last executing test programs: 3m0.941576648s ago: executing program 0 (id=1): syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000001480)='./file1\x00', 0xc00a, &(0x7f0000000040)=ANY=[], 0x11, 0x6ae, &(0x7f0000000400)="$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") r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xc, 0x20000}, 0x20) 3m0.322290379s ago: executing program 0 (id=20): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2025) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r2], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32=r6], 0x50}}, 0x2) 2m59.439377926s ago: executing program 0 (id=25): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000000)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) 2m59.207470031s ago: executing program 32 (id=25): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000000)='./file0\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) 2m59.132748292s ago: executing program 3 (id=29): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2m58.101293922s ago: executing program 3 (id=33): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 2m57.803350277s ago: executing program 3 (id=36): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2m57.013465272s ago: executing program 3 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x12c5c18, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000180)='./file0/file0\x00', 0x0) 2m56.6060805s ago: executing program 3 (id=43): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x4716, 0x3) r1 = dup(r0) writev(r1, &(0x7f0000001540)=[{&(0x7f0000000300)="5d1b72799ce84b64a8d251a116e20eda4fe07c9d97d223fcabfec942e9097e1287759fc5480a62b8a8964c711bdb3263cfee", 0x32}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000000380)='n', 0x1}, {&(0x7f0000001400)="32976972962d506ff3ae340876a5a370c6d3cfa620bf71be8a505611a3529530c18cd25febff0fe8add074c152beace5d6ecd1427906b1f22cb1a54c6c6670f9ca94b679db2e84154410eb87d2fc84669c00c3244daa4a21d31824be", 0x5c}, {&(0x7f00000021c0)="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", 0xffffff67}, {&(0x7f0000001500)="f75a82a0306ed5019342"}], 0x5) setsockopt(r1, 0x1, 0x20, &(0x7f0000000340)="b5057018", 0x4) socket$igmp(0x2, 0x3, 0x2) syz_open_dev$vim2m(0x0, 0x47b, 0x2) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x20000000) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0xa000032a) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20000080, 0x0, 0x0) 2m56.108529359s ago: executing program 3 (id=45): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f00000002c0)='.\x00', 0x10000, 0x0) flock(r4, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2m55.828207314s ago: executing program 33 (id=45): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x2) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x2) r4 = open(&(0x7f00000002c0)='.\x00', 0x10000, 0x0) flock(r4, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2m25.327300023s ago: executing program 2 (id=172): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/65, 0x41}, 0x5}], 0x1, 0x1832b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendto$inet6(r1, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 2m24.205020085s ago: executing program 2 (id=186): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@mcast2, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x4, 0x7ff, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@local, 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 2m23.230958703s ago: executing program 2 (id=202): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r5, 0x0, r4, 0x0, 0x3, 0x0) fcntl$setpipe(r3, 0x4, 0xfffffffffffff000) 2m22.33375804s ago: executing program 2 (id=210): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x12c7498, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 2m22.091732215s ago: executing program 2 (id=212): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 2m21.850795599s ago: executing program 5 (id=213): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000000, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x65, 0x4004, @fd_index=0xa, 0x6, 0x0, 0x0, 0x10}) syz_io_uring_submit(r1, r2, &(0x7f0000001700)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2c, 0x0, 0x40}) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_uring_enter(r0, 0x1808, 0x0, 0x0, 0x0, 0x0) 2m21.703825492s ago: executing program 5 (id=217): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) 2m21.643255603s ago: executing program 2 (id=218): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000e00)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) close(0x4) 2m21.412107417s ago: executing program 34 (id=218): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @local}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000e00)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) close(0x4) 2m21.406293388s ago: executing program 5 (id=220): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x10000}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x1d, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 2m21.27799128s ago: executing program 5 (id=223): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_FD(r3, 0x4c03, r3) dup2(r2, r0) 2m21.001950695s ago: executing program 5 (id=226): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0xa, @empty, 0x5}}, 0x9, 0x5}, 0x90) 2m20.806415079s ago: executing program 5 (id=228): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x7, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, '.,\x03\x00\\{t\xca\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0xfa0, 0x932}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}}, 0x801) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m20.636461732s ago: executing program 35 (id=228): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x7, 0xd}, {}, {0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xd, 0x3, '.,\x03\x00\\{t\xca\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x55b, 0x2, 0x10000000, 0xfa0, 0x932}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}}, 0x801) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.949048419s ago: executing program 7 (id=980): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 7.807553472s ago: executing program 7 (id=982): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) eventfd2(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036887f"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="80000000100039042abd7000eafefffff7ff02e4", @ANYRES32=r5, @ANYBLOB="03000000c31006006000128008000100736974005400028008000100", @ANYRES32=r4, @ANYBLOB="08000300ac1414bb0500040080000000060012004e22000008000200ac14142d05000a000100000008001400ff0f00000500050016000000"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 6.747750172s ago: executing program 7 (id=987): r0 = socket(0x2c, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x200, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback, 0x40}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r4, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 6.744367712s ago: executing program 8 (id=988): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0xfffffffffffffffe, 0x6, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000180)=""/204, 0xcc, 0x3b9ac9ff, 0x0) 5.544070165s ago: executing program 8 (id=989): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r3, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 5.502074115s ago: executing program 7 (id=992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM(0x23, 0x1, &(0x7f000000d000/0x2000)=nil) 5.367672768s ago: executing program 8 (id=994): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000080)={[0x20000, 0x8000000, 0x80a0000, 0x8000000], 0xc, 0x40, 0xf511}) mbind(&(0x7f0000059000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 4.248378229s ago: executing program 7 (id=998): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x3000000, &(0x7f0000000240)={[{@norecovery}, {@barrier}]}, 0x1, 0x51f, &(0x7f0000000980)="$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") ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x9) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) sync() keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) stat(&(0x7f0000000000)='./file2\x00', 0x0) 4.19835686s ago: executing program 6 (id=999): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000000)=ANY=[], 0x4, 0xf82, &(0x7f0000003080)="$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") chdir(&(0x7f0000000140)='./file0\x00') syz_open_procfs(0x0, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x40000, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 3.981212044s ago: executing program 1 (id=1001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000040c0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4070000000000000400000000000e1ff95000000000000002ba76bb3019c1341056bd8174b79603123"], &(0x7f0000000140)='GPL\x00'}, 0x94) add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0xfffff, 0xfffffffffffffffe) 3.734060029s ago: executing program 6 (id=1002): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r6}) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x180107, r6}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3.645099461s ago: executing program 4 (id=1004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) 3.292904107s ago: executing program 8 (id=1005): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) 2.833270806s ago: executing program 1 (id=1006): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) 2.307395676s ago: executing program 1 (id=1007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_io_uring_setup(0x1783, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setitimer(0x0, &(0x7f0000000180)={{}, {0x77359400}}, &(0x7f0000000300)) 2.142488629s ago: executing program 8 (id=1008): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x40}}, 0x10, 0x0}, 0x41) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0xb138e9a15534fe61, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xfffeffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x48040) 2.142112279s ago: executing program 4 (id=1009): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) prctl$PR_SET_MM(0x23, 0x1, &(0x7f000000d000/0x2000)=nil) 2.08839812s ago: executing program 6 (id=1010): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 2.08415445s ago: executing program 7 (id=1020): r0 = userfaultfd(0x80802) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) 638.503038ms ago: executing program 8 (id=1011): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) sendmsg$kcm(r4, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 638.368988ms ago: executing program 1 (id=1012): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x1000000, &(0x7f0000000040)={[{@usrjquota}, {}]}, 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='mnt/encrypted_dir\x00', 0x0) r0 = creat(&(0x7f0000000140)='./bus\x00', 0x80) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0) syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000cc0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="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", @ANYRES64=r0, @ANYBLOB="a92fe8de136908e852768595aa546296821087e5b1bbc32156ada61f7c8a700880fe17c721514fd66f6d073702603f43f39d10ed62b784f0ea603a459b42f61a2174a30374bec0296612104179832730d5741398231d9ffd1e9995a06bb5ada99b9f2d4a71c580fe19a6dea2485a8ef6042e0d96839465522c03ac9b1e3e4be07bd09a1568add843860228063e6e4a59adc27ad98e26260605e1df1bd5e5dcc1735af362ce57237d4455a267daeea0b2368f8c69ed577f4849d608dcd60b0dabe1d6dada51feb6b1751dfa136da4ab1a73a25bcfba9ba846676558290f27b2a256c2257003da000000", @ANYRESHEX=r1, @ANYRESHEX, @ANYRES16=0x0, @ANYRES32=r0, @ANYRESHEX, @ANYRESHEX, @ANYRES8, @ANYBLOB="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"], 0x10, 0x1c4, &(0x7f0000000440)="$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") chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x121c80, 0x47) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000280)=0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) 638.257298ms ago: executing program 6 (id=1013): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000340)={"d264c53d724a0700000000000000fd41", 0x0, 0x0, {0xc, 0x7f}, {0x5, 0x9de}, 0x3, [0x5, 0x8, 0x100000000009, 0x7, 0x5, 0x0, 0x6, 0x7, 0x454, 0x5, 0x5, 0xea2, 0x8, 0x6, 0xff, 0x80000001]}) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 632.579248ms ago: executing program 4 (id=1014): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000000)=ANY=[], 0x4, 0xf82, &(0x7f0000003080)="$eJzs3U9sHNX9APA36/W/2MRr4AcGfoQUWhEo2CGJ1PQWBOqlEuLSOygkNMJQ1NBKREBMD4hKiCIhThUHEBdKpRSpSKBKFeqp7alVb+0F9UKlKpWCemgjJa5iv1nvPu9k12N7dtf7+UjffX7zZuf7HXsTz4xn3wZgZNXWHo8dW8hCeOeztx99+ansk2vL7mqucXDtMYu9RghhvKWfJdv7Ii64cumlk53aLBxZe8z74bGLzefOhBBWwsHweWiEj5aWv/rw3UcOffza1C1vnnvmlV3a/aZ0PwAAYC+68Mflv973jz88MH/5woETYbK5PD8+b8T+TDzuPxwPlPPj5Vpo72ct0WoiWW8sRi1ZbyxZr57kqRfkG0+2M16w3kSXfGMtyzrtJwAAAAyj/Ly2EbLaYlu/VltcXD/vv+aLuYls8bkzy6fP9qlQAAAAoLR/n1+76XaIY2oAahBpTOcvsK0976Pvbv0524paxfnqFecbmSj3ehNCCCGE2LlwPCKGIFbnKrzYAAAAANBhvrBNVnZ2pq7m1hq95b/4cK3z82EHJK+/zdNO7PDr//r5pzavUGn+DnY//3if8193/z941f84AACUt1ePJvP9yo+j83kM0nkEx9qeNTO21fOPWrKd+hbrLJpXcFjmGyyqc6ziOsoqqn+rP8d+Kao/nQ9zUBXVn87TOaiK6p+suI6yiurvcOUnDOI/66L6pyuuo6yi+vdVXEdZRfXPVFxHWUX1z1ZcR1lF9d9QcR1lFdW/v+I6yiqqf1huqy2qv1FxHWUV1T+/3gz8YURR/TdWXEdZRfXfVHEdZRXVf3PFdfTLnbHNvw8HCtab6XDwN3AHgwAAAEBH/x36+f9GNOoDUIMQQgx9vLr+y7B9+VSHZWJbURuAGnYrpju9hoQQQoiBjPN9vPYAAAAADIb8fQH5u95Xo3x8bNP4396/9piP11vHpzY2kI+Pd9n+RJfxyS7jAAAAQAi/ef30bW9lG/Pdpe/p3+p8ePm8UdPhk6uhxDxG6XyEW82/3XnPtpu/84QjwzIbGwAAAHtV9p3Pr97/6HsvzF++cOBEy9nv1Xi+m88DWo/XBj6N/fy+gNmkn+Xn0Cfa89QK1kuvD9xQtL3Ht7mjAAAAMMLy8/dGyGqLLefdjVCrLS5unI8vhPHs9JnlU4djP/98lt/PjU9eW/5QxXUDAAAAvds43+98/p9/ju9CmMgWnzuzfPrsen+2uXy81npdYG5jedZ6XaCRLD9SsPxo7MfP7wzfn5teW7548gfLT+30zgMAAMCIOPviuWeeXF4+9cPR+aIeQtjWdsIg7IUvfLGrX/T7fyYAAGCnffnl2+M/Ojr72/X3/2/Mf3c1fnEw9htxbr8/xeX5fQL5+wA2vV//ifY8c0XrPd++XiNZbyzGZFL3VMt2wtp8g+3Pmy/K12jfzkRBvpkk32ySL52noJ6sn3WYSzB0mAkwX28uWZ7Ow1hPcmRJ/rs75AIAAIDc0gvPPr909sVzD5559smnTz196rmjR45/+/jxww9966Gltfv6l1rv7gcAAACG0cZNv/2uBAAAAAAAAAAAAAAAAAAAAEZXFR8n1u99BAAAgFH3r/MhhBUhCiL/gMF+1zHskQ1ADbsXq5P9r2FvR/DvUAghhBDbjP6e9005lhmMWF1NP2keAAAAYHddufTSydZ2k5VsR/M1t9ZYb67GvHk7++Bf5q9FvtrFh9uvl+zb0WoYdVW//uUf1PyTHcc/eHVn869diG9s9Lv//1dr38CJtcd67E33mvfepV8sNPOHEG6v95g/3f/He83Y7lCS/97QW/7V95L8T7T1ar3mvy/Jv6/H/Jv2//miDFPXzX9/zL8Q+4fu6TV/+y5OJtl6fQF8M9n/p0Kv+ZP9b/SYMPFAzA8Ao6j523z1fH8L2WH5UUJ+PD0T+/n+5ges6d0PWz3+ryXbqW+78vbt5sdBt8Z+86hupT1vbqv159+X2djeULLO1LDcVVJU/079HHdbUf3jFddRVlH9ExXXUVZR/Z3P3gdPUf3XP3scHEX193whos+K6h+W68pF9c9UXEdZRfXPVlxHWUX1b/X3eL8U1b+/4jrKKqp/ruI6yiqqv+RltcoV1T9fcR1lFdV/Y8V1lFVU/00V11FWUf03V1xHv9wR26Lz4fz8cy6O5f1G0p/s8L3s+Y8hAAAAwK7650DO/9dy5aDvtQghhBBiGGJsAGoQYpjjP6vr+l2HEGL3YnW1n1cf6LdsiO4VB2Dn7O5sFgw6P//R5uc/2vz8uZ78L/FZ0s+NdRmvdxkf7zI+kYxnyRMni8ajm5LtrubXNaObu4z/X9yDovH9yfN/nIzf2mX7C13Gb+syfnuX8Tu6jAMAADAabomt80MAAADYu17+5adv/PreJy7NX75w4ESY2DTv/OHYn4x/W3899tN573Pj8W/+P4n992P7u9j+PVnf/ScAAACw+/LPifH3fwAAANi78s8pdf4PAAAAe9d8bJ3/AwAAwN51Y2yd/wMAAMAelk11Xhzb/LrA3bHtdV4/AGDw/X9s74ztgdjeFduvxTY/Drgntl+vqD4AYOf8/Hs/Pf5WtjHf/9Fk/EpcnrebrKxfKchq7TP5T8d2X2y/0WM96ecB9Jo/t7/HPLuVf26b+QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvaO29njs2EIWwjufvf3ozybe+PO1ZXc11zi49pjFXiOEMN58Xj660f9VXPHKpZdOtrZXY5uFIyELWXN5eOxiM9NMCGElHAyfh0b4aGn5qw/ffeTQx69N3fLmuWde2cVvQdv+AQAAwF70vwAAAP//7lUWHg==") chdir(&(0x7f0000000140)='./file0\x00') syz_open_procfs(0x0, 0x0) syz_mount_image$fuse(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x40000, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 609.969498ms ago: executing program 1 (id=1015): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}, 0x1, 0x300}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 378.115893ms ago: executing program 6 (id=1016): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) timer_create(0x8, &(0x7f0000000240)={0x0, 0x18, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) timer_settime(r1, 0x1, &(0x7f0000000300)={{}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r3}, 