21] usb 5-1: device descriptor read/64, error -71 [ 145.547316][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 145.826677][ T21] usb 5-1: device descriptor read/64, error -71 [ 145.963110][ T21] usb usb5-port1: attempt power cycle [ 145.973248][ T5035] loop1: detected capacity change from 0 to 512 [ 146.987224][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 147.137404][ T21] usb 5-1: device descriptor read/8, error -71 [ 153.339156][ T5143] nr0: tun_chr_ioctl cmd 2148553947 [ 156.519703][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880614cf800: rx timeout, send abort [ 156.529316][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880614cf800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 158.408244][ T5198] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 158.441085][ T5198] syzkaller0: linktype set to 823 [ 160.014551][ T5223] loop0: detected capacity change from 0 to 164 [ 160.354733][ T5223] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 160.734408][ T5235] device syzkaller0 entered promiscuous mode [ 161.512197][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880265b9000: rx timeout, send abort [ 161.521216][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880265b9000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 162.405082][ T5256] loop3: detected capacity change from 0 to 40427 [ 162.414483][ T5256] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 162.421730][ T5256] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 162.432345][ T5256] F2FS-fs (loop3): invalid crc value [ 162.565179][ T5256] F2FS-fs (loop3): Found nat_bits in checkpoint [ 162.608595][ T5256] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 162.615750][ T5256] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 163.603286][ T5276] loop1: detected capacity change from 0 to 164 [ 163.866153][ T5276] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 166.167440][ T5302] loop2: detected capacity change from 0 to 40427 [ 166.423937][ T5302] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 166.431303][ T5302] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 166.441537][ T5302] F2FS-fs (loop2): invalid crc value [ 166.533583][ T5302] F2FS-fs (loop2): Found nat_bits in checkpoint [ 166.603062][ T5302] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 166.610406][ T5302] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 168.208962][ T5338] loop1: detected capacity change from 0 to 164 [ 168.639293][ T5338] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 170.126301][ T5362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.315'. [ 170.224998][ T5362] device bond0 entered promiscuous mode [ 170.230869][ T5362] device bond_slave_0 entered promiscuous mode [ 170.237297][ T5362] device bond_slave_1 entered promiscuous mode [ 170.435045][ T5368] loop2: detected capacity change from 0 to 40427 [ 170.520735][ T5368] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 170.528176][ T5368] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 170.538983][ T5368] F2FS-fs (loop2): invalid crc value [ 170.680901][ T5368] F2FS-fs (loop2): Found nat_bits in checkpoint [ 171.480371][ C1] vcan0: j1939_tp_rxtimer: 0xffff888061b13c00: rx timeout, send abort [ 171.491501][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888061b13c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 171.607306][ T5368] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 171.614413][ T5368] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 174.313314][ T5430] loop3: detected capacity change from 0 to 164 [ 175.108895][ T5425] netlink: 52 bytes leftover after parsing attributes in process `syz.0.333'. [ 175.206315][ T5430] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 176.053908][ T5455] netlink: 'syz.2.341': attribute type 1 has an invalid length. [ 176.062028][ T5455] netlink: 'syz.2.341': attribute type 2 has an invalid length. [ 177.032366][ T5459] blk_update_request: I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 177.043708][ T5459] FAT-fs (loop1): unable to read boot sector [ 178.154870][ T5472] loop1: detected capacity change from 0 to 164 [ 178.984423][ T5472] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 179.532413][ T5479] loop0: detected capacity change from 0 to 164 [ 180.222485][ T5479] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 