last executing test programs: 3m44.682201795s ago: executing program 32 (id=125): socket$can_raw(0x1d, 0x3, 0x1) syz_open_dev$loop(0x0, 0xfffffbff7ffffffa, 0x1222e2) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000400)) 3m37.4941143s ago: executing program 33 (id=164): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) splice(r1, 0x0, r0, 0x0, 0x2, 0x6) 3m36.471119504s ago: executing program 34 (id=172): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000940)=',l', 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000500)="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", 0x121, 0x805, 0x0, 0x0) 3m35.860466229s ago: executing program 35 (id=179): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_STATION(r3, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, 0x0, 0x44004) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3m34.824560755s ago: executing program 36 (id=187): syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x0, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xbd, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 2m39.956467779s ago: executing program 6 (id=394): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) 2m38.834788547s ago: executing program 6 (id=402): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x82) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) 2m38.385485998s ago: executing program 5 (id=406): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={r2, 0x10, "c7dff70e4f853f3a4c1240f0f02fd60d"}, &(0x7f0000000200)=0x18) 2m38.098555954s ago: executing program 5 (id=412): socket$netlink(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 2m37.950388028s ago: executing program 6 (id=414): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000400), 0x6, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2m37.834444571s ago: executing program 5 (id=416): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x80000001) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000200)='./file0\x00', 0x4) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) 2m37.703714054s ago: executing program 5 (id=420): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x11e, 0x110, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0x1, 0x82, 0x0, 0x0}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, 0x0, &(0x7f0000000040)=@IORING_OP_READV=@pass_iovec={0x1, 0xb, 0x4004, @fd, 0xf8, 0x0, 0x0, 0x11, 0x1, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 2m37.4723067s ago: executing program 5 (id=421): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0xff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, 0x0}, 0x10) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) 2m37.089767539s ago: executing program 6 (id=425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x82) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) 2m36.754639347s ago: executing program 5 (id=427): socket$netlink(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 2m36.157229552s ago: executing program 6 (id=428): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) 2m36.094193243s ago: executing program 6 (id=429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x11, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 2m22.605372251s ago: executing program 37 (id=418): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x18, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90f, 0x976, '\x00', @p_u32=0x0}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 2m21.589405726s ago: executing program 38 (id=423): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000180)={r2, 0x10, "c7dff70e4f853f3a4c1240f0f02fd60d"}, &(0x7f0000000200)=0x18) 2m21.575232347s ago: executing program 39 (id=426): sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x1d8, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x1b9, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val, @val={0x1, 0x1, [{0x3}]}, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x2d, "ccff396922e15cae25aef7da02fcbfdfdcbfdb1ff313dae170d604445f1aa40580eb457c61f5ff5a6a0bc277b6"}, {0xdd, 0xde, "6b6f3c17950396eb8c709cd3d676c6300a0c381a951fd45bc3f65f0cc9298dbc972a0de3f29325d320c61fb8db027485430d8dfe931407edbcc4c9eacbe8288c6d51bf48b5a9625eac8ea03993dc0a592fd764360483ab4dc98d4e07bdb0484866c6b6b41d70191142ed091ca9626c5ec9e4549889e9c754eed87a13afba49d41c937e4ca94a08a309610d242d5cbf137de2b925638e09c39b763e4a082166607fd4c968d24976e5be28647bed3b019a2fa62a91151d6aaf1128472357b37ed798d3571d47ec939a465c9cca298e134ee90549d6b48c137137ff93887da8"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x23, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915"}, {0xdd, 0x18, "059d8cb3b1122c12ddecd25f84b3ee6bd2d013ca76a47d77"}, {0xdd, 0xd, "cf80b8f78e71a29e379db9d70c"}]}}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m21.558582176s ago: executing program 40 (id=427): socket$netlink(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x40054) 2m20.538655211s ago: executing program 41 (id=429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0xf}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x11, 0x1, {{0x4, 0x0, 0x0, 0x1, 0x7ff, 0x1}, {0x6, 0x0, 0x8, 0x6, 0x8, 0x401}, 0x40, 0xd, 0x8ef}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1m54.29173912s ago: executing program 4 (id=473): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$lock(r0, 0x40f, 0x0) 1m54.234027552s ago: executing program 4 (id=475): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @c}, 0x10, 0x0, '\x00', @d}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @auto="fe88644d88d16876cef2a33c1b74b230"}) 1m54.216415602s ago: executing program 4 (id=476): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xe8, 0x0, 0x3, [{{0x4, 0x3, 0x7fffffff, 0x3, 0x9, 0x10001, {0x6, 0xffffffffb533acec, 0x80, 0x40000046a1, 0x4008, 0x0, 0x2, 0xfffffffe, 0x7, 0x2000, 0xfffffeff, 0x0, r2, 0x8001, 0x2}}, {0x0, 0x1, 0x3b, 0x30540194, '\x00\xc2\x1d\xd2~\x85}\xc9.\xda\xfb\x98\xbd}snu\xc8\xae\xb7\xed\x19\x16j\x8a\xa1\xb1\x18\xf6O\"Mc(\xafX\xbc\b\xb3Ex\xb8\x95!?