last executing test programs: 6.91097161s ago: executing program 0 (id=54): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2200000, &(0x7f00000005c0)={[{@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@journal_checksum}]}, 0xb, 0x572, &(0x7f00000006c0)="$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") 6.736061688s ago: executing program 0 (id=60): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x638, 0x628, 0x3f8, 0x3f8, 0x0, 0x628, 0x710, 0x710, 0x710, 0x710, 0x710, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @mcast1, [], [], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'unconfined\x00'}}}, {{@uncond, 0x0, 0xa8, 0xf0, 0x7400}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'nr0\x00'}}}, {{@ipv6={@empty, @private0, [], [], 'sit0\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000002c0)={0x7f, 0x4, 0x0, 0xb9ff, 0x9}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xbfb3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)) r1 = syz_open_pts(r0, 0x101000) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 4.772377977s ago: executing program 0 (id=66): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) brk(0x2000000db002) 4.68815038s ago: executing program 0 (id=68): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000140)={[{@nodelalloc}, {@dioread_lock}, {@jqfmt_vfsv1}, {@usrquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsold}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x2000008, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) open(&(0x7f0000000200)='./file0\x00', 0xc4001, 0x20) 4.493446392s ago: executing program 0 (id=72): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r0, &(0x7f00000006c0)=';\x00\x00\x00', 0x4) 4.418354504s ago: executing program 3 (id=76): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x7}, 0x19) 4.304038282s ago: executing program 3 (id=77): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000500)={[{@data_err_ignore}, {@test_dummy_encryption_v1}, {@inlinecrypt}, {@jqfmt_vfsv1}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x145400, 0x64) 3.877839471s ago: executing program 2 (id=79): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000000)=0x9, 0x4) 3.822580711s ago: executing program 2 (id=80): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x220080c1, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 3.752183392s ago: executing program 3 (id=81): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="0000cf58ddf21c"], 0x50) 3.548092145s ago: executing program 3 (id=84): socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x2, 0x0) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) write$binfmt_register(0xffffffffffffffff, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0xfffffffeffffffff, 0x3a, '\x1b', 0x3a, '$', 0x3a, './file0'}, 0x29) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7a, &(0x7f00000004c0), 0x0, 0x0, 0x0, &(0x7f0000000540), 0x8, 0xf3, 0x8, 0x0, 0x0}}, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write(r0, &(0x7f0000000200)='1', 0x1) 2.929233105s ago: executing program 2 (id=87): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 2.713151111s ago: executing program 3 (id=90): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000010000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) io_uring_setup(0xc, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) syz_emit_ethernet(0xaa, &(0x7f0000000740)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb88a8460081000d0086dd60b7d2dfdf7983cc37121d1925a3ce00000001002b00fc010000000000000000000000000000fe8000000000000000000000000000aa87000000000000004e214e210064907802000000020000000400000034e540e3dd227ff71fcd0abe58075273e435d14b3a977b28387a1ae7465338d45cb275b4b588031e04941ebfaa96d7bfcf0372b8d285ee92d104650b69fd413d0667f5c2b37bbd83be6ba638"], 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) 2.624179734s ago: executing program 1 (id=91): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@empty, @in=@local, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x3, 0x1, 0x2, 0x9, 0x10000000, 0x1}, {0x0, 0x2, 0x7}, {0x40000, 0xffffffff, 0xae8}, 0x0, 0x3508, 0xa, 0x2, 0xfe, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x6b8f, 0x2, 0xb4, 0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x890) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x3, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0x6b8f, 0x2, 0x4, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x8001, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@remote}]}, 0x104}}, 0x8000) 2.623704745s ago: executing program 1 (id=92): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x50) close(0x3) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8001) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x57) syz_mount_image$fuse(0x0, &(0x7f00000025c0)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0xc3020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x4082, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x0) 2.620407895s ago: executing program 2 (id=93): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x5}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000009d973ec5f18fb6ba25bfa35134f1ac8166b3890c15b91f5b889b123d67dd9a32cecc7f77f10fa999308a29f10bf118353a61ff9cf0bfc00a2970825a97100c0e434d9f93dac5ae9cd91c4e136a91ab89b372de3f52b353f1"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) setresuid(0x0, 0xee00, 0x0) fcntl$setlease(r2, 0x400, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0x105, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000400), 0x0, 0x8, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) 2.620133875s ago: executing program 4 (id=94): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0xe24283a1, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) shutdown(r1, 0x0) 2.600610728s ago: executing program 0 (id=95): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b000005"], 0x0) 1.534946571s ago: executing program 32 (id=95): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b000005"], 0x0) 1.42257993s ago: executing program 2 (id=96): mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xfffffffffffffe62, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$vsock(0xffffffffffffff9c, 0x0, 0x680400, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, 0x0, &(0x7f0000004180)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x1) setpriority(0x2, r0, 0xfffffffffffffc01) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./trace\x00', 0x5e3f8b2d08cbb781) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f00000001c0)=ANY=[@ANYRESDEC], 0x2, 0x211, &(0x7f0000000700)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1.397538214s ago: executing program 1 (id=97): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x2800000, &(0x7f0000000140)={[{@debug}, {@jqfmt_vfsv0}, {@test_dummy_encryption}, {@test_dummy_encryption}, {@noacl}, {@journal_dev={'journal_dev', 0x3d, 0x100}}, {@inlinecrypt}, {@usrquota}, {@bh}, {@orlov}]}, 0x1, 0xbdd, &(0x7f0000000bc0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000002240)='mounts\x00') lseek(r0, 0x10001, 0x0) 1.264804695s ago: executing program 1 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x18, 0x0, 0x1, 0x505, 0x0, 0x0, {0x3, 0x0, 0xfffc}, [@CTA_TUPLE_ORIG={0x4, 0x2}]}, 0x18}}, 0x0) 880.024648ms ago: executing program 1 (id=99): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed4040, &(0x7f0000000080)={[{@noblock_validity}, {@lazytime}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4a}}, {@nobarrier}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x48b, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x40480c0}, 0x20040084) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xa0643000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) getsockopt$sock_timeval(r7, 0x1, 0x14, 0x0, &(0x7f0000000140)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, 0x0) 404.586714ms ago: executing program 2 (id=100): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) inotify_add_watch(0xffffffffffffffff, 0x0, 0x400) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000"], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r4, 0x40083}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008084}, 0xc0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 371.20006ms ago: executing program 3 (id=101): userfaultfd(0x801) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket(0x1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) clock_adjtime(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = dup(0xffffffffffffffff) syz_ublk_setup_queues(r4, r3, &(0x7f0000000180)={0x0, 