184.125923][ T5510] loop3: detected capacity change from 0 to 40427 [ 184.307427][ T5510] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 184.314445][ T5510] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 184.324183][ T5510] F2FS-fs (loop3): invalid crc value [ 185.210177][ T5510] F2FS-fs (loop3): Found nat_bits in checkpoint [ 185.312585][ T5510] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 185.320507][ T5510] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 185.776255][ T5534] loop0: detected capacity change from 0 to 164 [ 186.008575][ T5534] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 187.877621][ T5567] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 188.115577][ T5573] loop0: detected capacity change from 0 to 40427 [ 188.162791][ T5573] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 188.169845][ T5573] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 188.183260][ T5573] F2FS-fs (loop0): invalid crc value [ 188.253724][ T5573] F2FS-fs (loop0): Found nat_bits in checkpoint [ 188.302684][ T5573] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 188.309837][ T5573] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 188.766482][ T5593] loop2: detected capacity change from 0 to 164 [ 188.881538][ T5593] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 191.314212][ T5630] loop4: detected capacity change from 0 to 40427 [ 191.420095][ T5630] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 191.427659][ T5630] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 191.441949][ T5630] F2FS-fs (loop4): invalid crc value [ 191.495869][ T5630] F2FS-fs (loop4): Found nat_bits in checkpoint [ 191.575775][ T5630] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 191.582992][ T5630] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 192.212368][ T5658] loop2: detected capacity change from 0 to 164 [ 192.905682][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 193.047701][ T5658] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 193.059615][ T7] Bluetooth: hci3: command 0x0406 tx timeout [ 193.065973][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 193.072855][ T7] Bluetooth: hci1: command 0x0406 tx timeout [ 193.953123][ T5694] loop2: detected capacity change from 0 to 40427 [ 194.087090][ T5694] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 194.094163][ T5694] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 194.112669][ T5694] F2FS-fs (loop2): invalid crc value [ 194.300114][ T5694] F2FS-fs (loop2): Found nat_bits in checkpoint [ 194.388585][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.396086][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.597243][ T5694] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 194.604354][ T5694] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 194.615271][ T5707] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 194.626803][ T5707] SQUASHFS error: Failed to read block 0x0: -5 [ 194.701348][ T5708] loop4: detected capacity change from 0 to 512 [ 195.360921][ T5716] sctp: failed to load transform for md5: -2 [ 196.198511][ T4184] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 196.647710][ T4184] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 196.914380][ T5748] loop2: detected capacity change from 0 to 512 [ 196.968685][ T5748] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.997390][ T4184] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.050410][ T4184] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.074227][ T5748] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 197.093120][ T5748] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.425: invalid indirect mapped block 2683928664 (level 1) [ 197.097816][ T4184] usb 1-1: Product: syz [ 197.118128][ T5755] loop4: detected capacity change from 0 to 512 [ 197.122997][ T4184] usb 1-1: Manufacturer: syz [ 197.138683][ T4184] usb 1-1: SerialNumber: syz [ 197.156007][ T5748] EXT4-fs (loop2): Remounting filesystem read-only [ 197.173451][ T5748] EXT4-fs (loop2): 1 truncate cleaned up [ 197.200544][ T5748] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 197.477497][ T26] audit: type=1800 audit(1769144587.061:5): pid=5748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.425" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 197.514962][ T26] audit: type=1800 