\x01\xa7\xcb\xb3\xa3\x11\b\x97qZ\x820\xc6\xba'}}]}, 0x0, 0x0, 0x0}) getdents64(0xffffffffffffffff, 0x0, 0x0) 1m53.354790193s ago: executing program 4 (id=479): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xd, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180200", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030800054000000000140000001100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000030a010800000000000000000a0000070900010073797a31000000000c000240"], 0x84}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) 1m53.221320686s ago: executing program 4 (id=480): syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@norecovery}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") syz_open_dev$vim2m(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(&(0x7f0000000140)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) 1m52.344962577s ago: executing program 4 (id=482): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f00000005c0)={[{@uni_xlate}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x400000000000a}}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@fat=@fmask={'fmask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@fat=@check_strict}, {@rodir}]}, 0x0, 0x2ae, &(0x7f0000001980)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newrule={0x58, 0x20, 0x1, 0x70bd28, 0x35dfdbff, {0xa, 0x80, 0x10, 0x0, 0xb5, 0x0, 0x0, 0x3, 0x17}, [@FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048810) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 1m50.542226091s ago: executing program 3 (id=488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x10, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x4004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) read(r4, &(0x7f0000000200), 0x1000) 1m49.718162771s ago: executing program 3 (id=489): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0xd, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180200", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030800054000000000140000001100"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000030a010800000000000000000a0000070900010073797a31000000000c000240"], 0x84}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) 1m49.575767365s ago: executing program 3 (id=490): syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@norecovery}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") syz_open_dev$vim2m(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(&(0x7f0000000140)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) 1m48.697375336s ago: executing program 3 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x82) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) 1m47.804785908s ago: executing program 3 (id=492): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$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") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000480)={@id={0x2, 0x0, @c}, 0x10, 0x0, '\x00', @d}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x4, '\x00', @auto="fe88644d88d16876cef2a33c1b74b230"}) 1m47.71428149s ago: executing program 3 (id=493): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xf, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffa, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 1m37.055098129s ago: executing program 42 (id=482): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x2808080, &(0x7f00000005c0)={[{@uni_xlate}, {@numtail}, {@uni_xlateno}, {@uni_xlate}, {@fat=@umask={'umask', 0x3d, 0x400000000000a}}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@fat=@fmask={'fmask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@fat=@check_strict}, {@rodir}]}, 0x0, 0x2ae, &(0x7f0000001980)="$eJzs3c+KI0UYAPCvJ52ZjArJwZMINujB07CzT7BBRljMSemDXlTcLMgkLEwgsCrGPXkXPPkOvoMP4MU38OBR8OYexJakO3+nM2wkZmX297vM11X1VVdV18xAoCufvD68fPBo9PDJV79Gq5XE0b24F0+T6MRRzH0TAMBt8rQo4o+iFHF8Y9t0Vl+0q6ujw4wQANi39f//AMCL4IMPP3qv2+tdvJ9lrYjht+M8iYhhMs7L+u7D+DwG0Y870Y6/IoqFMn7lfu8i0iybfxgwPo08Yvjxz9V19/eIWf55tKNzPf/d+72L86wUbw0n43x65+nPZryURHSLpOzobrTj1YiiGVUny/y7NfmRH8fbb/5Qjf/vfpxFO375LB7FIB7Muljmf32eZe8U3//5ZTmDPCKZjPOTWbulonGwhwIAAAAAAAAAAAAAAAAAAAAAwK13li10Vs/PmZ8GeHZWXz87H6hRcz5QdcLPZOV8nTtZls2P8RnnzSjz03gtjfS5Th4AAAAAAAAAAAAAAAAAAAD+J0aPv7j8dDDoX60FPxWbJTVB9UZ/VCXpSlW6XnVzPzXB5Y8Ru2c9SxCNamiD5Not5hN65g7T7Y1PdhnYaV0/cbRtDdNBlIP/bvdFeGOnCU6D4l+s83x3TTfJDY0bMXrcqt8kKzvztOrsajR7QKfbNu16UNQsXWNr1vGe9tjxy/vdtNMZNxeLud6mNX2SKyXNPf+mbEj+iz8/AAAAAAAAAAAAAAAAAADAiuVLv/Hbtconz2VIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBwy+//XwTR2SzZDCZVcr8ufSM4uRrV3LZz4GkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwy/0TAAD//0dFVzc=") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newrule={0x58, 0x20, 0x1, 0x70bd28, 0x35dfdbff, {0xa, 0x80, 0x10, 0x0, 0xb5, 0x0, 0x0, 0x3, 0x17}, [@FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048810) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 1m32.550964949s ago: executing program 43 (id=493): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xf, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffa, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f0000000080)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000440)={0x11, 0x86dd, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 45.410247835s ago: executing program 1 (id=855): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000fc0)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES8, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRESOCT=0x0, @ANYRESOCT], 0x1, 0x1f3, &(0x7f00000001c0)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file1\x00'}, 0x6e) 45.393538646s ago: executing program 1 (id=856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x10, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x4004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/sctp/assocs\x00', 0x0, 0x0) read(r3, &(0x7f0000000200), 0x1000) 40.090104125s ago: executing program 1 (id=905): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) wait4(0x0, 0x0, 0x40000000, 0xffffffffffffffff) 40.022170206s ago: executing program 1 (id=906): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x82) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) 38.904664264s ago: executing program 1 (id=921): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r0, 0x1000000, 0x0) 38.757189017s ago: executing program 1 (id=925): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') sendmsg$key(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x40000060) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 23.404834291s ago: executing program 44 (id=925): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') sendmsg$key(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x40000060) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 