0xee65, 0x0, 0x2, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x89fb8, 0x20000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x2, 0x0, 0x2a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x20000, 0x40040001, 0x3d5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x1000, 0x400001, 0xffffffff}}], 0x1, 0x0, 0x0) 325.799557ms ago: executing program 4 (id=102): gettid() mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x800401, 0x0) chdir(&(0x7f0000000000)='./proc/fs/nfsd\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84c42, 0x1fa) 325.575817ms ago: executing program 4 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000000), &(0x7f0000000b40), 0x2, 0x1) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000042, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 264.191437ms ago: executing program 4 (id=104): r0 = syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x1a00404, &(0x7f00000003c0), 0x1, 0xbac, &(0x7f00000017c0)="$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") ioctl$FS_IOC_SETVERSION(r0, 0x40087602, 0x0) 242.993521ms ago: executing program 4 (id=106): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x44b, 0x70bd26, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840, 0x42c04}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_AGEING_TIME={0x8}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x4c}}, 0x24) 202.018337ms ago: executing program 4 (id=107): pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1019402, &(0x7f0000000140)={[{@nodiscard}]}, 0x1, 0x521, &(0x7f0000001080)="$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") ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) write$P9_RGETLOCK(r0, 0x0, 0x5e) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000280)="f5", 0x1}], 0x1, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xc, 0x31, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=108): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x7) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x1, 0x1cc, &(0x7f00000004c0)="$eJzslT/P0lAUxp/b0pIak9dVJxNJ3tfB/kONDA7E0UETjcYNIoWgRQx0ACb4FM7ODs7EhcTF76CDOpkobk4m1tz21l5LCSlWYuL5DbdPey6Hc04vDyAI4r/l44dv718e1wyuT6OGqnj+SU33KNL+5dH3i2/7t149s7++W65uNjLp9KLfXwGwaqoIxH0YhqEcr4nrXSiJ1tBK4/fBYArdgoJ7QntgeCD0I0kP+X7T7PZ9z3w49Dtc2Hxx+OLypZ6tb71g6Ej1MSk+ns4et33fG/25uMHLzgvtmt+6qeC6VJ/8vpLZ2On84ECBI3QdDHeEvoZqMpt4JFL/5yppfvXv9F+C+FxaQgbMeX+/hQzskfDs0Y49Gv6F0ZUukl/JRuiNCBRIaKTOcsguRAvzQp9i0SH5Yhy21LLECyM683reiysmUn8KnzMcS/5UkfzDCgZPrfF0dqk/aPe8nvfEdetX7cu2fcW1IiOyuq83XU+R/M+I/OmUlF/b4pU60zFpB8HIiddf9+6kimDk5jmuHvmfgpMLcdUs508uOiZn2Hl+OVGBH2HMljIIgiAIgiAIgiAIgiAIgiD2QwPYIszSQPaJezva/jMAAP//Y6hiTA==") r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x688100) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r4, 0x40505412, &(0x7f00000006c0)={0x7, 0x0, 0x80000000, 0x0, 0xe}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x82000, 0x180) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. [ 29.356192][ T4316] cgroup: Unknown subsys name 'net' [ 29.640707][ T4316] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 29.919925][ T4316] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 31.187582][ T4330] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 31.189615][ T4330] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 31.191695][ T4330] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 31.193117][ T4330] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 31.194250][ T4338] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 31.195877][ T4330] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 31.195920][ T4338] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 31.199011][ T4330] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 31.202039][ T4339] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 31.203370][ T4338] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 31.205021][ T4339] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 31.211281][ T4339] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 31.211321][ T4343] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 31.212584][ T4339] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 31.214178][ T4343] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 31.215084][ T4339] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 31.216335][ T4343] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 31.218581][ T4339] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 31.219475][ T4343] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 31.220624][ T4339] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 31.230016][ T4339] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 31.231605][ T4339] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 31.233286][ T4339] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 31.234875][ T4339] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 31.236573][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 31.238257][ T4339] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 31.242778][ T4339] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 31.244615][ T4339] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 31.257159][ T4334] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 31.258842][ T4334] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 31.373695][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 31.386771][ T4335] chnl_net:caif_netlink_parms(): no params data found [ 31.397547][ T4328] chnl_net:caif_netlink_parms(): no params data found [ 31.423406][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.424712][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.426424][ T4329] device bridge_slave_0 entered promiscuous mode [ 31.431982][ T4336] chnl_net:caif_netlink_parms(): no params data found [ 31.441272][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.442633][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.444205][ T4329] device bridge_slave_1 entered promiscuous mode [ 31.445531][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.446746][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.449163][ T4328] device bridge_slave_0 entered promiscuous mode [ 31.460593][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.461800][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.463307][ T4335] device bridge_slave_0 entered promiscuous mode [ 31.471000][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.472614][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.473864][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.475412][ T4328] device bridge_slave_1 entered promiscuous mode [ 31.477168][ T4340] chnl_net:caif_netlink_parms(): no params data found [ 31.482538][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.483664][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.485244][ T4335] device bridge_slave_1 entered promiscuous mode [ 31.489689][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.514348][ T4335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.516903][ T4329] team0: Port device team_slave_0 added [ 31.518951][ T4329] team0: Port device team_slave_1 added [ 31.522985][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.527834][ T4336] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.529122][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.530721][ T4336] device bridge_slave_0 entered promiscuous mode [ 31.533081][ T4335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.537419][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.542340][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.543627][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.545229][ T4336] device bridge_slave_1 entered promiscuous mode [ 31.551265][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.552534][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.556985][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.571216][ T4336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.574844][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.576092][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.580852][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.586438][ T4328] team0: Port device team_slave_0 added [ 31.590681][ T4336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.593202][ T4335] team0: Port device team_slave_0 added [ 31.594485][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.595803][ T4340] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.597410][ T4340] device bridge_slave_0 entered promiscuous mode [ 31.601282][ T4328] team0: Port device team_slave_1 added [ 31.607604][ T4336] team0: Port device team_slave_0 added [ 31.609739][ T4335] team0: Port device team_slave_1 added [ 31.613233][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.614384][ T4340] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.615817][ T4340] device bridge_slave_1 entered promiscuous mode [ 31.623262][ T4336] team0: Port device team_slave_1 added [ 31.635746][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.636954][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.641999][ T4335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.645451][ T4340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.647375][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.649075][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.653766][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.656162][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.657374][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.663052][ T4336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.669906][ T4335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.671173][ T4335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.675738][ T4335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.679362][ T4340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.681152][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.682397][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.686668][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.691007][ T4336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.692147][ T4336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.696450][ T4336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.748967][ T4329] device hsr_slave_0 entered promiscuous mode [ 31.787984][ T4329] device hsr_slave_1 entered promiscuous mode [ 31.837218][ T4340] team0: Port device team_slave_0 added [ 31.844214][ T4340] team0: Port device team_slave_1 added [ 31.889138][ T4335] device hsr_slave_0 entered promiscuous mode [ 31.928011][ T4335] device hsr_slave_1 entered promiscuous mode [ 31.977806][ T4335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.979195][ T4335] Cannot create hsr debugfs directory [ 31.997106][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.998379][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.002450][ T4340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.013825][ T4340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.014993][ T4340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 32.019381][ T4340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.068961][ T4328] device hsr_slave_0 entered promiscuous mode [ 32.107987][ T4328] device hsr_slave_1 entered promiscuous mode [ 32.147844][ T4328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.149122][ T4328] Cannot create hsr debugfs directory [ 32.188886][ T4336] device hsr_slave_0 entered promiscuous mode [ 32.238385][ T4336] device hsr_slave_1 entered promiscuous mode [ 32.287874][ T4336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.289337][ T4336] Cannot create hsr debugfs directory [ 32.388764][ T4340] device hsr_slave_0 entered promiscuous mode [ 32.428150][ T4340] device hsr_slave_1 entered promiscuous mode [ 32.467850][ T4340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 32.469221][ T4340] Cannot create hsr debugfs directory [ 32.533084][ T4329] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.595911][ T4329] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.628775][ T4329] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.679007][ T4329] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.719702][ T4328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.758877][ T4328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.799467][ T4328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.855902][ T4328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.905305][ T4335] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.942124][ T4335] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.979104][ T4335] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.019001][ T4335] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.070875][ T4340] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.111675][ T4340] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.154075][ T4340] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.191370][ T4340] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.259470][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.268134][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.272424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.274367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.278085][ T4330] Bluetooth: hci3: command 0x0409 tx timeout [ 33.279156][ T4330] Bluetooth: hci4: command 0x0409 tx timeout [ 33.280204][ T4330] Bluetooth: hci2: command 0x0409 tx timeout [ 33.281179][ T4330] Bluetooth: hci1: command 0x0409 tx timeout [ 33.283753][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.290039][ T4334] Bluetooth: hci0: command 0x0409 tx timeout [ 33.293404][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.295055][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.296760][ T1617] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.298122][ T1617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.300728][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.305817][ T4336] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.330103][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.332017][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.333657][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.334960][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.336488][ T4336] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.385183][ T4336] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.419362][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.420875][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.422949][ T4336] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.452997][ T4335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.461888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.463594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.465272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.466827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.468939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.470566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.472160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.473589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.475118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.476771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.479497][ T4335] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.484192][ T4328] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.486397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.489103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.491197][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.492407][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.493988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.495615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.497296][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.498630][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.500289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.509431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.511015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.512669][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.513943][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.515479][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.516989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.519180][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.521024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.522657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.524460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.526313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.528586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.537097][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.543535][ T4340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.544971][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.546548][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.552281][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.553900][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.555505][ T1617] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.556733][ T1617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.567382][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.571544][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.573133][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.574738][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.576408][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.579844][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.583210][ T4340] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.586960][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.592715][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.599200][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.600902][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.602624][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.604271][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.605421][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.606866][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.613138][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.615022][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.618434][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.627270][ T4340] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.630302][ T4340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.634954][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.636699][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.639047][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.640355][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.641942][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.643693][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.645929][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.649394][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.651086][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.652824][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.654514][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.656180][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.659290][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.660908][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.662579][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.664147][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.669244][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.670554][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.690708][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.692306][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.695072][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.704029][ T4336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.706964][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.709524][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.716615][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.718684][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.722570][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.724161][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.725850][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.729866][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.731498][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.735741][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.737145][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.741266][ T4335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.746220][ T4336] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.756406][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.758566][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.760401][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.761832][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.766979][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.769094][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.770567][ T4381] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.771780][ T4381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.773879][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.776694][ T4329] device veth0_vlan entered promiscuous mode [ 33.784494][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.786161][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.788188][ T4381] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.789453][ T4381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.790963][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.792958][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.797299][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 33.799265][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.800659][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.806442][ T4329] device veth1_vlan entered promiscuous mode [ 33.811928][ T4340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.815776][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.817429][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 33.821195][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.822748][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.829747][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.831203][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.837474][ T4336] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.842909][ T4336] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.845218][ T4335] device veth0_vlan entered promiscuous mode [ 33.848958][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.850599][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 33.852543][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 33.854196][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 33.855851][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 33.857380][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.863166][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.864904][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.866429][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.872026][ T4335] device veth1_vlan entered promiscuous mode [ 33.881168][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 33.882552][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 33.883963][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 33.885521][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 33.887160][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.889307][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.890956][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 33.892369][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 33.897270][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.915338][ T4335] device veth0_macvtap entered promiscuous mode [ 33.917097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.919111][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.920801][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.925766][ T4329] device veth0_macvtap entered promiscuous mode [ 33.942320][ T4335] device veth1_macvtap entered promiscuous mode [ 33.944057][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.945651][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 33.947204][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.950376][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.957178][ T4329] device veth1_macvtap entered promiscuous mode [ 33.963136][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.964632][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.966203][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.971875][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.973630][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.975776][ T4328] device veth0_vlan entered promiscuous mode [ 33.987223][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.989194][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.996960][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.001052][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.002911][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.005238][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.006459][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.011493][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.013112][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.015065][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.016802][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.019250][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.021151][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.022749][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.024570][ T4340] device veth0_vlan entered promiscuous mode [ 34.027345][ T4335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.030462][ T4335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.031923][ T4335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.033271][ T4335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.034710][ T4335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.038413][ T4328] device veth1_vlan entered promiscuous mode [ 34.040478][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.042144][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.043856][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.052821][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.054504][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 34.055859][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 34.058233][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.060187][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.062413][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.063701][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.065359][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.069192][ T4340] device veth1_vlan entered promiscuous mode [ 34.085495][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.087087][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.089037][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.090676][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.095276][ T4329] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.096797][ T4329] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.099250][ T4329] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.100842][ T4329] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.104000][ T4336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.106289][ T4328] device veth0_macvtap entered promiscuous mode [ 34.110264][ T4328] device veth1_macvtap entered promiscuous mode [ 34.123241][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.125073][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.126775][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.129080][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.131380][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.135654][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.137342][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.141621][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.143273][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.148005][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.149336][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.152473][ T4340] device veth0_macvtap entered promiscuous mode [ 34.161226][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.163110][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.164899][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.166718][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.170099][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.171559][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.173176][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.174643][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.176303][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.178526][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.180189][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.182256][ T4340] device veth1_macvtap entered promiscuous mode [ 34.188006][ T1617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.189330][ T1617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.195441][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.196995][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.199422][ T4328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.200898][ T4328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.202435][ T4328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.204175][ T4328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.217294][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.219118][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.226595][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.230504][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.232224][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.234107][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.235916][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.238908][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.241263][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.244717][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.246252][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.256271][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.258274][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.259818][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.261440][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.263010][ T4340] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.264704][ T4340] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.266708][ T4340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.272547][ T4336] device veth0_vlan entered promiscuous mode [ 34.275665][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.277389][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.280328][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 34.281880][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.285615][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.287162][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.291282][ T4340] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.292769][ T4340] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.295647][ T4340] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.297311][ T4340] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.302487][ T1617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.303817][ T1617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.305940][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.345332][ T1617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.346779][ T1617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.348645][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.354032][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.355344][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.356811][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.360471][ T4336] device veth1_vlan entered promiscuous mode [ 34.362237][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.363605][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.365067][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 34.366623][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.387472][ T4336] device veth0_macvtap entered promiscuous mode [ 34.394225][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 34.395734][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 34.397328][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.400213][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 34.408060][ T1617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.409479][ T1617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.412804][ T4336] device veth1_macvtap entered promiscuous mode [ 34.415513][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 34.417148][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.443982][ T4416] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 34.447514][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.451980][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.453664][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.455279][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.456824][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.459505][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.461363][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.463525][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.466171][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.469874][ T4405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.471448][ T4405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.474151][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 