audit(1769144587.061:6): pid=5748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.425" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 198.527554][ T4184] cdc_ncm 1-1:1.0: bind() failure [ 198.536929][ T4184] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 198.753921][ T4184] cdc_ncm 1-1:1.1: bind() failure [ 198.763103][ T4184] usb 1-1: USB disconnect, device number 3 [ 199.070212][ T5774] ALSA: mixer_oss: invalid OSS volume '' [ 200.021137][ T5790] netlink: 'syz.2.439': attribute type 3 has an invalid length. [ 200.050493][ T5790] netlink: 'syz.2.439': attribute type 10 has an invalid length. [ 200.076297][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.245878][ T5790] bond0: (slave team0): Enslaving as an active interface with an up link [ 201.871142][ T5791] loop3: detected capacity change from 0 to 40427 [ 202.100403][ T5822] loop2: detected capacity change from 0 to 64 [ 203.493791][ T5822] overlayfs: missing 'workdir' [ 205.161303][ T5837] debugfs: File 'dropped' in directory 'loop6' already present! [ 205.169459][ T5837] debugfs: File 'msg' in directory 'loop6' already present! [ 205.177057][ T5837] debugfs: File 'trace0' in directory 'loop6' already present! [ 205.491622][ T5833] ALSA: mixer_oss: invalid OSS volume '' [ 205.972733][ T5843] loop2: detected capacity change from 0 to 40427 [ 206.129440][ T5843] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 206.136498][ T5843] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 206.148273][ T5843] F2FS-fs (loop2): invalid crc value [ 206.223081][ T5843] F2FS-fs (loop2): Found nat_bits in checkpoint [ 206.288531][ T5843] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 206.295637][ T5843] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 208.653623][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f523c00: rx timeout, send abort [ 208.655091][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f523c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 209.777071][ T5877] loop3: detected capacity change from 0 to 164 [ 210.131235][ T5877] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 211.384134][ T5882] ALSA: mixer_oss: invalid OSS volume '' [ 212.851955][ T5892] loop3: detected capacity change from 0 to 64 [ 212.902083][ T5892] overlayfs: missing 'workdir' [ 213.383670][ T5897] loop4: detected capacity change from 0 to 40427 [ 213.972324][ T5897] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504) [ 213.979378][ T5897] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 213.995803][ T5897] F2FS-fs (loop4): invalid crc value [ 214.051511][ T5897] F2FS-fs (loop4): Found nat_bits in checkpoint [ 214.137749][ T5897] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 214.144861][ T5897] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 214.171911][ T5915] loop0: detected capacity change from 0 to 512 [ 214.600159][ T5922] loop3: detected capacity change from 0 to 164 [ 216.251469][ T5922] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 216.988277][ T5944] blktrace: Concurrent blktraces are not allowed on loop8 [ 217.165681][ T5934] ALSA: mixer_oss: invalid OSS volume '' [ 217.762076][ T5957] loop3: detected capacity change from 0 to 64 [ 220.695376][ T5978] loop2: detected capacity change from 0 to 512 [ 221.823468][ T6000] loop2: detected capacity change from 0 to 8 [ 222.610465][ T6006] loop0: detected capacity change from 0 to 64 [ 222.828657][ T6006] overlayfs: missing 'workdir' [ 229.017045][ T6042] loop2: detected capacity change from 0 to 262144 [ 229.532741][ T6064] loop1: detected capacity change from 0 to 8 [ 230.587929][ T6077] sctp: failed to load transform for md5: -2 [ 232.226095][ T6102] debugfs: File 'dropped' in directory 'loop8' already present! [ 232.235440][ T6102] debugfs: File 'msg' in directory 'loop8' already present! [ 232.242988][ T6102] debugfs: File 'trace0' in directory 'loop8' already present! [ 237.483278][ T6133] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 237.494385][ T6133] FAT-fs (loop5): unable to read boot sector [ 239.362408][ T6143] loop3: detected capacity change from 0 to 164 [ 239.477686][ T6143] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 241.571143][ T6166] loop3: detected capacity change from 0 to 8 [ 242.298015][ T6166] cramfs: Unknown parameter 'K' [ 242.826238][ T6173] loop3: detected capacity change from 0 to 40427 [ 242.879370][ T6173] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 242.886367][ T6173] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 242.896302][ T6173] F2FS-fs (loop3): invalid crc value [ 243.063877][ T6173] F2FS-fs (loop3): Found nat_bits in checkpoint [ 243.098944][ T6173] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 243.106071][ T6173] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 244.048229][ T6189] loop4: detected capacity change from 0 to 164 [ 244.093484][ T6189] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 247.244173][ T6222] loop0: detected capacity change from 0 to 40427 [ 247.648264][ T6225] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 247.660138][ T6225] FAT-fs (loop7): unable to read boot sector [ 248.794822][ T6222] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 248.802054][ T6222] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 248.819593][ T6222] F2FS-fs (loop0): invalid crc value [ 248.877450][ T6222] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 250.947261][ T6259] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 250.959067][ T6259] FAT-fs (loop7): unable to read boot sector [ 253.128695][ T6268] loop0: detected capacity change from 0 to 40427 [ 253.326520][ T6268] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 253.333618][ T6268] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 253.365271][ T6268] F2FS-fs (loop0): invalid crc value [ 253.501344][ T6268] F2FS-fs (loop0): Found nat_bits in checkpoint [ 253.557380][ T6268] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 253.564476][ T6268] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 254.521367][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz.1.585'. [ 256.636427][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.642882][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.082800][ T6311] loop2: detected capacity change from 0 to 512 [ 259.442802][ T6322] loop1: detected capacity change from 0 to 8 [ 259.619813][ T6322] cramfs: Unknown parameter 'K' [ 260.853286][ T6335] loop1: detected capacity change from 0 to 40427 [ 260.913207][ T6335] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 260.920295][ T6335] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 260.930526][ T6335] F2FS-fs (loop1): invalid crc value [ 260.966500][ T6335] F2FS-fs (loop1): Found nat_bits in checkpoint [ 265.358362][ T6369] loop3: detected capacity change from 0 to 8 [ 266.468003][ T6369] cramfs: Unknown parameter 'K' [ 266.492709][ T6359] udevd[6359]: incorrect cramfs checksum on /dev/loop3 [ 268.192102][ T6391] blktrace: Concurrent blktraces are not allowed on loop4 [ 268.872761][ T6407] netlink: 40 bytes leftover after parsing attributes in process `syz.4.617'. [ 271.137394][ T4574] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 271.493009][ T4574] usb 4-1: Using ep0 maxpacket: 16 [ 271.727491][ T4574] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 271.741266][ T4574] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 272.478070][ T4574] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.505119][ T4574] usb 4-1: config 1 interface 0 has no altsetting 0 [ 272.677412][ T4574] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 272.686606][ T4574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.747238][ T4574] usb 4-1: Product: syz [ 272.767166][ T4574] usb 4-1: Manufacturer: syz [ 272.774026][ T4574] usb 4-1: SerialNumber: syz [ 273.109363][ T4574] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 275.368632][ T1107] usb 4-1: USB disconnect, device number 4 [ 275.396045][ T1107] usblp0: removed [ 275.630309][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805f92ec00: rx timeout, send abort [ 275.638891][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f92ec00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 275.990863][ T6490] debugfs: File 'dropped' in directory 'loop2' already present! [ 275.999159][ T6490] debugfs: File 'msg' in directory 'loop2' already present! [ 276.006653][ T6490] debugfs: File 'trace0' in directory 'loop2' already present! [ 276.267591][ C0] ================================================================== [ 276.275999][ C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 276.283515][ C0] Read of size 2 at addr ffff888022c5c02a by task syz.4.651/6486 [ 276.291263][ C0] [ 276.293631][ C0] CPU: 0 PID: 