0x10) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 300.052664ms ago: executing program 4 (id=1017): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x44, 0x0, &(0x7f0000000240)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 235.056415ms ago: executing program 4 (id=1018): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000280)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x1a5) mount$overlay(0x0, 0x0, 0x0, 0x29004e, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x121042, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) splice(r1, 0x0, r3, 0x0, 0x200000000001, 0x0) 82.727848ms ago: executing program 4 (id=1019): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x4d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) 810.53µs ago: executing program 6 (id=1021): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x3000000, &(0x7f0000000240)={[{@norecovery}, {@barrier}]}, 0x1, 0x51f, &(0x7f0000000980)="$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") ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0x9) setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0) sync() keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c04, &(0x7f0000000340), 0x1, 0x779, &(0x7f0000001900)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTuZ206bmWmSJjPV+XzgZs65907O+c79cc7MPdwbQN8aT//kIg5HxLtJxGhjfhIRQ/XUYMTJjfVura0W0ymJ9fWXf0nq69xcWy1G03tSBxuZ/0fEN29FHMltLre6vDJXKJdLi438ZG3+wmR1eeXo+fnCbGm2tHB8anr62ImnThzfvVh/+37l0LX3Xnj885N/vPm/q+98m8TJONRY1hzHbhmP8cZnMpR+hHd5frcL67Gk1xVgR9JDc2DjKI/DMRoD9RQA8E/2ekSsAwB9JtH+A0CfyX4HuLm2Wsym3v4i0V3Xn4uI/RvxZ9c3N5YMNq7Z7a9fBx25mdx1ZSSJiLFdKH88Ij7+8tVP0yn26DokQCtvXI6Is2Pjm8//yaYxC9v1RIdl+xqv4/fMd/6D7vkq7f883ar/l7vd/4kW/Z/hFsfuTtz3+D+wC4V0kPb/nm0a23arKf6GsYFG7l/1Pt9Qcu58uZSe2/4dERMxNJzmpzqUMXHjzxvtljX3/359/7VP0vLT1ztr5H4aHL77PTOFWuFBYm52/XLEI4Ot4k9ub/+kTf/39BbLePGZtz9qtyyNP403mzbHH43RSXtj/UrEYy23/50RbUnH8YmT9d1hMtspWvjihw9H2pXfvP3TKS0/+y7QDen2H+kc/1jSPF6zuv0yvrsy+nW7ZfePv/X+vy95pZ7O+hGXCrXa4lTEvuSlzfOP3Xlvls/WT+OfeLT18d9p/0+/E57dYvyD137+bOfx7600/pltbf/tJ67emhtoV/7Wtv90PTXRmLOV899WK/ggnx0AAAAAAAAAAAAAAAAAAAAAAAAAbFUuIg5FksvfTudy+fzGM7z/GyO5cqVaO3KusrQwE/VnZY/FUC671eVo0/1Qpxr3w8/yx+7JPxkR/4mID4YPJNl9FGd6HDsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZA62ef5/6sfhXtcOANgz+3tdAQCg67T/ANB/tP8A0H+0/wDQf7T/ANB/tP8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADssdOnTqXT+u9rq8U0P3NxeWmucvHoTKk6l59fKuaLlcUL+dlKZbZcyhcr8/f7f+VK5cJ0LCxdmqyVqrXJ6vLKmfnK0kLtzPn5wmzpTGmoK1EBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPZUl1fmCuVyaVFiB4n1h6MavU8MNHanh6U+XU0kD0c1djnR6ayR687JCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBv4K8AAAD//8yLIwE=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) stat(&(0x7f0000000000)='./file2\x00', 0x0) 0s ago: executing program 1 (id=1031): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={@empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x43f, 0x6, 0x80c20048, r3}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046, r1}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r5}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) kernel console output (not intermixed with test programs): : veth1_to_batadv: link becomes ready [ 66.293047][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.302088][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.315252][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.327720][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.336944][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.347786][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.356811][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.385596][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.396680][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.408381][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.421808][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.430997][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.439747][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.448866][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.462173][ T4191] device veth1_vlan entered promiscuous mode [ 66.479233][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.488182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.497337][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.549387][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.558428][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.603283][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.612823][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.623186][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.632112][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.640817][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.648682][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.669451][ T4191] device veth0_macvtap entered promiscuous mode [ 66.704164][ T4181] device veth0_vlan entered promiscuous mode [ 66.712350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.721749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.730841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.762932][ T4191] device veth1_macvtap entered promiscuous mode [ 66.790845][ T4181] device veth1_vlan entered promiscuous mode [ 66.799184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.814950][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.823540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.832309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.844464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.853419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.862859][ T4185] device veth0_vlan entered promiscuous mode [ 66.908061][ T4185] device veth1_vlan entered promiscuous mode [ 66.914729][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.918599][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.935782][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.937993][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.953021][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.964065][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.975593][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.997698][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.007269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.015983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.025133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.034901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.049122][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.060153][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.061283][ T2239] Bluetooth: hci0: command 0x040f tx timeout [ 67.071282][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.083166][ T2239] Bluetooth: hci2: command 0x040f tx timeout [ 67.088009][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.096698][ T2239] Bluetooth: hci1: command 0x040f tx timeout [ 67.104926][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.123529][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.132406][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.141140][ T4255] Bluetooth: hci4: command 0x040f tx timeout [ 67.147550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.155746][ T4255] Bluetooth: hci3: command 0x040f tx timeout [ 67.159132][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.174196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.183775][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.191978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.200920][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.218693][ T4181] device veth0_macvtap entered promiscuous mode [ 67.230997][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.239746][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.248945][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.257990][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.286415][ T4181] device veth1_macvtap entered promiscuous mode [ 67.293579][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.303171][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.326474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.337002][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.345432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.369921][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.389999][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.409989][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.419898][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.430511][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.441629][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.451490][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.463227][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.475463][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.488613][ T4185] device veth0_macvtap entered promiscuous mode [ 67.499683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.508234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.518202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.527182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.536329][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.550193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.600895][ T4185] device veth1_macvtap entered promiscuous mode [ 67.616826][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.648258][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.659705][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.676692][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.686903][ T4181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.704603][ T4181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.720088][ T4181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.758616][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.770906][ T4290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.795650][ T4290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.808504][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.818799][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.829590][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.839773][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.856580][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.873059][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.889798][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.903654][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.912345][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.927311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.985847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.994494][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.016173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.030168][ T4181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.046944][ T4181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.073893][ T4181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.083287][ T4181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.131478][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.139479][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.153204][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.176344][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.200889][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.219797][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.230170][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.241078][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.251248][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.262909][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.274227][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.299265][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.307514][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.316713][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.355796][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.365014][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.374417][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.383296][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.599604][ T4312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 68.782431][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.804354][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.854869][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.870566][ T4321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.890096][ T4321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.064849][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.113376][ T4282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.122823][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.201926][ T4311] Bluetooth: hci1: command 0x0419 tx timeout [ 69.241116][ T4311] Bluetooth: hci2: command 0x0419 tx timeout [ 69.279068][ T4311] Bluetooth: hci0: command 0x0419 tx timeout [ 69.301599][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 69.310687][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 69.319681][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 69.328717][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 69.337769][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.346890][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.356003][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.365106][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.374192][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.383325][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 69.919727][ T4311] Bluetooth: hci3: command 0x0419 tx timeout [ 69.925943][ T4311] Bluetooth: hci4: command 0x0419 tx timeout [ 69.951400][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.091215][ T4282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.121802][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.132071][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.355339][ T4337] loop0: detected capacity change from 0 to 1024 [ 71.386490][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.393147][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.657560][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 71.713431][ T4346] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.006068][ T4355] loop2: detected capacity change from 0 to 1024 [ 72.123907][ T4355] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,dax=inode,nolazytime,abort,dax=inode,lazytime,noload,bsddf,noauto_da_alloc,,errors=continue. Quota mode: none. [ 72.874146][ T4365] loop1: detected capacity change from 0 to 8192 [ 72.958887][ T4365] FAT-fs (loop1): bogus number of directory entries (9) [ 73.033058][ T4365] FAT-fs (loop1): Can't find a valid FAT filesystem [ 73.797078][ T4378] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.387084][ T4385] chnl_net:caif_netlink_parms(): no params data found [ 75.845275][ T4385] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.856508][ T4385] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.867734][ T4385] device bridge_slave_0 entered promiscuous mode [ 75.918689][ T4385] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.935159][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.975129][ T4385] device bridge_slave_1 entered promiscuous mode [ 76.094136][ T4431] VFS: Mount too revealing [ 76.100488][ T4238] Bluetooth: hci0: command 0x0409 tx timeout [ 76.165673][ T4385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.248163][ T4385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.372091][ T4385] team0: Port device team_slave_0 added [ 76.380317][ T4385] team0: Port device team_slave_1 added [ 76.704242][ T4385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.740127][ T4385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.856283][ T4385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.882037][ T4385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.889147][ T4385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.997306][ T4385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.230084][ T4385] device hsr_slave_0 entered promiscuous mode [ 77.257015][ T4385] device hsr_slave_1 entered promiscuous mode [ 77.279536][ T4385] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.321696][ T4385] Cannot create hsr debugfs directory [ 77.735799][ T4467] loop2: detected capacity change from 0 to 128 [ 77.859288][ T4385] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 77.868915][ T4467] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 77.902123][ T4467] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.968189][ T4385] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.006677][ T4441] chnl_net:caif_netlink_parms(): no params data found [ 78.050024][ T4467] process 'syz.2.58' launched './file1' with NULL argv: empty string added [ 78.065905][ T4385] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.256607][ T4261] Bluetooth: hci0: command 0x041b tx timeout [ 78.283955][ T4262] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.458771][ T4385] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 78.820491][ T4260] Bluetooth: hci3: command 0x0409 tx timeout [ 79.512052][ T4441] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.550848][ T4441] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.670532][ T4441] device bridge_slave_0 entered promiscuous mode [ 79.764235][ T4262] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.808494][ T4493] loop4: detected capacity change from 0 to 32768 [ 79.829983][ T4441] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.840551][ T4441] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.852176][ T4493] ======================================================= [ 79.852176][ T4493] WARNING: The mand mount option has been deprecated and [ 79.852176][ T4493] and is ignored by this kernel. Remove the mand [ 79.852176][ T4493] option from the mount to silence this warning. [ 79.852176][ T4493] ======================================================= [ 79.859406][ T4441] device bridge_slave_1 entered promiscuous mode [ 79.981968][ T4493] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode. [ 80.026272][ T4262] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.216780][ T4262] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.353180][ T4385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.371799][ T4224] Bluetooth: hci0: command 0x040f tx timeout [ 80.384133][ T4441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.443836][ T4441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.463973][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.478755][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.503457][ T4385] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.535667][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.546619][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.556176][ T4380] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.563317][ T4380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.623925][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.634400][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.644179][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.653088][ T4380] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.660382][ T4380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.682225][ T4441] team0: Port device team_slave_0 added [ 80.710242][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.739527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.782635][ T4441] team0: Port device team_slave_1 added [ 80.794852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.827612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.920150][ T4262] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.962457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.971130][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.992802][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.029496][ T4385] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.080460][ T4385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.118492][ T4441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.149310][ T4441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.220672][ T4477] Bluetooth: hci3: command 0x041b tx timeout [ 81.240527][ T4441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.271448][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.281522][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.310847][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.342022][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.375398][ T4262] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.428359][ T4441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.444498][ T4441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.475668][ T4441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.492400][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.520092][ T4262] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.798848][ T4262] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.965890][ T4441] device hsr_slave_0 entered promiscuous mode [ 81.994776][ T4441] device hsr_slave_1 entered promiscuous mode [ 82.017352][ T4441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.149533][ T4441] Cannot create hsr debugfs directory [ 82.843092][ T13] Bluetooth: hci0: command 0x0419 tx timeout [ 83.136931][ T4385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.168629][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.182683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.300585][ T4261] Bluetooth: hci3: command 0x040f tx timeout [ 83.739294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.749263][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.947445][ T4385] device veth0_vlan entered promiscuous mode [ 83.969794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.984675][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.999385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.011752][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.023238][ T4193] ocfs2: Unmounting device (7,4) on (node local) [ 84.069968][ T4545] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.078209][ T4545] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.106901][ T4546] device bridge_slave_1 left promiscuous mode [ 84.132572][ T4546] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.161645][ T4546] device bridge_slave_0 left promiscuous mode [ 84.167987][ T4546] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.260010][ T4385] device veth1_vlan entered promiscuous mode [ 84.275218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.299640][ T4548] device vlan2 entered promiscuous mode [ 84.305522][ T4548] device bridge0 entered promiscuous mode [ 84.330287][ T4441] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 84.349924][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.367438][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.375309][ T4549] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.409750][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 84.430083][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.446304][ T4551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.464400][ T4551] bond0: (slave bond_slave_0): Releasing backup interface [ 84.477525][ T4551] bond0: (slave bond_slave_1): Releasing backup interface [ 84.516406][ T4551] team0: Port device team_slave_0 removed [ 84.529006][ T4551] team0: Port device team_slave_1 removed [ 84.536108][ T4551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.545035][ T4551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.554935][ T4551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.563188][ T4551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.578741][ T4441] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 84.597463][ T4552] netlink: 'syz.2.70': attribute type 10 has an invalid length. [ 84.634637][ T4552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.643065][ T4552] team0: Port device bond0 added [ 84.660929][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 84.676789][ T4553] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'. [ 84.717163][ T4553] team0 (unregistering): Port device bond0 removed [ 84.761533][ T4441] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 84.771448][ T4441] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 84.784200][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.794269][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.844447][ T4385] device veth0_macvtap entered promiscuous mode [ 84.863815][ T4385] device veth1_macvtap entered promiscuous mode [ 84.929876][ T4385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.943340][ T4385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.953608][ T4385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.964658][ T4385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.974928][ T4385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.987764][ T4385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.997939][ T4385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.019715][ T4385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.032023][ T4385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.054694][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.064947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.074680][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.084026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.105152][ T4561] loop4: detected capacity change from 0 to 2048 [ 85.139945][ T4385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.159211][ T4385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.170511][ T4385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.189175][ T4385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.199137][ T4385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.211308][ T4385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.221377][ T4385] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.231993][ T4385] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.243688][ T4385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.275488][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.281912][ T4561] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 85.291791][ T4561] UDF-fs: Scanning with blocksize 512 failed [ 85.302297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.317556][ T4561] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.318022][ T4385] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.354219][ T4385] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.381426][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 85.384978][ T4385] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.417596][ T4385] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.439538][ T4441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.531870][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.561543][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.628185][ T4441] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.658766][ T4570] loop2: detected capacity change from 0 to 8192 [ 86.685449][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.698258][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.706999][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.714124][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.732520][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.738255][ T4290] attempt to access beyond end of device [ 86.738255][ T4290] loop4: rw=1, want=2050, limit=2048 [ 86.744119][ T23] cfg80211: failed to load regulatory.db [ 86.753359][ T4290] Buffer I/O error on dev loop4, logical block 1024, lost async page write [ 86.766623][ T4290] attempt to access beyond end of device [ 86.766623][ T4290] loop4: rw=1, want=2050, limit=2048 [ 86.777507][ T4290] Buffer I/O error on dev loop4, logical block 1024, lost async page write [ 86.782920][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.798410][ T4290] attempt to access beyond end of device [ 86.798410][ T4290] loop4: rw=1, want=2050, limit=2048 [ 86.835580][ T4290] Buffer I/O error on dev loop4, logical block 1024, lost async page write [ 86.851020][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.858168][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.860948][ T4570] netlink: 104 bytes leftover after parsing attributes in process `syz.2.73'. [ 86.875102][ T4290] attempt to access beyond end of device [ 86.875102][ T4290] loop4: rw=1, want=2050, limit=2048 [ 86.912131][ T4290] Buffer I/O error on dev loop4, logical block 1024, lost async page write [ 86.927828][ T4290] attempt to access beyond end of device [ 86.927828][ T4290] loop4: rw=1, want=2052, limit=2048 [ 86.944149][ T4290] Buffer I/O error on dev loop4, logical block 1025, lost async page write [ 86.971502][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.979605][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.999152][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.009946][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.020640][ T4290] attempt to access beyond end of device [ 87.020640][ T4290] loop4: rw=1, want=2052, limit=2048 [ 87.028765][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.043034][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.077648][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.080465][ T4290] Buffer I/O error on dev loop4, logical block 1025, lost async page write [ 87.099958][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.120485][ T4290] attempt to access beyond end of device [ 87.120485][ T4290] loop4: rw=1, want=2052, limit=2048 [ 87.137739][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.140839][ T4290] Buffer I/O error on dev loop4, logical block 1025, lost async page write [ 87.158985][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.170600][ T4290] attempt to access beyond end of device [ 87.170600][ T4290] loop4: rw=1, want=2052, limit=2048 [ 87.198287][ T4290] Buffer I/O error on dev loop4, logical block 1025, lost async page write [ 87.210264][ T4290] attempt to access beyond end of device [ 87.210264][ T4290] loop4: rw=1, want=2054, limit=2048 [ 87.225332][ T4290] Buffer I/O error on dev loop4, logical block 1026, lost async page write [ 87.237518][ T4290] attempt to access beyond end of device [ 87.237518][ T4290] loop4: rw=1, want=2054, limit=2048 [ 87.248805][ T4290] Buffer I/O error on dev loop4, logical block 1026, lost async page write [ 87.500215][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.546981][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.677843][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.837630][ T4576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.903141][ T4441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.932461][ T4576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.950159][ T4441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.964557][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.001249][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.028145][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.126840][ T4578] ODEBUG: Out of memory. ODEBUG disabled [ 88.464622][ T4594] Zero length message leads to an empty skb [ 88.557580][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.574379][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.797228][ T4441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.263413][ T4607] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.271226][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.746149][ T4610] device bridge_slave_1 left promiscuous mode [ 89.761541][ T4610] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.782228][ T4610] device bridge_slave_0 left promiscuous mode [ 89.798401][ T4610] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.041617][ T4262] device hsr_slave_0 left promiscuous mode [ 90.060087][ T4262] device hsr_slave_1 left promiscuous mode [ 90.071591][ T4262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.079106][ T4262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.102006][ T4262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.117633][ T4260] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.119851][ T4262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.154756][ T4262] device bridge_slave_1 left promiscuous mode [ 90.168105][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.195823][ T4262] device bridge_slave_0 left promiscuous mode [ 90.207588][ T4262] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.245986][ T4262] device hsr_slave_0 left promiscuous mode [ 90.256095][ T4262] device hsr_slave_1 left promiscuous mode [ 90.268384][ T4262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.279741][ T4262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.296061][ T4262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.308220][ T4262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.319771][ T4262] device bridge_slave_1 left promiscuous mode [ 90.327315][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.337797][ T4262] device bridge_slave_0 left promiscuous mode [ 90.345232][ T4262] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.364507][ T4262] device veth1_macvtap left promiscuous mode [ 90.371041][ T4262] device veth0_macvtap left promiscuous mode [ 90.377287][ T4262] device veth1_vlan left promiscuous mode [ 90.383517][ T4260] usb 3-1: Using ep0 maxpacket: 16 [ 90.389325][ T4262] device veth0_vlan left promiscuous mode [ 90.400024][ T4262] device veth1_macvtap left promiscuous mode [ 90.408652][ T4262] device veth0_macvtap left promiscuous mode [ 90.415333][ T4262] device veth1_vlan left promiscuous mode [ 90.423943][ T4262] device veth0_vlan left promiscuous mode [ 90.526671][ T4260] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.543227][ T4260] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 90.562704][ T4260] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 90.580056][ T4260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.595166][ T4260] usb 3-1: config 0 descriptor?? [ 90.654185][ T4260] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 90.858891][ T4262] team0 (unregistering): Port device team_slave_1 removed [ 90.875441][ T4262] team0 (unregistering): Port device team_slave_0 removed [ 90.888537][ T13] usb 3-1: USB disconnect, device number 2 [ 90.895068][ T4262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.913985][ T4262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.983426][ T4262] bond0 (unregistering): Released all slaves [ 91.126147][ T4262] team0 (unregistering): Port device team_slave_1 removed [ 91.141045][ T4262] team0 (unregistering): Port device team_slave_0 removed [ 91.153967][ T4262] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.170788][ T4262] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.237334][ T4262] bond0 (unregistering): Released all slaves [ 91.308985][ T4620] netlink: 4 bytes leftover after parsing attributes in process `syz.5.85'. [ 91.377161][ T4624] netlink: 'syz.4.87': attribute type 1 has an invalid length. [ 91.432196][ T4624] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.87'. [ 91.527433][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.562077][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.609541][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 91.691242][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 91.713349][ T4441] device veth0_vlan entered promiscuous mode [ 91.721435][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.770306][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.796150][ T4441] device veth1_vlan entered promiscuous mode [ 91.864979][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.885011][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.905088][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 91.920062][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 91.931727][ T4441] device veth0_macvtap entered promiscuous mode [ 92.005287][ T4639] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.105502][ T4643] device bond_slave_0 entered promiscuous mode [ 92.112116][ T4643] device bond_slave_1 entered promiscuous mode [ 92.159107][ T4643] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 92.197682][ T4643] bond1: (slave macvlan2): making interface the new active one [ 92.229007][ T4643] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 92.321586][ T4441] device veth1_macvtap entered promiscuous mode [ 92.330592][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.341221][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.367656][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.811977][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 93.350824][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 93.366430][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.405195][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.427990][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.444814][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.455451][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.467509][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.478034][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.488146][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 93.490768][ T4441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.499212][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 93.515958][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 93.542965][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.559494][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.579629][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.591054][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.601518][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.611214][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.622411][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.623306][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 93.640754][ T4441] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.650799][ T23] usb 2-1: SerialNumber: syz [ 93.659076][ T4441] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.673159][ T4441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.691072][ T4670] netlink: 24 bytes leftover after parsing attributes in process `syz.5.100'. [ 93.701982][ T23] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 93.711885][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.723647][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.739135][ T4441] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.748748][ T4441] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.758114][ T4441] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.771481][ T4441] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.912719][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.957316][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.000063][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 94.056399][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.086434][ T4672] loop5: detected capacity change from 0 to 32768 [ 94.128320][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.156921][ T23] usb 2-1: USB disconnect, device number 2 [ 94.175756][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 94.221874][ T4672] XFS (loop5): Mounting V5 Filesystem [ 94.331594][ T4672] XFS (loop5): Ending clean mount [ 94.364960][ T4672] XFS (loop5): Quotacheck needed: Please wait. [ 94.511040][ T4672] XFS (loop5): Quotacheck: Done. [ 94.631120][ T26] audit: type=1800 audit(1759163520.604:2): pid=4672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.101" name="file1" dev="loop5" ino=6150 res=0 errno=0 [ 95.401595][ T4691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.104'. [ 95.483033][ T4691] netlink: 12 bytes leftover after parsing attributes in process `syz.6.104'. [ 96.209592][ T4385] XFS (loop5): Unmounting Filesystem [ 96.792012][ T4728] tipc: Started in network mode [ 96.810473][ T4728] tipc: Node identity 4, cluster identity 4711 [ 96.816789][ T4728] tipc: Node number set to 4 [ 97.939439][ T4744] SET target dimension over the limit! [ 98.853903][ T4756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 98.923135][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 99.225263][ T4773] netlink: 12 bytes leftover after parsing attributes in process `syz.5.128'. [ 100.083198][ T4776] netlink: 452 bytes leftover after parsing attributes in process `syz.5.131'. [ 100.146764][ T4776] netlink: 28 bytes leftover after parsing attributes in process `syz.5.131'. [ 100.428273][ T4787] syz.2.136 uses obsolete (PF_INET,SOCK_PACKET) [ 100.465067][ T4790] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 101.134655][ T4807] af_packet: tpacket_rcv: packet too big, clamped from 20 to 4294967272. macoff=96 [ 101.147157][ T4807] loop2: detected capacity change from 0 to 16 [ 101.920620][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.056323][ T4815] loop6: detected capacity change from 0 to 8 [ 102.069819][ T4819] netlink: 24 bytes leftover after parsing attributes in process `syz.2.145'. [ 102.164825][ T4815] SQUASHFS error: lzo decompression failed, data probably corrupt [ 102.179258][ T4815] SQUASHFS error: Failed to read block 0x0: -5 [ 102.204762][ T4815] SQUASHFS error: Unable to read data cache entry [0] [ 102.210449][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 102.220854][ T4815] SQUASHFS error: Unable to read page, block 0, size ff [ 102.228134][ T4815] SQUASHFS error: Unable to read data cache entry [0] [ 102.268714][ T4815] SQUASHFS error: Unable to read page, block 0, size ff [ 102.288387][ T4815] SQUASHFS error: lzo decompression failed, data probably corrupt [ 102.322184][ T4815] SQUASHFS error: Failed to read block 0x0: -5 [ 102.330667][ T7] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 102.356390][ T4815] SQUASHFS error: lzo decompression failed, data probably corrupt [ 102.358142][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.399165][ T7] usb 2-1: config 0 descriptor?? [ 102.444302][ T4815] SQUASHFS error: Failed to read block 0x0: -5 [ 102.445086][ T4834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.153'. [ 102.480792][ T26] audit: type=1800 audit(1759163528.464:3): pid=4815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.147" name="file2" dev="loop6" ino=3 res=0 errno=0 [ 102.501282][ T4834] netlink: 12 bytes leftover after parsing attributes in process `syz.5.153'. [ 102.554947][ T4836] loop2: detected capacity change from 0 to 512 [ 102.654283][ T4836] EXT4-fs (loop2): inline encryption not supported [ 102.680686][ T7] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 102.708761][ T4836] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 102.732863][ T4836] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 102.800103][ T4836] EXT4-fs (loop2): 1 truncate cleaned up [ 102.804937][ T4851] loop6: detected capacity change from 0 to 16 [ 102.816324][ T4836] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,inlinecrypt,. Quota mode: none. [ 102.886599][ T4836] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.154: bg 0: block 255: padding at end of block bitmap is not set [ 102.929172][ T4851] erofs: (device loop6): mounted with root inode @ nid 36. [ 102.939564][ T4836] EXT4-fs (loop2): Remounting filesystem read-only [ 103.017418][ T4853] loop5: detected capacity change from 0 to 128 [ 103.127959][ T4855] netlink: 24 bytes leftover after parsing attributes in process `syz.2.160'. [ 105.431012][ T7] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 106.100340][ C1] sched: RT throttling activated [ 106.813370][ T4887] gfs2: not a GFS2 filesystem [ 106.907519][ T7] asix: probe of 2-1:0.0 failed with error -71 [ 106.921682][ T7] usb 2-1: USB disconnect, device number 3 [ 107.377983][ T4914] loop1: detected capacity change from 0 to 128 [ 107.455791][ T4914] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.485191][ T4919] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 107.519266][ T4914] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.611003][ T4897] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.153989][ T4933] capability: warning: `syz.1.188' uses deprecated v2 capabilities in a way that may be insecure [ 108.376826][ T4938] UBIFS error (pid: 4938): cannot open "./file0", error -22 [ 108.442349][ T4943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.194'. [ 108.653000][ T4943] device hsr_slave_1 left promiscuous mode [ 109.459058][ T4976] netlink: 'syz.1.206': attribute type 4 has an invalid length. [ 109.496172][ T4978] netlink: 28 bytes leftover after parsing attributes in process `syz.5.207'. [ 109.530676][ T4978] netlink: 8 bytes leftover after parsing attributes in process `syz.5.207'. [ 109.552151][ T4976] netlink: 'syz.1.206': attribute type 4 has an invalid length. [ 109.586513][ T4979] netlink: 'syz.5.207': attribute type 10 has an invalid length. [ 109.611919][ T4979] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.619336][ T4979] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.667546][ T4979] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.674731][ T4979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.682255][ T4979] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.689331][ T4979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.713833][ T4979] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 109.764585][ T4982] loop4: detected capacity change from 0 to 128 [ 109.902650][ T4989] netlink: 4 bytes leftover after parsing attributes in process `syz.5.211'. [ 109.922894][ T4982] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 109.940814][ T4982] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.075059][ T4989] bond0: (slave bond_slave_1): Releasing backup interface [ 110.517038][ T155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.638708][ T155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.763944][ T5013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.222'. [ 110.796854][ T5015] netlink: 168 bytes leftover after parsing attributes in process `syz.5.220'. [ 110.847618][ T155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.903659][ T5012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.221'. [ 110.962919][ T155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.223314][ T5031] overlayfs: failed to clone upperpath [ 111.387280][ T5033] netlink: 24 bytes leftover after parsing attributes in process `syz.1.229'. [ 111.490468][ T5033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 111.836230][ T26] audit: type=1800 audit(1759163537.814:4): pid=5026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.224" name="/" dev="fuse" ino=9 res=0 errno=0 [ 111.918798][ T5028] chnl_net:caif_netlink_parms(): no params data found [ 112.199819][ T5028] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.207337][ T5028] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.252457][ T5028] device bridge_slave_0 entered promiscuous mode [ 112.319634][ T5028] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.337331][ T5028] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.361594][ T5028] device bridge_slave_1 entered promiscuous mode [ 112.404478][ T5067] netlink: 'syz.1.241': attribute type 1 has an invalid length. [ 112.479995][ T5068] netlink: 32 bytes leftover after parsing attributes in process `syz.4.240'. [ 112.550058][ T5070] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.582064][ T5070] bond1: (slave bond2): making interface the new active one [ 112.591750][ T5070] bond1: (slave bond2): Enslaving as an active interface with an up link [ 112.645085][ T155] device hsr_slave_0 left promiscuous mode [ 112.661988][ T155] device hsr_slave_1 left promiscuous mode [ 112.680275][ T155] device veth1_macvtap left promiscuous mode [ 112.686993][ T155] device veth0_macvtap left promiscuous mode [ 112.711340][ T155] device veth1_vlan left promiscuous mode [ 112.717676][ T155] device veth0_vlan left promiscuous mode [ 113.053822][ T155] bond0 (unregistering): Released all