34.475932][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.477532][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.482985][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.484876][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.486514][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.488851][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.490867][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.492515][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.494098][ T4336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.495765][ T4336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.500255][ T4336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.502669][ T4336] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.504122][ T4336] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.506182][ T4336] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.508866][ T4336] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.519631][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.521467][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.559406][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.560759][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.562373][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 34.586313][ T1617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 34.587959][ T1617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 34.589899][ T1617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 34.690279][ T4441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 34.776653][ T4450] device syzkaller1 entered promiscuous mode [ 34.982116][ T4459] FAULT_INJECTION: forcing a failure. [ 34.982116][ T4459] name failslab, interval 1, probability 0, space 0, times 1 [ 34.984801][ T4459] CPU: 0 PID: 4459 Comm: syz.2.14 Not tainted syzkaller #0 [ 34.986022][ T4459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 34.987900][ T4459] Call trace: [ 34.988530][ T4459] dump_backtrace+0x1c4/0x1f0 [ 34.989429][ T4459] show_stack+0x2c/0x3c [ 34.990222][ T4459] __dump_stack+0x30/0x40 [ 34.991056][ T4459] dump_stack_lvl+0xf4/0x15c [ 34.991939][ T4459] dump_stack+0x1c/0x5c [ 34.992717][ T4459] should_fail_ex+0x3cc/0x524 [ 34.993619][ T4459] __should_failslab+0xc0/0x11c [ 34.994514][ T4459] should_failslab+0x10/0x28 [ 34.995387][ T4459] __kmem_cache_alloc_node+0x7c/0x318 [ 34.996380][ T4459] kmalloc_trace+0x48/0x94 [ 34.997175][ T4459] ioc_cpd_alloc+0x80/0x118 [ 34.997952][ T4459] blkcg_css_alloc+0x28c/0xb84 [ 34.998771][ T4459] cgroup_apply_control_enable+0x35c/0x9e0 [ 34.999844][ T4459] cgroup_mkdir+0x964/0xcf8 [ 35.000644][ T4459] kernfs_iop_mkdir+0x118/0x164 [ 35.001512][ T4459] vfs_mkdir+0x314/0x4d8 [ 35.002307][ T4459] do_mkdirat+0x1b8/0x3ec [ 35.003120][ T4459] __arm64_sys_mkdirat+0x90/0xa8 [ 35.004018][ T4459] invoke_syscall+0x98/0x290 [ 35.004859][ T4459] el0_svc_common+0x13c/0x258 [ 35.005713][ T4459] do_el0_svc+0x5c/0x134 [ 35.006459][ T4459] el0_svc+0x58/0x128 [ 35.007176][ T4459] el0t_64_sync_handler+0x84/0xf0 [ 35.008127][ T4459] el0t_64_sync+0x18c/0x190 [ 35.034560][ T4461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.036514][ T4461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.177809][ T4376] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 35.357909][ T4330] Bluetooth: hci0: command 0x041b tx timeout [ 35.359117][ T4330] Bluetooth: hci1: command 0x041b tx timeout [ 35.360168][ T4330] Bluetooth: hci2: command 0x041b tx timeout [ 35.361235][ T4330] Bluetooth: hci4: command 0x041b tx timeout [ 35.362292][ T4330] Bluetooth: hci3: command 0x041b tx timeout [ 35.367555][ T4376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.370179][ T4376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.371944][ T4376] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 35.373430][ T4376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.376536][ T4376] usb 1-1: config 0 descriptor?? [ 35.524510][ T4466] FAULT_INJECTION: forcing a failure. [ 35.524510][ T4466] name failslab, interval 1, probability 0, space 0, times 0 [ 35.526544][ T4466] CPU: 0 PID: 4466 Comm: syz.4.17 Not tainted syzkaller #0 [ 35.527693][ T4466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 35.529435][ T4466] Call trace: [ 35.530027][ T4466] dump_backtrace+0x1c4/0x1f0 [ 35.530864][ T4466] show_stack+0x2c/0x3c [ 35.531593][ T4466] __dump_stack+0x30/0x40 [ 35.532370][ T4466] dump_stack_lvl+0xf4/0x15c [ 35.533183][ T4466] dump_stack+0x1c/0x5c [ 35.533925][ T4466] should_fail_ex+0x3cc/0x524 [ 35.534711][ T4466] __should_failslab+0xc0/0x11c [ 35.535537][ T4466] should_failslab+0x10/0x28 [ 35.536362][ T4466] kmem_cache_alloc+0x88/0x310 [ 35.537193][ T4466] getname_flags+0xb8/0x458 [ 35.537952][ T4466] user_path_at_empty+0x40/0x84 [ 35.538806][ T4466] __arm64_sys_mount+0x468/0x5a0 [ 35.539681][ T4466] invoke_syscall+0x98/0x290 [ 35.540496][ T4466] el0_svc_common+0x13c/0x258 [ 35.541337][ T4466] do_el0_svc+0x5c/0x134 [ 35.542079][ T4466] el0_svc+0x58/0x128 [ 35.542774][ T4466] el0t_64_sync_handler+0x84/0xf0 [ 35.543664][ T4466] el0t_64_sync+0x18c/0x190 [ 35.568754][ T4469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.574888][ T4469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.787154][ T4376] hid-steam 0003:28DE:1142.0001: item fetching failed at offset 2/5 [ 35.790781][ T4376] hid-steam 0003:28DE:1142.0001: steam_probe:parse of hid interface failed [ 35.792659][ T4376] hid-steam: probe of 0003:28DE:1142.0001 failed with error -22 [ 36.003334][ T4378] usb 1-1: USB disconnect, device number 2 [ 36.130571][ T4487] device syzkaller0 entered promiscuous mode [ 36.247577][ T4491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.249675][ T4491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.438315][ T4334] Bluetooth: hci3: command 0x040f tx timeout [ 37.439417][ T4334] Bluetooth: hci4: command 0x040f tx timeout [ 37.440429][ T4334] Bluetooth: hci2: command 0x040f tx timeout [ 37.441483][ T4334] Bluetooth: hci1: command 0x040f tx timeout [ 37.442531][ T4334] Bluetooth: hci0: command 0x040f tx timeout [ 39.518390][ T4330] Bluetooth: hci0: command 0x0419 tx timeout [ 39.519518][ T4330] Bluetooth: hci1: command 0x0419 tx timeout [ 39.520678][ T4330] Bluetooth: hci2: command 0x0419 tx timeout [ 39.521634][ T4330] Bluetooth: hci4: command 0x0419 tx timeout [ 39.522637][ T4330] Bluetooth: hci3: command 0x0419 tx timeout [ 47.030943][ T4531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.033607][ T4531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.284365][ T4559] loop1: detected capacity change from 0 to 1024 [ 47.288714][ T4559] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.291040][ T4559] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.296419][ T4559] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 47.327414][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 47.389372][ T4563] loop3: detected capacity change from 0 to 256 [ 47.397310][ T4563] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 47.399836][ T4565] loop1: detected capacity change from 0 to 512 [ 47.406423][ T4565] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.433789][ T4565] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 47.460808][ T4565] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.51: bg 0: block 248: padding at end of block bitmap is not set [ 47.466255][ T4565] Quota error (device loop1): write_blk: dquota write failed [ 47.468373][ T4565] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 47.470303][ T4565] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.51: Failed to acquire dquot type 1 [ 47.480370][ T4565] EXT4-fs (loop1): 1 truncate cleaned up [ 47.481659][ T4565] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 47.508262][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 48.690372][ T4578] loop0: detected capacity change from 0 to 1024 [ 48.730873][ T4583] loop3: detected capacity change from 0 to 4096 [ 48.731256][ T4583] ext4: Unknown parameter 'noacl' [ 48.741475][ T4578] EXT4-fs (loop0): can't mount with journal_checksum, fs mounted w/o journal [ 48.782680][ T4566] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 50.082990][ T4597] sched: RT throttling activated [ 50.140152][ T4608] loop3: detected capacity change from 0 to 2048 [ 50.858553][ T4619] loop0: detected capacity change from 0 to 1024 [ 50.874850][ T4619] EXT4-fs: Ignoring removed bh option [ 50.913212][ T4619] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 50.955745][ T4619] EXT4-fs error (device loop0): ext4_find_dest_de:2117: inode #12: block 7: comm syz.0.68: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 50.975373][ T4619] EXT4-fs (loop0): Remounting filesystem