6486 Comm: syz.4.651 Not tainted syzkaller #0 [ 276.300942][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 276.311041][ C0] Call Trace: [ 276.314374][ C0] [ 276.317332][ C0] dump_stack_lvl+0x188/0x250 [ 276.322050][ C0] ? show_regs_print_info+0x20/0x20 [ 276.327312][ C0] ? _printk+0xda/0x130 [ 276.331499][ C0] ? rose_timer_expiry+0x470/0x490 [ 276.336648][ C0] ? load_image+0x400/0x400 [ 276.341197][ C0] ? lock_acquire+0x208/0x400 [ 276.345995][ C0] print_address_description+0x60/0x2d0 [ 276.351616][ C0] ? rose_timer_expiry+0x470/0x490 [ 276.356761][ C0] kasan_report+0xdf/0x130 [ 276.361225][ C0] ? rose_timer_expiry+0x470/0x490 [ 276.366370][ C0] rose_timer_expiry+0x470/0x490 [ 276.371339][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 276.376404][ C0] call_timer_fn+0x17b/0x540 [ 276.381035][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 276.386204][ C0] ? __run_timers+0x7f0/0x7f0 [ 276.390919][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 276.396148][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 276.401505][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 276.406660][ C0] __run_timers+0x53a/0x7f0 [ 276.411232][ C0] ? detach_timer+0x2b0/0x2b0 [ 276.416021][ C0] run_timer_softirq+0x63/0xf0 [ 276.420822][ C0] handle_softirqs+0x339/0x830 [ 276.425619][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 276.430507][ C0] ? do_softirq+0x210/0x210 [ 276.435060][ C0] __irq_exit_rcu+0x13b/0x230 [ 276.439769][ C0] ? irq_exit_rcu+0x20/0x20 [ 276.444310][ C0] irq_exit_rcu+0x5/0x20 [ 276.448673][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 276.454342][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 276.460374][ C0] RIP: 0033:0x7fd0489b9781 [ 276.464975][ C0] Code: 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 c3 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 7c [ 276.484714][ C0] RSP: 002b:00007ffde507c358 EFLAGS: 00000246 [ 276.490849][ C0] RAX: 0000000081854cad RBX: ffffffff81854cad RCX: ffffffff81854cad [ 276.498854][ C0] RDX: 0000000000000cad RSI: ffffffff81854cad RDI: 0000000000000005 [ 276.506855][ C0] RBP: 0000000000000000 R08: 00007fd048d6a000 R09: 00007fd048d6c000 [ 276.514859][ C0] R10: 0000000081854cb1 R11: 0000000000000005 R12: 00007fd048d80038 [ 276.523296][ C0] R13: 000000000001c025 R14: ffffffff8185488f R15: 00007fd0498af720 [ 276.531305][ C0] ? is_bpf_text_address+0x3f/0x270 [ 276.536546][ C0] ? search_bpf_extables+0x1ed/0x390 [ 276.541869][ C0] ? search_bpf_extables+0x1ed/0x390 [ 276.547190][ C0] ? search_bpf_extables+0x1ed/0x390 [ 276.552542][ C0] [ 276.555590][ C0] [ 276.557944][ C0] Allocated by task 6020: [ 276.562290][ C0] __kasan_kmalloc+0xb5/0xf0 [ 276.566912][ C0] __alloc_skb+0x22c/0x750 [ 276.571351][ C0] __netdev_alloc_skb+0x110/0x4c0 [ 276.576401][ C0] __ieee80211_beacon_get+0xaa1/0x2000 [ 276.581909][ C0] ieee80211_beacon_get_tim+0x48/0x840 [ 276.587396][ C0] mac80211_hwsim_beacon_tx+0xf4/0x920 [ 276.592967][ C0] __iterate_interfaces+0x243/0x500 [ 276.598278][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 276.605325][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 276.610558][ C0] __hrtimer_run_queues+0x4eb/0xb70 [ 276.615786][ C0] hrtimer_run_softirq+0x176/0x240 [ 276.620932][ C0] handle_softirqs+0x339/0x830 [ 276.625722][ C0] __irq_exit_rcu+0x13b/0x230 [ 276.630421][ C0] irq_exit_rcu+0x5/0x20 [ 276.634694][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 276.640354][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 276.646361][ C0] [ 276.648707][ C0] The buggy address belongs to the object at ffff888022c5c000 [ 276.648707][ C0] which belongs to the cache kmalloc-512 of size 512 [ 276.662787][ C0] The buggy address is located 42 bytes inside of [ 276.662787][ C0] 512-byte region [ffff888022c5c000, ffff888022c5c200) [ 276.676000][ C0] The buggy address belongs to the page: [ 276.681675][ C0] page:ffffea00008b1700 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888022c5f400 pfn:0x22c5c [ 276.693156][ C0] head:ffffea00008b1700 order:2 compound_mapcount:0 compound_pincount:0 [ 276.701500][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 276.709511][ C0] raw: 00fff00000010200 ffffea000095ef08 ffffea00017e4208 ffff888016c41c80 [ 276.718124][ C0] raw: ffff888022c5f400 0000000000100007 00000001ffffffff 0000000000000000 [ 276.726739][ C0] page dumped because: kasan: bad access detected [ 276.733181][ C0] page_owner tracks the page as allocated [ 276.738913][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1237, ts 9650122769, free_ts 0 [ 276.757167][ C0] get_page_from_freelist+0x1bbd/0x1ca0 [ 276.762753][ C0] __alloc_pages+0x1ee/0x480 [ 276.767482][ C0] new_slab+0xc0/0x4b0 [ 276.771582][ C0] ___slab_alloc+0x80a/0xdd0 [ 276.776284][ C0] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 276.781681][ C0] alloc_bprm+0x56/0x6a0 [ 276.785951][ C0] kernel_execve+0x49/0x900 [ 276.790562][ C0] call_usermodehelper_exec_async+0x207/0x350 [ 276.796744][ C0] ret_from_fork+0x1f/0x30 [ 276.801199][ C0] page_owner free stack trace missing [ 276.806587][ C0] [ 276.808914][ C0] Memory state around the buggy address: [ 276.814542][ C0] ffff888022c5bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 276.822607][ C0] ffff888022c5bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 276.830672][ C0] >ffff888022c5c000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 276.838732][ C0] ^ [ 276.844137][ C0] ffff888022c5c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 276.852200][ C0] ffff888022c5c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 276.860264][ C0] ================================================================== [ 276.868340][ C0] Disabling lock debugging due to kernel taint [ 276.874575][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 276.881795][ C0] CPU: 0 PID: 6486 Comm: syz.4.651 Tainted: G B syzkaller #0 [ 276.890498][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 276.900579][ C0] Call Trace: [ 276.903881][ C0] [ 276.906838][ C0] dump_stack_lvl+0x188/0x250 [ 276.911552][ C0] ? show_regs_print_info+0x20/0x20 [ 276.916790][ C0] ? load_image+0x400/0x400 [ 276.921364][ C0] panic+0x2e5/0x810 [ 276.925296][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 276.929827][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 276.935726][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 276.941718][ C0] ? _raw_spin_unlock+0x40/0x40 [ 276.946570][ C0] ? print_memory_metadata+0x314/0x400 [ 276.952032][ C0] ? rose_timer_expiry+0x470/0x490 [ 276.957160][ C0] check_panic_on_warn+0x80/0xa0 [ 276.962128][ C0] ? rose_timer_expiry+0x470/0x490 [ 276.967276][ C0] end_report+0x6d/0xf0 [ 276.971457][ C0] kasan_report+0x102/0x130 [ 276.975967][ C0] ? rose_timer_expiry+0x470/0x490 [ 276.981092][ C0] rose_timer_expiry+0x470/0x490 [ 276.986033][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 276.991059][ C0] call_timer_fn+0x17b/0x540 [ 276.995661][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 277.000709][ C0] ? __run_timers+0x7f0/0x7f0 [ 277.005500][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 277.010698][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 277.015896][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 277.020920][ C0] __run_timers+0x53a/0x7f0 [ 277.025444][ C0] ? detach_timer+0x2b0/0x2b0 [ 277.030164][ C0] run_timer_softirq+0x63/0xf0 [ 277.034972][ C0] handle_softirqs+0x339/0x830 [ 277.039798][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 277.044687][ C0] ? do_softirq+0x210/0x210 [ 277.049232][ C0] __irq_exit_rcu+0x13b/0x230 [ 277.054012][ C0] ? irq_exit_rcu+0x20/0x20 [ 277.058530][ C0] irq_exit_rcu+0x5/0x20 [ 277.062789][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 277.068424][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 277.074409][ C0] RIP: 0033:0x7fd0489b9781 [ 277.078821][ C0] Code: 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 c3 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 7c [ 277.098424][ C0] RSP: 002b:00007ffde507c358 EFLAGS: 00000246 [ 277.104518][ C0] RAX: 0000000081854cad RBX: ffffffff81854cad RCX: ffffffff81854cad [ 277.112506][ C0] RDX: 0000000000000cad RSI: ffffffff81854cad RDI: 0000000000000005 [ 277.120474][ C0] RBP: 0000000000000000 R08: 00007fd048d6a000 R09: 00007fd048d6c000 [ 277.128469][ C0] R10: 0000000081854cb1 R11: 0000000000000005 R12: 00007fd048d80038 [ 277.136442][ C0] R13: 000000000001c025 R14: ffffffff8185488f R15: 00007fd0498af720 [ 277.144432][ C0] ? is_bpf_text_address+0x3f/0x270 [ 277.149637][ C0] ? search_bpf_extables+0x1ed/0x390 [ 277.154943][ C0] ? search_bpf_extables+0x1ed/0x390 [ 277.160232][ C0] ? search_bpf_extables+0x1ed/0x390 [ 277.165535][ C0] [ 277.168902][ C0] Kernel Offset: disabled [ 277.173245][ C0] Rebooting in 86400 seconds..