5.167316645s ago: executing program 8 (id=1158): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x113140, 0x2) readv(r0, &(0x7f0000003f00)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {0x0}], 0x2) 4.646162577s ago: executing program 8 (id=1162): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) 3.875838906s ago: executing program 7 (id=1174): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, 0x0) 3.866693466s ago: executing program 7 (id=1176): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') 3.789544438s ago: executing program 8 (id=1178): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000300)={r4, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000140)={r5, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000040)={r6, 0x80000}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f00000001c0)={r6}) 3.74025666s ago: executing program 8 (id=1179): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0xfffffffffffffe26, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r0, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x50, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x6]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.432062837s ago: executing program 8 (id=1180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xa}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) close(0xffffffffffffffff) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 3.265598421s ago: executing program 2 (id=1185): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000826000/0xf000)=nil, 0xf000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0xffffd000) mmap$IORING_OFF_SQ_RING(0xffffff400000, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x43}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 2.830938081s ago: executing program 7 (id=1188): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.791238052s ago: executing program 9 (id=1190): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x403, &(0x7f0000000000)={0x0, 0x4c}) 2.745676843s ago: executing program 7 (id=1191): syz_open_dev$video(0x0, 0x8, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x20008080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0xfffffffffffffe26, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r4, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x50, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x6]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r9, 0x1, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x3b2}]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c8e00000200ac5377a6e34960a0902e5472c6000000ccfdd52e4fcb7e564454216a824195360906ffa929f76451be784e620fac090c952a3f5277ae17"], 0x0, 0x26}, 0x20) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) socket$inet6(0xa, 0x80002, 0x0) 2.618178047s ago: executing program 9 (id=1192): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x2c6ac000) syslog(0x4, &(0x7f0000000000)=""/19, 0xb12288e90d7c8384) 2.359343443s ago: executing program 2 (id=1193): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 2.206501497s ago: executing program 9 (id=1195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000190a01040000000000000000020000000c00034000000000000000020900020073797a32000000000900010073797a30"], 0x38}, 0x1, 0x0, 0x0, 0x440c4}, 0x4004) 1.859247235s ago: executing program 9 (id=1196): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$eJzs3b+LHFUcAPDv7O3NTrTYLaxEyIAprIKXTmz2kATEqwxbRAs9TAJyuwg5OIiKaypbGwsL/wJBsPG/SON/INgKdkYIjMzszO3s3uZ+RPckd59Pc9977/ud997sY2+3mHcfvzbZu5vH/Udf/hZZlkRnGMN4ksQgOtH4OhYMvw0A4EX2pCjiz2KmakhOV1emZeudGgCwJkf+/q/UnYc/n8u0AIA1un3ng/e2d3Zuvp9FFrcm3xyMym/25c9Z//b9+DTGcS/ejH48jag+J9Rf/Mv4VlEU025eGsS1yfRgVFZOPnpcX3/7j4iqfiv6MTgsqz5tVPXv7tzcqsrzXqt+Ws7jpXr8YVl/I/rxymHxQv2NWX3ero9RGm+83pr/9ejHr5/EZzGOu9Uk5vVfbeX5O8V3f33xYTm9sj6ZHox6Vd5csXGerwsAAAAAAAAAAAAAAAAAAAAAABfb9bw5fCe/GtcmZVN9/s7G07TOqVMG86qyfxYdHhfcOh+oNC3ih9mRgpsL483P9+nGq932wYIAAAAAAAAAAAAAAAAAAABwee0//Hxvdzy+9+A/CZKIK82V/74d8bzXGbZarsbxyb16vN3xuFOHCzmP03ZLbDQ5ScSx04huxELL8y/npOBKtjTnJvjxp3KBZ7lg1mp5a/UCN5fWdSS40/u3e6PZA3u7yeqxetG0ZPVd/T6NmOekccqx0md1FdF+vU5acrqyq3/mtacvV8H0mTlFsmKLtoK3f5/11y1JLO26tLqrK0ffrINW+dLeOOEm1OXZrPzoe0VSndbRW8O7EAAAAAAAAAAAAAAAAAAAENXTvM3Tv+Vvvyx2Pjq2tFN4FBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAC2L/YfP//88QTOviUySn8WD/f14iAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAl8A/AQAA//+0t0sX") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x113140, 0x2) readv(r0, 0x0, 0x0) 1.858352335s ago: executing program 7 (id=1197): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000b00)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=""/4092}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.770218187s ago: executing program 9 (id=1198): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') sendmsg$key(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x4001) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') 1.370846237s ago: executing program 2 (id=1200): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, &(0x7f0000001440)={[{@fat=@gid}, {@utf8}, {@utf8}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@numtail}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@shortname_mixed}, {@utf8no}, {@shortname_lower}, {@shortname_lower}, {@fat=@quiet}, {@uni_xlate}]}, 0x7b, 0x2c7, &(0x7f0000001940)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 1.335108888s ago: executing program 0 (id=1201): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mysys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x0) lseek(r0, 0x1000000, 0x0) 1.334728668s ago: executing program 2 (id=1202): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.23816892s ago: executing program 0 (id=1203): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@mblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@mblk_io_submit}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x2, 0xb}}, 0x3414c0) 1.23801483s ago: executing program 0 (id=1204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000826000/0xf000)=nil, 0xf000, 0xb635773f06ebbeee, 0x11, 0xffffffffffffffff, 0xffffd000) mmap$IORING_OFF_SQ_RING(0xffffff400000, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x43}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 1.223075541s ago: executing program 2 (id=1205): syz_mount_image$ext4(&(0x7f00000005c0)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000240)={[{@min_batch_time={'min_batch_time', 0x3d, 0xff}}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@norecovery}, {@noblock_validity}, {@resgid}, {@inlinecrypt}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") syz_open_dev$vim2m(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) chdir(&(0x7f0000000140)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) 833.04543ms ago: executing program 9 (id=1206): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) 723.840623ms ago: executing program 7 (id=1207): getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x10000000}) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shmdt(0x0) accept4$bt_l2cap(r4, 0x0, 0x0, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_open_pts(0xffffffffffffffff, 0x424042) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@setlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}, @IFLA_MTU={0x8, 0x4, 0x80}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 381.159561ms ago: executing program 8 (id=1208): syz_open_dev$video(0x0, 0x8, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x20008080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0xfffffffffffffe26, &(0x7f0000000000)={&(0x7f0000000400)={0x2c, r4, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xa5}]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x50, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x6]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r9, 0x1, &(0x7f00000005c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x3b2}]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c8e00000200ac5377a6e34960a0902e5472c6000000ccfdd52e4fcb7e564454216a824195360906ffa929f76451be784e620fac090c952a3f5277ae17"], 0x0, 0x26}, 0x20) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef91", 0x12) 378.208181ms ago: executing program 0 (id=1209): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xe8, 0x0, 0x3, [{{0x4, 0x3, 0x7fffffff, 0x3, 0x9, 0x10001, {0x6, 0xffffffffb533acec, 0x80, 0x40000046a1, 0x4008, 0x0, 0x2, 0xfffffffe, 0x7, 0x2000, 0xfffffeff, 0x0, r2, 0x8001, 0x2}}, {0x0, 0x1, 0x3b, 0x30540194, '\x00\xc2\x1d\xd2~\x85}\xc9.\xda\xfb\x98\xbd}snu\xc8\xae\xb7\xed\x19\x16j\x8a\xa1\xb1\x18\xf6O\"Mc(\xafX\xbc\b\xb3Ex\xb8\x95!?\x01\xa7\xcb\xb3\xa3\x11\b\x97qZ\x820\xc6\xba'}}]}, 0x0, 0x0, 0x0}) getdents64(r3, 0x0, 0x0) 52.606579ms ago: executing program 0 (id=1210): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 831.171µs ago: executing program 0 (id=1211): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)={0x50, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_a, @device_a, @from_mac=@broadcast, {0x0, 0xff}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x0, 0x2}, @val={0x76, 0x6, {0x61, 0x3, 0xd, 0x5}}}}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x0, 0x6]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 0s ago: executing program 2 (id=1212): socket(0x1, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r3, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) kernel console output (not intermixed with test programs): F(NETDEV_CHANGE): team_slave_1: link becomes ready [ 193.134155][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 193.149035][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 193.150755][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 193.152320][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 193.156252][ T6417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 193.193034][ T6401] device veth0_macvtap entered promiscuous mode [ 193.195170][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 193.197067][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 193.199028][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 193.200601][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 193.203035][ T6401] device veth1_macvtap entered promiscuous mode [ 193.215532][ T5991] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.219393][ T5991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.222929][ T5991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.230709][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.232409][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.233870][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.240469][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.242208][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.243993][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.249330][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.251046][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.252678][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.254354][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.268827][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.270662][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.272281][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.273925][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.280085][ T6401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.483710][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.485838][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.491766][ T6409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.503502][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.505120][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.507482][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.509228][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.511030][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.512811][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.514399][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.522199][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.523784][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.525998][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.527641][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.529367][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.530926][ T6401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.532720][ T6401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.534990][ T6401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.537716][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.539064][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.540395][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 