read-only [ 51.008943][ T4608] loop3: p1 < > p4 [ 51.008943][ T4608] p4: [ 51.011580][ T4608] loop3: p4 size 722688 extends beyond EOD, truncated [ 51.048004][ T4335] EXT4-fs error (device loop0): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /12/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 51.067390][ T4335] EXT4-fs (loop0): Remounting filesystem read-only [ 51.072271][ T4335] EXT4-fs error (device loop0): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /12/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 51.095176][ T4335] EXT4-fs (loop0): Remounting filesystem read-only [ 51.098420][ T4335] EXT4-fs error (device loop0): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 51.115214][ T4335] EXT4-fs (loop0): Remounting filesystem read-only [ 51.116343][ T4335] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 51.125511][ T4335] EXT4-fs error (device loop0): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /12/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 51.144188][ T4335] EXT4-fs (loop0): Remounting filesystem read-only [ 51.145377][ T4335] EXT4-fs error (device loop0): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /12/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 51.209114][ T4335] EXT4-fs (loop0): Remounting filesystem read-only [ 51.210436][ T4335] EXT4-fs error (device loop0): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 51.214790][ T4335] EXT4-fs (loop0): Remounting filesystem read-only [ 51.215997][ T4335] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 51.223115][ T4335] EXT4-fs error (device loop0): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /12/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 51.230969][ T4335] EXT4-fs (loop0): Remounting filesystem read-only [ 51.235977][ T4335] EXT4-fs error (device loop0): ext4_read_inline_dir:1628: inode #12: block 7: comm syz-executor: path /12/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=60 fake=0 [ 51.245968][ T4335] EXT4-fs (loop0): Remounting filesystem read-only [ 51.247619][ T4335] EXT4-fs error (device loop0): empty_inline_dir:1912: inode #12: block 7: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 51.342040][ T4642] loop4: detected capacity change from 0 to 16 [ 51.346170][ T4642] erofs: Unknown parameter '18446744073709551615' [ 51.572303][ T4587] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 51.584234][ T4335] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 51.586729][ T4641] loop3: detected capacity change from 0 to 4096 [ 51.590769][ T4641] EXT4-fs: inline encryption not supported [ 51.596884][ T4641] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 51.596961][ T4335] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 51.607003][ T4641] EXT4-fs (loop3): Test dummy encryption mode enabled [ 51.624278][ T4335] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 51.634149][ T4641] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 51.640094][ T4335] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 51.644560][ T4641] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 51.662943][ T4335] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 51.665040][ T4641] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 51.667398][ T4335] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 51.677555][ T4335] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 51.687881][ T4335] EXT4-fs warning (device loop0): empty_inline_dir:1919: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 51.817486][ T4328] EXT4-fs (loop3): unmounting filesystem. [ 51.941542][ T4656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.944128][ T4656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.953502][ T4656] loop1: detected capacity change from 0 to 256 [ 52.597408][ T4669] fuse: Unknown parameter 'grou00000000000000000000' [ 53.064988][ T4405] Bluetooth: hci2: Frame reassembly failed (-84) [ 54.124017][ T4338] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 54.126053][ T4338] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 54.127496][ T4338] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 54.129515][ T4338] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 54.131278][ T4338] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 54.132626][ T4338] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 54.174796][ T4694] loop1: detected capacity change from 0 to 4096 [ 54.176425][ T4694] ext4: Unknown parameter 'noacl' [ 54.252383][ T4587] I/O error, dev loop1, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 54.345281][ T4700] loop2: detected capacity change from 0 to 16 [ 54.349066][ T4700] erofs: Unknown parameter '18446744073709551615' [ 54.619783][ T4573] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.641132][ T4706] loop1: detected capacity change from 0 to 512 [ 54.656106][ T4706] ======================================================= [ 54.656106][ T4706] WARNING: The mand mount option has been deprecated and [ 54.656106][ T4706] and is ignored by this kernel. Remove the mand [ 54.656106][ T4706] option from the mount to silence this warning. [ 54.656106][ T4706] ======================================================= [ 54.674947][ T4706] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.99: bad orphan inode 15 [ 54.678810][ T4706] ext4_test_bit(bit=14, block=5) = 0 [ 54.679805][ T4706] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 54.718940][ T4573] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.803827][ T4689] chnl_net:caif_netlink_parms(): no params data found [ 55.122100][ T4339] Bluetooth: hci2: command 0x1003 tx timeout [ 55.123515][ T4334] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 55.139407][ T4573] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.181004][ T4689] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.183437][ T4689] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.188325][ T4689] device bridge_slave_0 entered promiscuous mode [ 55.190756][ T4689] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.192005][ T4689] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.193589][ T4689] device bridge_slave_1 entered promiscuous mode [ 55.220642][ T4722] overlayfs: invalid origin (0000) [ 55.255005][ T4725] loop4: detected capacity change from 0 to 4096 [ 55.260244][ T4573] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.265691][ T4689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.267479][ T4726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.100'. [ 55.271212][ T4689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.276720][ T4725] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 55.277880][ T4624] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 55.297340][ T4340] EXT4-fs (loop4): unmounting filesystem. [ 55.314201][ T4689] team0: Port device team_slave_0 added [ 55.321339][ T4689] team0: Port device team_slave_1 added [ 55.323436][ T4726] Zero length message leads to an empty skb [ 55.335518][ T4689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.337034][ T4689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.350663][ T4689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.357233][ T4689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.360294][ T4689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.370889][ T4689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.429227][ T4689] device hsr_slave_0 entered promiscuous mode [ 55.477969][ T4689] device hsr_slave_1 entered promiscuous mode [ 55.501187][ T4329] EXT4-fs (loop1): unmounting filesystem. [ 55.533268][ T4689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.534735][ T4689] Cannot create hsr debugfs directory [ 55.769732][ T4740] loop1: detected capacity change from 0 to 16 [ 56.158385][ T4330] Bluetooth: hci5: command 0x0409 tx timeout [ 56.179686][ T4740] erofs: (device loop1): mounted with root inode @ nid 36. [ 56.220519][ T4739] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 56.222193][ T4739] erofs: (device loop1): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 56.224228][ T4739] syz.1.108: attempt to access beyond end of device [ 56.224228][ T4739] loop1: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 56.227020][ T4739] syz.1.108: attempt to access beyond end of device [ 56.227020][ T4739] loop1: rw=524288, sector=88, nr_sectors = 48 limit=16 [ 56.229937][ T4739] syz.1.108: attempt to access beyond end of device [ 56.229937][ T4739] loop1: rw=524288, sector=8, nr_sectors = 80 limit=16 [ 56.238868][ T4739] ================================================================== [ 56.240371][ T4739] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x39c/0x494 [ 56.241827][ T4739] Read of size 4096 at addr ffff0000eb8d3000 by task syz.1.108/4739 [ 56.243256][ T4739] [ 56.243673][ T4739] CPU: 1 PID: 4739 Comm: syz.1.108 Not tainted syzkaller #0 [ 56.244993][ T4739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 56.246902][ T4739] Call trace: [ 56.247543][ T4739] dump_backtrace+0x1c4/0x1f0 [ 56.248480][ T4739] show_stack+0x2c/0x3c [ 56.249274][ T4739] __dump_stack+0x30/0x40 [ 56.250096][ T4739] dump_stack_lvl+0xf4/0x15c [ 56.250974][ T4739] print_address_description+0x88/0x218 [ 56.251945][ T4739] print_report+0x50/0x68 [ 56.252726][ T4739] kasan_report+0xa8/0xfc [ 56.253514][ T4739] kasan_check_range+0x258/0x290 [ 56.254446][ T4739] memcpy+0x48/0x90 [ 56.255172][ T4739] z_erofs_transform_plain+0x39c/0x494 [ 56.256199][ T4739] z_erofs_decompress+0x9c/0xd4 [ 56.257116][ T4739] z_erofs_decompress_queue+0x103c/0x1bf4 [ 56.258205][ T4739] z_erofs_runqueue+0x1508/0x16a8 [ 56.259147][ T4739] z_erofs_read_folio+0x2dc/0x5cc [ 56.260081][ T4739] filemap_read_folio+0x134/0x384 [ 56.261010][ T4739] filemap_fault+0x990/0xe98 [ 56.261862][ T4739] __do_fault+0x11c/0x3d8 [ 56.262668][ T4739] handle_mm_fault+0x1d04/0x3018 [ 56.263614][ T4739] __get_user_pages+0x340/0x770 [ 56.264521][ T4739] populate_vma_page_range+0x1f4/0x298 [ 56.265492][ T4739] __mm_populate+0x214/0x338 [ 56.266303][ T4739] do_mlock+0x420/0x514 [ 56.267028][ T4739] __arm64_sys_mlock+0x60/0x78 [ 56.267878][ T4739] invoke_syscall+0x98/0x290 [ 56.268701][ T4739] el0_svc_common+0x13c/0x258 [ 56.269526][ T4739] do_el0_svc+0x5c/0x134 [ 56.270317][ T4739] el0_svc+0x58/0x128 [ 56.271174][ T4739] el0t_64_sync_handler+0x84/0xf0 [ 56.272177][ T4739] el0t_64_sync+0x18c/0x190 [ 56.273062][ T4739] [ 56.273516][ T4739] Allocated by task 21: [ 56.274268][ T4739] kasan_set_track+0x4c/0x80 [ 56.275121][ T4739] kasan_save_alloc_info+0x24/0x30 [ 56.276082][ T4739] __kasan_slab_alloc+0x70/0x88 [ 56.276989][ T4739] slab_post_alloc_hook+0x74/0x430 [ 56.277907][ T4739] kmem_cache_alloc_node+0x258/0x344 [ 56.278883][ T4739] __alloc_skb+0x128/0x728 [ 56.279675][ T4739] __netdev_alloc_skb+0xb8/0x3c8 [ 56.280570][ T4739] __ieee80211_beacon_get+0xbf0/0x12fc [ 56.281573][ T4739] ieee80211_beacon_get_tim+0x70/0x44c [ 56.282565][ T4739] mac80211_hwsim_beacon_tx+0x1e4/0x8fc [ 56.283553][ T4739] __iterate_interfaces+0x200/0x47c [ 56.284509][ T4739] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 56.285791][ T4739] mac80211_hwsim_beacon+0xc8/0x1b0 [ 56.286781][ T4739] __hrtimer_run_queues+0x444/0xc58 [ 56.287781][ T4739] hrtimer_run_softirq+0x164/0x408 [ 56.288757][ T4739] handle_softirqs+0x318/0xc90 [ 56.289633][ T4739] run_ksoftirqd+0x7c/0x2ac [ 56.290483][ T4739] smpboot_thread_fn+0x4e8/0x960 [ 56.291374][ T4739] kthread+0x254/0x2e0 [ 56.292149][ T4739] ret_from_fork+0x10/0x20 [ 56.292984][ T4739] [ 56.293417][ T4739] Freed by task 21: [ 56.294119][ T4739] kasan_set_track+0x4c/0x80 [ 56.294970][ T4739] kasan_save_free_info+0x38/0x5c [ 56.295901][ T4739] ____kasan_slab_free+0x148/0x1b0 [ 56.296843][ T4739] __kasan_slab_free+0x18/0x28 [ 56.297711][ T4739] slab_free_freelist_hook+0x16c/0x1e8 [ 56.298714][ T4739] kmem_cache_free+0x118/0x318 [ 56.299593][ T4739] kfree_skbmem+0x10c/0x198 [ 56.300373][ T4739] consume_skb+0xa8/0x104 [ 56.301159][ T4739] mac80211_hwsim_tx_frame+0x1cc/0x1fc [ 56.302101][ T4739] mac80211_hwsim_beacon_tx+0x4b8/0x8fc [ 56.303056][ T4739] __iterate_interfaces+0x200/0x47c [ 56.303967][ T4739] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 56.305215][ T4739] mac80211_hwsim_beacon+0xc8/0x1b0 [ 56.306181][ T4739] __hrtimer_run_queues+0x444/0xc58 [ 56.307102][ T4739] hrtimer_run_softirq+0x164/0x408 [ 56.308009][ T4739] handle_softirqs+0x318/0xc90 [ 56.308838][ T4739] run_ksoftirqd+0x7c/0x2ac [ 56.309656][ T4739] smpboot_thread_fn+0x4e8/0x960 [ 56.310537][ T4739] kthread+0x254/0x2e0 [ 56.311295][ T4739] ret_from_fork+0x10/0x20 [ 56.312103][ T4739] [ 56.312525][ T4739] The buggy address belongs to the object at ffff0000eb8d3000 [ 56.312525][ T4739] which belongs to the cache skbuff_head_cache of size 240 [ 56.315146][ T4739] The buggy address is located 0 bytes inside of [ 56.315146][ T4739] 240-byte region [ffff0000eb8d3000, ffff0000eb8d30f0) [ 56.317435][ T4739] [ 56.317846][ T4739] The buggy address belongs to the physical page: [ 56.318952][ T4739] page:000000005c9aefa6 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12b8d3 [ 56.320810][ T4739] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 56.322279][ T4739] raw: 05ffc00000000200 0000000000000000 dead000000000122 ffff0000c0870180 [ 56.323785][ T4739] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 56.325262][ T4739] page dumped because: kasan: bad access detected [ 56.326385][ T4739] [ 56.326788][ T4739] Memory state around the buggy address: [ 56.327814][ T4739] ffff0000eb8d2f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 56.329192][ T4739] ffff0000eb8d2f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 56.330592][ T4739] >ffff0000eb8d3000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 56.331970][ T4739] ^ [ 56.332666][ T4739] ffff0000eb8d3080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 56.334059][ T4739] ffff0000eb8d3100: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 56.335478][ T4739] ================================================================== [ 56.337021][ T4739] Disabling lock debugging due to kernel taint [ 56.338588][ T4739] syz.1.108: attempt to access beyond end of device [ 56.338588][ T4739] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 56.341394][ T4739] syz.1.108: attempt to access beyond end of device [ 56.341394][ T4739] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 56.344024][ T4739] syz.1.108: attempt to access beyond end of device [ 56.344024][ T4739] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 56.346870][ T4739] syz.1.108: attempt to access beyond end of device [ 56.346870][ T4739] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 56.349685][ T4739] syz.1.108: attempt to access beyond end of device [ 56.349685][ T4739] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 56.352190][ T4739] syz.1.108: attempt to access beyond end of device [ 56.352190][ T4739] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 [ 56.354893][ T4739] syz.1.108: attempt to access beyond end of device [ 56.354893][ T4739] loop1: rw=0, sector=34359738360, nr_sectors = 8 limit=16 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 58.601946][ T4573] device hsr_slave_0 left promiscuous mode [ 58.627894][ T4573] device hsr_slave_1 left promiscuous mode [ 58.717837][ T4573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.719133][ T4573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.720575][ T4573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.721731][ T4573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.723112][ T4573] device bridge_slave_1 left promiscuous mode [ 58.724293][ T4573] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.788272][ T4573] device bridge_slave_0 left promiscuous mode [ 58.789447][ T4573] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.937855][ T4573] device veth1_macvtap left promiscuous mode [ 58.938977][ T4573] device veth0_macvtap left promiscuous mode [ 58.940289][ T4573] device veth1_vlan left promiscuous mode [ 58.941339][ T4573] device veth0_vlan left promiscuous mode [ 61.018194][ T4573] team0 (unregistering): Port device team_slave_1 removed [ 61.178515][ T4573] team0 (unregistering): Port device team_slave_0 removed [ 61.338136][ T4573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 61.548417][ T4573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.038931][ T4573] bond0 (unregistering): Released all slaves [ 64.478323][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.479507][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.509124][ T4573] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.588774][ T4573] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.668875][ T4573] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.759143][ T4573] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.928389][ T4573] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.018389][ T4573] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.089024][ T4573] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.179632][ T4573] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0