slaves [ 113.086042][ T5067] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 113.110483][ T5067] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 113.151870][ T5028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.179726][ T5028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.220695][ T1108] Bluetooth: hci2: command 0x0409 tx timeout [ 113.299101][ T5028] team0: Port device team_slave_0 added [ 113.325244][ T5028] team0: Port device team_slave_1 added [ 113.380939][ T5040] chnl_net:caif_netlink_parms(): no params data found [ 113.476792][ T5028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.488409][ T5028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.536054][ T5028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.565858][ T5028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.584312][ T5028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.620382][ T5028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.717542][ T5040] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.763948][ T5040] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.796931][ T5040] device bridge_slave_0 entered promiscuous mode [ 113.844101][ T5028] device hsr_slave_0 entered promiscuous mode [ 113.859814][ T5028] device hsr_slave_1 entered promiscuous mode [ 113.899831][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 113.907046][ T5028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.920491][ T5028] Cannot create hsr debugfs directory [ 113.926198][ T5040] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.941497][ T5040] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.949810][ T5040] device bridge_slave_1 entered promiscuous mode [ 114.034574][ T5040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.056193][ T5040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.157413][ T5040] team0: Port device team_slave_0 added [ 114.179390][ T5040] team0: Port device team_slave_1 added [ 114.245300][ T5095] __nla_validate_parse: 2 callbacks suppressed [ 114.245316][ T5095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.247'. [ 114.333067][ T5040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.350014][ T5040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.353426][ T5095] loop4: detected capacity change from 0 to 512 [ 114.415740][ T5040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.481580][ T5040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.488563][ T5040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.520872][ T5040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.548174][ T5095] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.247: bad orphan inode 17 [ 114.570776][ T5095] ext4_test_bit(bit=16, block=4) = 1 [ 114.576200][ T5095] is_bad_inode(inode)=0 [ 114.598664][ T5095] NEXT_ORPHAN(inode)=0 [ 114.609743][ T5095] max_ino=32 [ 114.626088][ T5095] i_nlink=1 [ 114.628220][ T5040] device hsr_slave_0 entered promiscuous mode [ 114.629414][ T5095] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 114.646733][ T5040] device hsr_slave_1 entered promiscuous mode [ 114.671228][ T5040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.680003][ T5040] Cannot create hsr debugfs directory [ 114.784660][ T5028] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 114.811622][ T5100] netlink: 'syz.1.249': attribute type 1 has an invalid length. [ 114.828784][ T5100] netlink: 'syz.1.249': attribute type 2 has an invalid length. [ 114.868427][ T5028] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 114.919365][ T5028] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 114.958339][ T5028] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 115.198392][ T5028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.248823][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 115.253198][ T5115] loop4: detected capacity change from 0 to 2048 [ 115.267741][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 115.298665][ T5040] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 115.310799][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 115.363336][ T5028] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.511733][ T5040] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 115.534255][ T5115] loop4: p4 < > [ 115.548179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 115.570064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 115.621457][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.628542][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.671076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 115.723871][ T5040] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 115.760852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 115.785519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 115.804785][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.811957][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.873109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 115.937895][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.950471][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 115.964533][ T5040] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 116.091229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 116.109982][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 116.161613][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.171198][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.229047][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.262785][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.302249][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.338811][ T5028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.391090][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 116.418058][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.432124][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 116.636629][ T5040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.710103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.728971][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.791498][ T5040] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.841116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.870745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.970551][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.977675][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 117.037695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 117.081766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 117.109092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 117.158729][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.165921][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.219178][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 117.245863][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.255621][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.277514][ T5028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.290800][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 117.302249][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.350662][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.381208][ T4261] Bluetooth: hci2: command 0x040f tx timeout [ 117.398437][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 117.425286][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.501819][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.568107][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.601004][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.621810][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 117.651507][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.670177][ T5040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 117.887086][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 117.936574][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 117.980111][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.001213][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.020818][ T4261] Bluetooth: hci0: command 0x040f tx timeout [ 118.029683][ T5028] device veth0_vlan entered promiscuous mode [ 118.041991][ T5171] device syzkaller0 entered promiscuous mode [ 118.072693][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.088594][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.154446][ T5028] device veth1_vlan entered promiscuous mode [ 118.169969][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.185125][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.199479][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.233864][ T155] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.279787][ T5040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.352094][ T155] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.390012][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 118.412470][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 118.431352][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 118.443918][ T5028] device veth0_macvtap entered promiscuous mode [ 118.469891][ T155] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.498164][ T5028] device veth1_macvtap entered promiscuous mode [ 118.529590][ T155] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.579462][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.592714][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.610399][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.636562][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.655944][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.670785][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.682600][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 118.701008][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.721863][ T5028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.735867][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 118.753776][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 118.769026][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 118.780170][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 118.815002][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.841049][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.861046][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.874491][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.895596][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.923924][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.950249][ T5028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.969253][ T5028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.989753][ T5028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.013756][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 119.037431][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 119.066987][ T5028] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.077946][ T5028] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.088200][ T5028] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.097229][ T5028] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.129250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.139676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.177193][ T5040] device veth0_vlan entered promiscuous mode [ 119.192350][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.203088][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.229320][ T5040] device veth1_vlan entered promiscuous mode [ 119.260500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.268485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.286190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.351858][ T5207] device wg1 entered promiscuous mode [ 119.432122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.448243][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.458267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.470622][ T4260] Bluetooth: hci2: command 0x0419 tx timeout [ 119.480197][ T5040] device veth0_macvtap entered promiscuous mode [ 119.531549][ T5040] device veth1_macvtap entered promiscuous mode [ 119.558219][ T4282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.666305][ T4282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.111092][ T4260] Bluetooth: hci0: command 0x0419 tx timeout [ 120.323913][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 120.368166][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 120.457888][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.612722][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.642387][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.672179][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.704780][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.751485][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.770406][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.791070][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.810417][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.830389][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 120.871624][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.891601][ T5040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 120.903497][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.918565][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 120.931600][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 120.943729][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.972377][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.014789][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.028620][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.039178][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.063923][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.083911][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.094841][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.104922][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.115546][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.126458][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.141936][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.154428][ T5040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.205236][ T5226] netlink: 'syz.4.276': attribute type 27 has an invalid length. [ 121.218685][ T5226] netlink: 'syz.4.276': attribute type 4 has an invalid length. [ 121.229487][ T5226] netlink: 144 bytes leftover after parsing attributes in process `syz.4.276'. [ 121.248658][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 121.271969][ T4290] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 121.325880][ T5040] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.335703][ T5040] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.349399][ T5040] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.359410][ T5040] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.776274][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.822525][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.854717][ T5247] IPVS: fo: FWM 3 0x00000003 - no destination available [ 122.877961][ C0] IPVS: fo: FWM 3 0x00000003 - no destination available [ 122.889943][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.899813][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 122.914130][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.968745][ T155] device hsr_slave_0 left promiscuous mode [ 122.988957][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.009338][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.018104][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.045460][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.058185][ T155] device bridge_slave_1 left promiscuous mode [ 123.068928][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.087441][ T155] device bridge_slave_0 left promiscuous mode [ 123.098641][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.137203][ T155] device veth1_macvtap left promiscuous mode [ 123.143472][ T155] device veth0_macvtap left promiscuous mode [ 123.149571][ T155] device veth1_vlan left promiscuous mode [ 123.155461][ T155] device veth0_vlan left promiscuous mode [ 125.409795][ T155] team0 (unregistering): Port device team_slave_1 removed [ 125.426722][ T155] team0 (unregistering): Port device team_slave_0 removed [ 125.442291][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.525426][ T155] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 125.538418][ T155] bond0 (unregistering): Released all slaves [ 125.597591][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.611831][ T5275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.293'. [ 125.621212][ T5278] netlink: 12 bytes leftover after parsing attributes in process `syz.6.293'. [ 127.574883][ T5324] netlink: 2 bytes leftover after parsing attributes in process `syz.7.303'. [ 129.676560][ T5358] netlink: 128 bytes leftover after parsing attributes in process `syz.4.319'. [ 129.907225][ T5366] sctp: [Deprecated]: syz.8.323 (pid 5366) Use of int in max_burst socket option. [ 129.907225][ T5366] Use struct sctp_assoc_value instead [ 130.163983][ T5372] mmap: syz.7.315 (5372) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 130.442014][ T5376] syz.1.320[5376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.442124][ T5376] syz.1.320[5376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.495194][ T5375] bridge: RTM_NEWNEIGH with invalid ether address [ 130.664861][ T5360] netlink: 40 bytes leftover after parsing attributes in process `syz.1.320'. [ 131.180785][ T5385] device veth0_vlan left promiscuous mode [ 131.212794][ T5385] device veth0_vlan entered promiscuous mode [ 131.269799][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.298315][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.339213][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.171372][ T5390] netlink: 'syz.8.330': attribute type 9 has an invalid length. [ 132.179172][ T5390] netlink: 'syz.8.330': attribute type 7 has an invalid length. [ 132.186918][ T5390] netlink: 'syz.8.330': attribute type 8 has an invalid length. [ 132.371594][ T5395] loop8: detected capacity change from 0 to 512 [ 132.468401][ T5395] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 132.511981][ T5395] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 132.521277][ T5395] System zones: 1-12 [ 132.526283][ T5395] EXT4-fs (loop8): orphan cleanup on readonly fs [ 132.541097][ T5395] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.332: invalid indirect mapped block 12 (level 1) [ 132.571686][ T5395] EXT4-fs (loop8): Remounting filesystem read-only [ 132.578362][ T5395] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #11: comm syz.8.332: invalid indirect mapped block 2 (level 2) [ 132.617417][ T5395] EXT4-fs (loop8): Remounting filesystem read-only [ 132.625394][ T5395] EXT4-fs (loop8): 1 truncate cleaned up [ 132.641375][ T5395] EXT4-fs (loop8): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,noload,errors=remount-ro,sb=0x00000000000006f9. Quota mode: none. [ 132.687562][ T5378] loop4: detected capacity change from 0 to 40427 [ 132.798817][ T5378] F2FS-fs (loop4): invalid crc value [ 132.826184][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.832558][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.885554][ T5378] F2FS-fs (loop4): Found nat_bits in checkpoint [ 132.907174][ T5418] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 132.907174][ T5418] The task syz.7.335 (5418) triggered the difference, watch for misbehavior. [ 133.126779][ T5378] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 133.180907][ T5378] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 133.346570][ T5378] netem: incorrect gi model size [ 133.365115][ T5378] netem: change failed [ 133.478596][ T4193] attempt to access beyond end of device [ 133.478596][ T4193] loop4: rw=2049, want=45104, limit=40427 [ 133.851883][ T5448] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 135.193637][ T5467] netlink: 'syz.4.341': attribute type 1 has an invalid length. [ 135.351152][ T5467] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.392299][ T5475] netlink: 64 bytes leftover after parsing attributes in process `syz.7.349'. [ 135.418482][ T5469] bond2: (slave gretap1): making interface the new active one [ 135.428935][ T5469] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 135.449525][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 136.428881][ T5473] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 136.676098][ T5484] netlink: 12 bytes leftover after parsing attributes in process `syz.8.351'. [ 136.748903][ T5492] loop6: detected capacity change from 0 to 2048 [ 136.859971][ T5492] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 136.881887][ T5507] loop7: detected capacity change from 0 to 256 [ 136.890662][ T5492] UDF-fs: Scanning with blocksize 512 failed [ 136.922809][ T5507] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.924920][ T5492] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.945330][ T5507] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 136.967723][ T5507] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 138.308372][ T5532] loop6: detected capacity change from 0 to 128 [ 138.364472][ T5532] befs: (loop6): No write support. Marking filesystem read-only [ 138.397475][ T5532] befs: (loop6): invalid blocksize: 2066842815 [ 139.113394][ T5543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.373'. [ 140.141562][ T5560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.333126][ T5560] bond1: (slave ip6gretap1): making interface the new active one [ 140.350279][ T5560] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 140.888923][ T5582] netlink: 'syz.8.388': attribute type 8 has an invalid length. [ 141.116739][ T5590] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 142.256755][ T5624] netlink: 'syz.4.402': attribute type 7 has an invalid length. [ 142.291329][ T5624] netlink: 'syz.4.402': attribute type 8 has an invalid length. [ 143.916313][ T5650] netlink: 'syz.6.411': attribute type 1 has an invalid length. [ 144.595685][ T5650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.079209][ T5653] bond1: (slave gretap1): making interface the new active one [ 145.093999][ T5653] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 145.106634][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 145.125867][ T5658] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 146.304850][ T5682] netlink: 'syz.6.421': attribute type 11 has an invalid length. [ 146.521140][ T5689] overlayfs: failed to clone upperpath [ 148.570614][ T5706] netlink: 'syz.8.429': attribute type 1 has an invalid length. [ 148.658883][ T5706] 8021q: adding VLAN 0 to HW filter on device bond2 [ 148.678936][ T5708] bond2: (slave gretap1): making interface the new active one [ 148.688726][ T5708] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 148.697561][ T5710] fuse: Bad value for 'fd' [ 148.703393][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 148.770137][ T5706] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 148.828645][ T5714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.432'. [ 149.650610][ T5716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.432'. [ 149.814019][ T5726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 149.866704][ T5726] device ~ entered promiscuous mode [ 151.620594][ T5740] loop8: detected capacity change from 0 to 256 [ 151.748309][ T5734] netlink: 60 bytes leftover after parsing attributes in process `syz.1.438'. [ 151.777584][ T5743] netlink: 60 bytes leftover after parsing attributes in process `syz.1.438'. [ 152.572344][ T5740] FAT-fs (loop8): Directory bread(block 64) failed [ 152.622956][ T5740] FAT-fs (loop8): Directory bread(block 65) failed [ 152.673470][ T5740] FAT-fs (loop8): Directory bread(block 66) failed [ 152.680069][ T5740] FAT-fs (loop8): Directory bread(block 67) failed [ 152.806300][ T5740] FAT-fs (loop8): Directory bread(block 68) failed [ 152.821058][ T5740] FAT-fs (loop8): Directory bread(block 69) failed [ 152.849920][ T5740] FAT-fs (loop8): Directory bread(block 70) failed [ 152.858777][ T5740] FAT-fs (loop8): Directory bread(block 71) failed [ 152.880772][ T5740] FAT-fs (loop8): Directory bread(block 72) failed [ 152.901926][ T5740] FAT-fs (loop8): Directory bread(block 73) failed [ 156.115721][ T5787] netlink: 'syz.1.453': attribute type 22 has an invalid length. [ 156.156722][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.453'. [ 156.176589][ T5787] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.186326][ T5787] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.195175][ T5787] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.203929][ T5787] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.249559][ T5793] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 156.273267][ T5787] netlink: 'syz.1.453': attribute type 22 has an invalid length. [ 156.307100][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.453'. [ 156.753741][ T5815] netem: change failed [ 158.192679][ T5837] syzkaller0: create flow: hash 1217953585 index 1 [ 158.235825][ T5839] netlink: 4 bytes leftover after parsing attributes in process `syz.6.472'. [ 158.262060][ T2239] syzkaller0: tun_net_xmit 76 [ 158.267759][ T2239] syzkaller0: tun_net_xmit 48 [ 158.318298][ T23] syzkaller0: tun_net_xmit 76 [ 158.326241][ T5831] syzkaller0: delete flow: hash 1217953585 index 1 [ 158.671297][ T5850] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 162.555424][ T5898] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 162.871882][ T5902] tipc: Failed to remove unknown binding: 66,1,1/0:960541821/960541823 [ 162.913336][ T5902] tipc: Failed to remove unknown binding: 66,1,1/0:960541821/960541823 [ 162.946128][ T5902] tipc: Failed to remove unknown binding: 66,1,1/0:960541821/960541823 [ 163.354250][ T5916] loop7: detected capacity change from 0 to 1024 [ 165.219641][ T5913] loop7: detected capacity change from 0 to 256 [ 166.927989][ T5950] overlayfs: failed to clone upperpath [ 166.958849][ T5913] exfat: Unknown parameter 'xoU' [ 167.108815][ T5953] loop4: detected capacity change from 0 to 1024 [ 167.205929][ T5953] EXT4-fs (loop4): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000002,nombcache,,errors=continue. Quota mode: none. [ 167.227231][ T5953] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.672631][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz.7.523'. [ 167.702717][ T26] audit: type=1800 audit(1759163849.687:5): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.516" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 167.849335][ T6001] kvm: pic: level sensitive irq not supported [ 167.849612][ T6001] kvm: pic: non byte read [ 167.862046][ T6001] kvm: pic: single mode not supported [ 167.862066][ T6001] kvm: pic: level sensitive irq not supported [ 167.868014][ T6001] kvm: pic: non byte read [ 167.889757][ T6001] kvm: pic: non byte read [ 167.897648][ T6001] kvm: pic: non byte read [ 167.905083][ T6001] kvm: pic: non byte read [ 167.920491][ T6001] kvm: pic: non byte read [ 167.928913][ T6001] kvm: pic: non byte read [ 167.934768][ T6001] kvm: pic: non byte read [ 167.941360][ T6001] kvm: pic: non byte read [ 167.946766][ T6001] kvm: pic: level sensitive irq not supported [ 167.946834][ T6001] kvm: pic: non byte read [ 167.957962][ T4225] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 168.123817][ T6015] loop4: detected capacity change from 0 to 512 [ 168.139006][ T6023] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 6023 comm: syz.6.531) [ 168.961198][ T4225] usb 8-1: Using ep0 maxpacket: 16 [ 169.017345][ T6015] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 169.021302][ T6029] netlink: 'syz.8.532': attribute type 1 has an invalid length. [ 169.065108][ T6029] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.080742][ T4225] usb 8-1: config 0 has an invalid interface number: 64 but max is 0 [ 169.100412][ T4225] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.115956][ T6029] netlink: 4 bytes leftover after parsing attributes in process `syz.8.532'. [ 169.125938][ T4225] usb 8-1: config 0 has no interface number 0 [ 169.137923][ T4225] usb 8-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 169.149237][ T4225] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.165190][ T6036] netlink: 'syz.8.535': attribute type 13 has an invalid length. [ 169.170155][ T4225] usb 8-1: config 0 descriptor?? [ 169.174224][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.8.535'. [ 169.191962][ T6036] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.200978][ T6036] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.209801][ T6036] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.218676][ T6036] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.229578][ T6036] netlink: 'syz.8.535': attribute type 13 has an invalid length. [ 169.237473][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.8.535'. [ 169.262742][ T4225] usb 8-1: Found UVC 0.00 device (0bd3:0555) [ 169.296928][ T4225] usb 8-1: No valid video chain found. [ 169.349015][ T6042] netlink: 60 bytes leftover after parsing attributes in process `syz.4.534'. [ 169.394691][ T6045] loop8: detected capacity change from 0 to 2048 [ 169.464650][ T13] usb 8-1: USB disconnect, device number 2 [ 169.485913][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.542'. [ 169.688121][ T6045] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.830498][ T6045] EXT4-fs error (device loop8): ext4_map_blocks:629: inode #2: block 16: comm syz.8.538: lblock 0 mapped to illegal pblock 16 (length 1) [ 170.958655][ T5737] EXT4-fs error (device loop8): __ext4_get_inode_loc:4321: comm kworker/u4:15: Invalid inode table block 0 in block_group 0 [ 171.171132][ T6082] loop8: detected capacity change from 0 to 256 [ 172.483089][ T6101] loop4: detected capacity change from 0 to 512 [ 172.546280][ T6101] EXT4-fs (loop4): Test dummy encryption mode enabled [ 172.563167][ T6101] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 172.605694][ T6101] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.556: bad orphan inode 131083 [ 172.623896][ T6101] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 172.693532][ T6107] netlink: 20 bytes leftover after parsing attributes in process `syz.8.558'. [ 173.731281][ T6101] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 173.845499][ T6122] team0: Device gtp0 is of different type [ 174.556161][ T6152] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 175.575658][ T6165] sock: sock_set_timeout: `syz.8.573' (pid 6165) tries to set negative timeout [ 177.544428][ T6203] netlink: 4 bytes leftover after parsing attributes in process `syz.6.583'. [ 179.058475][ T6237] kernel read not supported for file /!selinuxwk1m9ɞ*T#jYmVvm(p-QZ#{ (pid: 6237 comm: syz.8.593) [ 179.176597][ T6229] loop7: detected capacity change from 0 to 8192 [ 179.241652][ T6229] FAT-fs (loop7): Unrecognized mount option "appraise_type=imasig" or missing value [ 180.503445][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.8.596'. [ 180.794482][ T6251] device ~ entered promiscuous mode [ 180.811395][ T6257] netlink: 28 bytes leftover after parsing attributes in process `syz.6.600'. [ 180.918891][ T6255] bridge0: port 1(wlan1) entered blocking state [ 180.980642][ T6255] bridge0: port 1(wlan1) entered disabled state [ 181.199778][ T6255] device wlan1 entered promiscuous mode [ 182.320145][ T6294] netlink: 'syz.8.610': attribute type 10 has an invalid length. [ 182.451035][ T6294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.532397][ T6294] team0: Port device bond0 added [ 182.757479][ T6307] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 182.851248][ T6307] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 182.902840][ T6307] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 183.001669][ T6307] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 183.009293][ T6321] loop7: detected capacity change from 0 to 1024 [ 183.083298][ T6307] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 183.137803][ T6321] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 183.158538][ T6307] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 183.186577][ T6307] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 183.220749][ T6316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.618'. [ 183.221000][ T6307] syz.1.618 (6307) used greatest stack depth: 19496 bytes left [ 183.496407][ T6335] netlink: 'syz.1.626': attribute type 1 has an invalid length. [ 183.739601][ T6346] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 183.830559][ T4225] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 183.918932][ T6357] bond3 (unregistering): (slave ip6gretap1): Releasing backup interface [ 184.024443][ T4225] usb 8-1: device descriptor read/64, error -71 [ 184.064882][ T6357] bond3 (unregistering): Released all slaves [ 184.300419][ T4225] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 184.494209][ T4225] usb 8-1: device descriptor read/64, error -71 [ 184.623567][ T4225] usb usb8-port1: attempt power cycle [ 185.780756][ T4225] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 185.868473][ T6396] netlink: 24 bytes leftover after parsing attributes in process `syz.6.633'. [ 185.900744][ T4225] usb 8-1: device descriptor read/8, error -71 [ 186.100490][ T4260] Bluetooth: hci4: command 0x0406 tx timeout [ 186.110438][ T4260] Bluetooth: hci1: command 0x0406 tx timeout [ 186.170460][ T4225] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 186.260828][ T4225] usb 8-1: device descriptor read/8, error -71 [ 186.370186][ T6413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.637'. [ 186.383006][ T4225] usb usb8-port1: unable to enumerate USB device [ 186.440475][ T6413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.637'. [ 186.598301][ T6419] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 186.821343][ T6415] team0 (unregistering): Port device team_slave_0 removed [ 187.872381][ T6415] team0 (unregistering): Port device team_slave_1 removed [ 187.929168][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.943629][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 187.961886][ T6420] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 187.989329][ T6420] device bridge_slave_0 left promiscuous mode [ 188.014134][ T6420] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.057844][ T6420] device bridge_slave_1 left promiscuous mode [ 188.068600][ T6420] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.088446][ T6420] bond0: (slave bond_slave_0): Releasing backup interface [ 188.134279][ T6420] bond0: (slave bond_slave_1): Releasing backup interface [ 188.205038][ T6420] team0: Port device team_slave_0 removed [ 188.239173][ T6420] team0: Port device team_slave_1 removed [ 188.256875][ T6420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.274100][ T6420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.288367][ T6420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.297585][ T6420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.546089][ T6456] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 189.838446][ T6464] overlayfs: failed to clone upperpath [ 189.909758][ T26] audit: type=1326 audit(1759164127.885:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.7.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce01aa6ec9 code=0x7fc00000 [ 190.010141][ T26] audit: type=1326 audit(1759164127.895:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.7.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce01aa6ec9 code=0x7fc00000 [ 190.149010][ T6471] overlayfs: failed to clone upperpath [ 192.129312][ T6505] netlink: 'syz.1.663': attribute type 1 has an invalid length. [ 192.263580][ T6510] 9pnet: Could not find request transport: fd<ٰ *e( [ 192.263580][ T6510] 65p=ҳ/>>[R-IsOL!Pu `΂8r ݃ه6vܢHՀS1tݴ#C_4(wP5qQK-!96—䒱#SG / zuz^\$V~=ә|kGwgڗȷNJA0xffffffffffffffff [ 192.812084][ T26] audit: type=1326 audit(1759164130.795:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6462 comm="syz.7.650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce01aa6ec9 code=0x7fc00000 [ 192.934809][ T6505] device bond3 entered promiscuous mode [ 193.052379][ T6505] 8021q: adding VLAN 0 to HW filter on device bond3 [ 193.158588][ T6516] netlink: 12 bytes leftover after parsing attributes in process `syz.6.664'. [ 193.226096][ T6529] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 194.365935][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.372320][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.107127][ T6552] netlink: 'syz.1.676': attribute type 4 has an invalid length. [ 195.569715][ T6565] netlink: 112 bytes leftover after parsing attributes in process `syz.8.682'. [ 195.704332][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz.8.686'. [ 195.756697][ T6576] device bond4 entered promiscuous mode [ 195.767885][ T6576] device macvlan2 entered promiscuous mode [ 195.782153][ T6576] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 195.898489][ T6574] device bond4 left promiscuous mode [ 195.937548][ T26] audit: type=1326 audit(1759164133.915:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.8.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61427fec9 code=0x7ffc0000 [ 195.961065][ T26] audit: type=1326 audit(1759164133.915:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.8.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61427fec9 code=0x7ffc0000 [ 195.983659][ T26] audit: type=1326 audit(1759164133.945:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.8.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7ff61427fec9 code=0x7ffc0000 [ 196.006594][ T26] audit: type=1326 audit(1759164133.945:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.8.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61427fec9 code=0x7ffc0000 [ 196.029428][ T26] audit: type=1326 audit(1759164133.945:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.8.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61427fec9 code=0x7ffc0000 [ 196.060172][ T26] audit: type=1326 audit(1759164133.945:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.8.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff61427fec9 code=0x7ffc0000 [ 196.089601][ T26] audit: type=1326 audit(1759164133.945:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.8.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61427fec9 code=0x7ffc0000 [ 196.112890][ T26] audit: type=1326 audit(1759164133.945:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.8.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61427fec9 code=0x7ffc0000 [ 196.140517][ T26] audit: type=1326 audit(1759164133.945:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.8.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff61427fec9 code=0x7ffc0000 [ 196.215263][ T26] audit: type=1326 audit(1759164133.945:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6581 comm="syz.8.687" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff61427fec9 code=0x7ffc0000 [ 197.363252][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 197.402835][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 197.423212][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 197.508588][ T6603] bond0: (slave bond_slave_0): Releasing backup interface [ 197.547021][ T6603] device bond_slave_0 left promiscuous mode [ 197.607414][ T6603] bond0: (slave bond_slave_1): Releasing backup interface [ 197.632166][ T6603] device bond_slave_1 left promiscuous mode [ 197.695941][ T6603] team0: Port device team_slave_0 removed [ 197.766715][ T6603] team0: Port device team_slave_1 removed [ 197.790869][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.805865][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.817669][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.830191][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.869187][ T6603] device wlan1 left promiscuous mode [ 197.877919][ T6603] bridge0: port 1(wlan1) entered disabled state [ 197.906150][ T6603] bond1: (slave macvlan2): Releasing active interface [ 197.944372][ T6603] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 197.971256][ T6603] bond2: (slave gretap1): Releasing active interface [ 198.008285][ T6607] team0: Mode changed to "activebackup" [ 198.139596][ T6617] netlink: 28 bytes leftover after parsing attributes in process `syz.6.698'. [ 198.164835][ T6617] netlink: 28 bytes leftover after parsing attributes in process `syz.6.698'. [ 198.314246][ T6617] team0 (unregistering): Port device team_slave_0 removed [ 198.342129][ T6617] team0 (unregistering): Port device team_slave_1 removed [ 200.516635][ T6631] smc: net device bond0 applied user defined pnetid SYZ2 [ 200.548502][ T6631] netlink: 14 bytes leftover after parsing attributes in process `syz.1.703'. [ 200.604457][ T6631] smc: removing net device bond0 with user defined pnetid SYZ2 [ 200.621249][ T6631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.677111][ T6631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.733507][ T6631] bond0 (unregistering): Released all slaves [ 201.517047][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.7.708'. [ 201.628358][ T6654] device macvlan2 entered promiscuous mode [ 201.652036][ T6654] device bond1 entered promiscuous mode [ 201.656206][ T6657] overlayfs: failed to clone upperpath [ 201.665846][ T6654] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 201.686065][ T6654] device bond1 left promiscuous mode [ 202.987718][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.996218][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.648582][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.730387][ T21] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 203.732709][ T6679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.110600][ T21] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.129124][ T21] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 204.138603][ T21] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.163693][ T21] usb 8-1: config 0 descriptor?? [ 204.202837][ T21] pwc: Askey VC010 type 2 USB webcam detected. [ 204.343063][ T6679] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.352269][ T6679] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.361948][ T6679] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.371595][ T6679] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.640517][ T21] pwc: recv_control_msg error -32 req 02 val 2b00 [ 204.680646][ T21] pwc: recv_control_msg error -32 req 02 val 2700 [ 204.720606][ T21] pwc: recv_control_msg error -32 req 02 val 2c00 [ 204.760475][ T21] pwc: recv_control_msg error -32 req 04 val 1000 [ 204.793971][ T6679] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.800525][ T21] pwc: recv_control_msg error -32 req 04 val 1300 [ 204.803321][ T6679] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.818643][ T6679] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.827574][ T6679] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.850673][ T21] pwc: recv_control_msg error -32 req 04 val 1400 [ 204.870902][ T6684] netlink: 24 bytes leftover after parsing attributes in process `syz.4.719'. [ 204.890434][ T21] pwc: recv_control_msg error -32 req 02 val 2000 [ 204.930159][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.1.722'. [ 204.939276][ T21] pwc: recv_control_msg error -32 req 02 val 2100 [ 204.957698][ T6712] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 205.120054][ T6736] netlink: 'syz.8.732': attribute type 4 has an invalid length. [ 205.170840][ T6736] netlink: 'syz.8.732': attribute type 4 has an invalid length. [ 205.200676][ T21] pwc: recv_control_msg error -71 req 02 val 2500 [ 205.220714][ T21] pwc: recv_control_msg error -71 req 02 val 2400 [ 205.240819][ T21] pwc: recv_control_msg error -71 req 02 val 2600 [ 205.280491][ T21] pwc: recv_control_msg error -71 req 02 val 2900 [ 205.300463][ T21] pwc: recv_control_msg error -71 req 02 val 2800 [ 205.322295][ T21] pwc: recv_control_msg error -71 req 04 val 1100 [ 205.354180][ T21] pwc: recv_control_msg error -71 req 04 val 1200 [ 205.384134][ T21] pwc: Registered as video103. [ 205.395839][ T21] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input6 [ 205.450242][ T21] usb 8-1: USB disconnect, device number 7 [ 205.885702][ T6764] netlink: 'syz.7.743': attribute type 1 has an invalid length. [ 205.953129][ T6764] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.978897][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.7.743'. [ 206.087498][ T6767] bond2 (unregistering): Released all slaves [ 206.333272][ T6783] netlink: 156 bytes leftover after parsing attributes in process `syz.8.749'. [ 206.525112][ T6790] netlink: 'syz.6.753': attribute type 10 has an invalid length. [ 206.538973][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.546553][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.599897][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.607094][ T6790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.614586][ T6790] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.621704][ T6790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.671352][ T6790] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 206.680269][ T6793] netlink: 4 bytes leftover after parsing attributes in process `syz.6.753'. [ 206.709212][ T6793] device bridge_slave_1 left promiscuous mode [ 206.722954][ T6793] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.747221][ T6793] device bridge_slave_0 left promiscuous mode [ 206.753804][ T6793] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.791038][ T6793] bond0: (slave bridge0): Releasing backup interface [ 207.202430][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.760'. [ 207.470460][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.762'. [ 208.054657][ T6827] fuse: Bad value for 'fd' [ 208.454029][ T6835] netlink: 156 bytes leftover after parsing attributes in process `syz.6.769'. [ 208.763060][ T6847] netlink: 'syz.1.773': attribute type 4 has an invalid length. [ 208.818347][ T6847] netlink: 'syz.1.773': attribute type 4 has an invalid length. [ 212.718320][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 212.718334][ T26] audit: type=1326 audit(1759164150.695:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6891 comm="syz.8.786" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff61427fec9 code=0x0 [ 213.440648][ T6910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.793'. [ 213.459313][ T6912] syz.6.794[6912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.459464][ T6912] syz.6.794[6912] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.169000][ T6955] netlink: 24 bytes leftover after parsing attributes in process `syz.7.809'. [ 215.329435][ T6952] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 216.288435][ T6979] smc: adding net device bond0 with user defined pnetid SYZ2 [ 216.369281][ T6982] bond0: (slave ip6gretap2): making interface the new active one [ 216.438585][ T6982] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 216.700101][ T6997] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.731862][ T6997] device veth0 entered promiscuous mode [ 216.744377][ T6997] bond2: (slave macvlan2): making interface the new active one [ 216.757621][ T6997] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 216.775639][ T6363] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 216.821806][ T4224] Bluetooth: hci3: command 0x0406 tx timeout [ 217.554688][ T7037] syz.6.840 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 218.627332][ T7058] netlink: 'syz.8.849': attribute type 10 has an invalid length. [ 218.642495][ T7058] device syz_tun entered promiscuous mode [ 218.655825][ T7058] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 218.738661][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.8.851'. [ 219.470363][ T7071] xt_CT: You must specify a L4 protocol and not use inversions on it [ 219.876840][ T4260] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 220.160472][ T4260] usb 8-1: Using ep0 maxpacket: 8 [ 220.320517][ T4260] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 220.332238][ T4260] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 220.342460][ T4260] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 220.352911][ T4260] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 220.367978][ T4260] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 220.379061][ T4260] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.626941][ T7106] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 220.640675][ T4260] usb 8-1: GET_CAPABILITIES returned 0 [ 220.649298][ T4260] usbtmc 8-1:16.0: can't read capabilities [ 220.791844][ T7112] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.868388][ T4260] usb 8-1: USB disconnect, device number 8 [ 222.306122][ T7112] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.729193][ T7112] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.543578][ T7112] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.692219][ T7112] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.709386][ T7112] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.731128][ T7112] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.751858][ T7112] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.915822][ T7163] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 223.957620][ T7163] bond0: (slave lo): Error: Device can not be enslaved while up [ 229.075711][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.8.911'. [ 229.123570][ T7239] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 229.149648][ T7241] netlink: 'syz.1.912': attribute type 21 has an invalid length. [ 229.167637][ T7241] netlink: 132 bytes leftover after parsing attributes in process `syz.1.912'. [ 229.203296][ T7241] netlink: 'syz.1.912': attribute type 1 has an invalid length. [ 229.290549][ T7241] netlink: 12 bytes leftover after parsing attributes in process `syz.1.912'. [ 229.397631][ T7243] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge_slave_0 [ 229.411500][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.8.911'. [ 234.622193][ T7278] netlink: 'syz.7.922': attribute type 4 has an invalid length. [ 235.992116][ T7300] loop7: detected capacity change from 0 to 512 [ 236.065841][ T7298] netlink: 12 bytes leftover after parsing attributes in process `syz.6.929'. [ 236.093341][ T7298] tipc: Enabled bearer , priority 10 [ 236.200733][ T7300] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodiscard,max_dir_size_kb=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 236.253103][ T7310] xt_bpf: check failed: parse error [ 236.284505][ T7300] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.367634][ T7313] netlink: 24 bytes leftover after parsing attributes in process `syz.1.934'. [ 237.781261][ T7] Bluetooth: hci2: command 0x0406 tx timeout [ 238.493361][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.6.945'. [ 238.714473][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.950'. [ 238.723830][ T7354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.244237][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806091dc00: rx timeout, send abort [ 239.742993][ T7354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.754518][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806091dc00: abort rx timeout. Force session deactivation [ 241.010485][ T4260] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 242.201893][ T26] audit: type=1326 audit(1759164436.185:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.6.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aef7deec9 code=0x7ffc0000 [ 242.239072][ T26] audit: type=1326 audit(1759164436.185:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.6.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f6aef7deec9 code=0x7ffc0000 [ 242.288037][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.290672][ T26] audit: type=1326 audit(1759164436.185:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.6.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aef7deec9 code=0x7ffc0000 [ 242.311991][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 242.323388][ T7391] overlayfs: failed to clone upperpath [ 242.334005][ T7391] overlayfs: failed to clone upperpath [ 242.334902][ T7389] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 242.340982][ T26] audit: type=1326 audit(1759164436.185:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.6.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f6aef7deec9 code=0x7ffc0000 [ 242.379514][ T7389] bond0: (slave bond_slave_0): Releasing backup interface [ 242.400935][ T4260] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.418654][ T4260] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 242.429633][ T7389] bond0: (slave bond_slave_1): Releasing backup interface [ 242.438214][ T4260] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.450753][ T26] audit: type=1326 audit(1759164436.185:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.6.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aef7deec9 code=0x7ffc0000 [ 242.462405][ T4260] usb 8-1: config 0 descriptor?? [ 242.486991][ T26] audit: type=1326 audit(1759164436.185:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.6.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f6aef7deec9 code=0x7ffc0000 [ 242.502392][ T7389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.513888][ T26] audit: type=1326 audit(1759164436.185:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7383 comm="syz.6.961" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aef7deec9 code=0x7ffc0000 [ 242.536486][ T7389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.546360][ T4260] usb 8-1: can't set config #0, error -71 [ 242.547740][ T7389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.566525][ T7389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.573782][ T4260] usb 8-1: USB disconnect, device number 9 [ 242.613041][ T7389] bond1: (slave gretap1): Releasing active interface [ 242.638875][ T7389] bond2: (slave macvlan2): Releasing active interface [ 242.659327][ T7389] device veth0 left promiscuous mode [ 242.681262][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.962'. [ 242.815026][ T7408] loop7: detected capacity change from 0 to 2048 [ 242.850191][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.970'. [ 242.878439][ T7408] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.223554][ T7443] netlink: 24 bytes leftover after parsing attributes in process `syz.7.980'. [ 245.306089][ T7455] netlink: 16 bytes leftover after parsing attributes in process `syz.7.982'. [ 245.415790][ T7464] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 245.423680][ T7464] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 245.431315][ T7464] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 245.439119][ T7464] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 245.453949][ T7464] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 245.469090][ T7464] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 245.486601][ T7464] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.498519][ T7464] device bridge_slave_0 left promiscuous mode [ 245.513583][ T7464] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.536726][ T7464] device bridge_slave_1 left promiscuous mode [ 245.557885][ T7464] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.609991][ T7464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.619250][ T7464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.639175][ T7464] bond1: (slave bond2): Releasing backup interface [ 245.663538][ T7464] bond0: (slave ip6gretap2): Releasing active interface [ 246.600808][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.986'. [ 246.676476][ T7482] netlink: 'syz.4.993': attribute type 4 has an invalid length. [ 246.816340][ T7487] overlayfs: failed to clone upperpath [ 247.938783][ T7497] loop7: detected capacity change from 0 to 512 [ 248.089928][ T7497] EXT4-fs (loop7): 1 orphan inode deleted [ 248.102217][ T7497] EXT4-fs (loop7): mounted filesystem without journal. Opts: norecovery,barrier,,errors=continue. Quota mode: writeback. [ 248.170746][ T7497] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 248.386174][ T7512] EXT4-fs (loop7): shut down requested (0) [ 248.416559][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1003'. [ 248.429324][ T7515] tipc: Started in network mode [ 248.441488][ T7515] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 248.456218][ T7515] tipc: Enabling of bearer rejected, failed to enable media [ 248.469508][ T7517] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1002'. [ 248.519880][ T7497] EXT4-fs error (device loop7): ext4_lookup:1858: inode #16: comm syz.7.998: unexpected EA_INODE flag [ 248.551046][ T7518] Invalid option length (1032005) for dns_resolver key [ 250.058091][ T7537] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1010'. [ 251.274381][ T7534] tipc: Started in network mode [ 251.279324][ T7534] tipc: Node identity fffeffff, cluster identity 4711 [ 251.286179][ T7534] tipc: Node number set to 4294901759 [ 251.522872][ T7553] bond0: (slave syz_tun): Releasing backup interface [ 251.524423][ T7552] overlayfs: failed to clone upperpath [ 251.591991][ T7553] team0: Port device bond0 removed [ 251.625880][ T7553] device bridge_slave_0 left promiscuous mode [ 251.662427][ T7553] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.675370][ T7553] device bridge_slave_1 left promiscuous mode [ 251.698007][ T7553] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.728423][ T7553] bond0: (slave bond_slave_0): Releasing backup interface [ 251.787979][ T7553] bond0: (slave bond_slave_1): Releasing backup interface [ 251.808206][ T7553] team0: Port device team_slave_0 removed [ 251.825474][ T7553] team0: Port device team_slave_1 removed [ 251.845162][ T7553] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.877559][ T7553] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.918347][ T7553] bond1: (slave ip6gretap1): Releasing active interface [ 251.918714][ T7570] overlayfs: failed to clone upperpath [ 251.947349][ T7553] bond2: (slave gretap1): Releasing active interface [ 251.968024][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1011'. [ 252.076899][ T7562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1015'. [ 252.332722][ T7578] general protection fault, probably for non-canonical address 0xdffffc000000006c: 0000 [#1] PREEMPT SMP KASAN [ 252.344478][ T7578] KASAN: null-ptr-deref in range [0x0000000000000360-0x0000000000000367] [ 252.352904][ T7578] CPU: 1 PID: 7578 Comm: syz.1.1031 Not tainted syzkaller #0 [ 252.360282][ T7578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.370373][ T7578] RIP: 0010:find_match+0xa3/0xc30 [ 252.375412][ T7578] Code: 00 00 00 00 00 fc ff df 42 80 7c 25 00 00 74 08 48 89 df e8 7f f2 2a f9 48 89 d8 bb 60 03 00 00 48 03 18 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 5e f2 2a f9 48 8b 1b e8 36 b3 17 [ 252.395028][ T7578] RSP: 0018:ffffc90003c37218 EFLAGS: 00010206 [ 252.401135][ T7578] RAX: 000000000000006c RBX: 0000000000000360 RCX: ffff88802a303b80 [ 252.409132][ T7578] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 252.417133][ T7578] RBP: 1ffff11004f20a44 R08: ffffc90003c375a0 R09: ffffc90003c375b0 [ 252.425138][ T7578] R10: fffff52000786e82 R11: 1ffff92000786e80 R12: dffffc0000000000 [ 252.433133][ T7578] R13: 0000000000000040 R14: 1ffff11004f20a45 R15: ffff88802790522f [ 252.441129][ T7578] FS: 00007f8f081ea6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 252.450090][ T7578] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.456903][ T7578] CR2: 0000001b31d2421c CR3: 0000000053502000 CR4: 00000000003506e0 [ 252.464884][ T7578] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 252.472861][ T7578] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 252.480846][ T7578] Call Trace: [ 252.484146][ T7578] [ 252.487094][ T7578] rt6_nh_find_match+0xd5/0x140 [ 252.491956][ T7578] nexthop_for_each_fib6_nh+0x1be/0x3e0 [ 252.497531][ T7578] ? __find_rr_leaf+0x6c0/0x6c0 [ 252.502494][ T7578] __find_rr_leaf+0x45e/0x6c0 [ 252.507194][ T7578] ? rt6_remove_exception+0x280/0x280 [ 252.512591][ T7578] fib6_table_lookup+0x39c/0xa70 [ 252.517560][ T7578] ? fib6_nh_age_exceptions+0x5c0/0x5c0 [ 252.523139][ T7578] fib6_nh_init+0x121f/0x1e00 [ 252.527831][ T7578] ? in6_dev_put+0x80/0x80 [ 252.532248][ T7578] ? fib6_info_alloc+0x2e/0xe0 [ 252.537017][ T7578] ? ip6_route_info_create+0x44f/0x1210 [ 252.542588][ T7578] ? ip6_route_add+0x24/0x130 [ 252.547287][ T7578] ? ipv6_route_ioctl+0x37a/0x4a0 [ 252.552362][ T7578] ? inet6_ioctl+0x1e9/0x240 [ 252.556971][ T7578] ? sock_do_ioctl+0xd3/0x2f0 [ 252.561664][ T7578] ? sock_ioctl+0x4ed/0x6e0 [ 252.566206][ T7578] ? __se_sys_ioctl+0xfa/0x170 [ 252.571021][ T7578] ? do_syscall_64+0x4c/0xa0 [ 252.575606][ T7578] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.581687][ T7578] ? skb_gro_incr_csum_unnecessary+0x300/0x300 [ 252.587844][ T7578] ? memcpy+0x3c/0x60 [ 252.591831][ T7578] ? ipv6_addr_prefix+0xb4/0x150 [ 252.596779][ T7578] ip6_route_info_create+0x952/0x1210 [ 252.602180][ T7578] ip6_route_add+0x24/0x130 [ 252.606688][ T7578] ipv6_route_ioctl+0x37a/0x4a0 [ 252.611546][ T7578] ? rt6_purge_dflt_routers+0xaa0/0xaa0 [ 252.617206][ T7578] ? rcu_lock_release+0x5/0x20 [ 252.621969][ T7578] ? __might_fault+0xb3/0x110 [ 252.626647][ T7578] ? _copy_from_user+0x111/0x170 [ 252.631589][ T7578] inet6_ioctl+0x1e9/0x240 [ 252.636031][ T7578] ? inet6_getname+0x640/0x640 [ 252.640824][ T7578] ? tomoyo_path_number_perm+0x4d4/0x5d0 [ 252.646472][ T7578] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 252.651945][ T7578] sock_do_ioctl+0xd3/0x2f0 [ 252.656498][ T7578] ? sock_show_fdinfo+0xb0/0xb0 [ 252.661378][ T7578] sock_ioctl+0x4ed/0x6e0 [ 252.665727][ T7578] ? sock_poll+0x3f0/0x3f0 [ 252.670172][ T7578] ? bpf_lsm_file_ioctl+0x5/0x10 [ 252.675114][ T7578] ? security_file_ioctl+0x7c/0xa0 [ 252.680235][ T7578] ? sock_poll+0x3f0/0x3f0 [ 252.684665][ T7578] __se_sys_ioctl+0xfa/0x170 [ 252.689258][ T7578] do_syscall_64+0x4c/0xa0 [ 252.693675][ T7578] ? clear_bhb_loop+0x30/0x80 [ 252.698350][ T7578] ? clear_bhb_loop+0x30/0x80 [ 252.703070][ T7578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 252.708963][ T7578] RIP: 0033:0x7f8f09f82ec9 [ 252.713383][ T7578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.733082][ T7578] RSP: 002b:00007f8f081ea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 252.741511][ T7578] RAX: ffffffffffffffda RBX: 00007f8f0a1d9fa0 RCX: 00007f8f09f82ec9 [ 252.749487][ T7578] RDX: 0000200000000540 RSI: 000000000000890b RDI: 0000000000000003 [ 252.757479][ T7578] RBP: 00007f8f0a005f91 R08: 0000000000000000 R09: 0000000000000000 [ 252.765453][ T7578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.773450][ T7578] R13: 00007f8f0a1da038 R14: 00007f8f0a1d9fa0 R15: 00007ffcfb1e4018 [ 252.781435][ T7578] [ 252.784466][ T7578] Modules linked in: [ 253.297357][ T7578] ---[ end trace ef2abf6b7e499a0d ]--- [ 253.308424][ T7578] RIP: 0010:find_match+0xa3/0xc30 [ 253.313636][ T7578] Code: 00 00 00 00 00 fc ff df 42 80 7c 25 00 00 74 08 48 89 df e8 7f f2 2a f9 48 89 d8 bb 60 03 00 00 48 03 18 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 5e f2 2a f9 48 8b 1b e8 36 b3 17 [ 253.460784][ T7578] RSP: 0018:ffffc90003c37218 EFLAGS: 00010206 [ 253.467179][ T7578] RAX: 000000000000006c RBX: 0000000000000360 RCX: ffff88802a303b80 [ 253.476730][ T7578] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.484940][ T7578] RBP: 1ffff11004f20a44 R08: ffffc90003c375a0 R09: ffffc90003c375b0 [ 253.493798][ T7578] R10: fffff52000786e82 R11: 1ffff92000786e80 R12: dffffc0000000000 [ 253.502146][ T7578] R13: 0000000000000040 R14: 1ffff11004f20a45 R15: ffff88802790522f [ 253.510227][ T7578] FS: 00007f8f081ea6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 253.520533][ T7578] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.527290][ T7578] CR2: 00007f8f081c8f98 CR3: 0000000053502000 CR4: 00000000003506e0 [ 253.536939][ T7578] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 253.545168][ T7578] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.560483][ T7578] Kernel panic - not syncing: Fatal exception [ 253.566874][ T7578] Kernel Offset: disabled [ 253.571212][ T7578] Rebooting in 86400 seconds..