193.542260][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 193.582153][ T6417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.584409][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.586162][ T6061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.588997][ T6401] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.590488][ T6401] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.592072][ T6401] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.593582][ T6401] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.624309][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 193.626074][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 193.627407][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.629013][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.630613][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.660643][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.664800][ T6411] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.671011][ T6417] device veth0_vlan entered promiscuous mode [ 193.942459][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.944096][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.946340][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 193.948140][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 193.952145][ T6409] device veth0_vlan entered promiscuous mode [ 193.968070][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 193.969574][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 193.971168][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 193.973165][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 193.991518][ T6417] device veth1_vlan entered promiscuous mode [ 194.034709][ T6409] device veth1_vlan entered promiscuous mode [ 194.051529][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 194.053102][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 194.060408][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 194.061989][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 194.065741][ T5931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.067159][ T5931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.068783][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 194.072119][ T6411] device veth0_vlan entered promiscuous mode [ 194.332642][ T6417] device veth0_macvtap entered promiscuous mode [ 194.335064][ T6417] device veth1_macvtap entered promiscuous mode [ 194.348466][ T4558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 194.349811][ T4558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.351359][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.352983][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.354509][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 194.356294][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 194.358198][ T484] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.364420][ T6411] device veth1_vlan entered promiscuous mode [ 194.391023][ T6409] device veth0_macvtap entered promiscuous mode [ 194.404473][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 194.406100][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 194.407655][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 194.409214][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 194.411176][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 194.423563][ T6409] device veth1_macvtap entered promiscuous mode [ 194.428635][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.430310][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.431975][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.433567][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.435103][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.442490][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.444049][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.446500][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.448114][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.449785][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.451358][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.452989][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.454622][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.457420][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.459207][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.460934][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.463535][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.479429][ T7314] loop3: detected capacity change from 0 to 128 [ 194.496271][ T7314] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 194.516218][ T6401] EXT4-fs (loop3): unmounting filesystem. [ 195.362190][ T7332] netlink: 48 bytes leftover after parsing attributes in process `syz.4.469'. [ 195.709664][ T7356] loop3: detected capacity change from 0 to 512 [ 195.713833][ T7356] EXT4-fs: inline encryption not supported [ 195.717379][ T7356] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 195.720275][ T7356] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.470: corrupted in-inode xattr [ 195.722509][ T7356] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.470: couldn't read orphan inode 15 (err -117) [ 195.724863][ T7356] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 196.013435][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 196.015580][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.018940][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.023636][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 196.032227][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 196.086934][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.093466][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.096036][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.098291][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.100110][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.102243][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.104086][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.106079][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.108007][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.110133][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.112146][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.114242][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.116126][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.118862][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.120600][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.122788][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.130356][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.133339][ T6411] device veth0_macvtap entered promiscuous mode [ 196.429837][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 196.431587][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.433838][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.444969][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.447405][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.449380][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.453370][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.455052][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.460958][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.462813][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.464566][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.469827][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.471727][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.473478][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.480331][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.482176][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.484091][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.488573][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.490239][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.491979][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.493708][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.499828][ T6409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.503414][ T6417] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.504972][ T6417] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.510065][ T6417] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.512039][ T6417] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.542990][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 196.565648][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 196.569121][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.571029][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.574082][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.579434][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.581360][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.587594][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.590437][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.592529][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.594534][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.600328][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.602099][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.603833][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.607057][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.608982][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.610765][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.612606][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.614542][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.616699][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.619414][ T6409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.620353][ T6401] EXT4-fs (loop3): unmounting filesystem. [ 196.622441][ T6411] device veth1_macvtap entered promiscuous mode [ 196.634287][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 196.636129][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 196.637703][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 196.670850][ T6409] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.682663][ T6409] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.684533][ T6409] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.704239][ T6409] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.727729][ T7426] loop4: detected capacity change from 0 to 128 [ 196.740701][ T7426] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 196.758774][ T6407] EXT4-fs (loop4): unmounting filesystem. [ 197.033463][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.036010][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.038086][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.040103][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.041868][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.043703][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.045496][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.047319][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.049126][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.051105][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.052863][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.054800][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.056882][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.059051][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.060765][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.062615][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.064407][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.066591][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.068604][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.070512][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.073004][ T6411] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.079135][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 197.081028][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 197.085194][ T5931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.086894][ T5931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.092547][ T56] device hsr_slave_0 left promiscuous mode [ 197.135893][ T56] device hsr_slave_1 left promiscuous mode [ 197.215387][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.216718][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.218520][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.219853][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.221401][ T56] device bridge_slave_1 left promiscuous mode [ 197.222607][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.256165][ T56] device bridge_slave_0 left promiscuous mode [ 197.257319][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.298026][ T56] device hsr_slave_0 left promiscuous mode [ 197.335530][ T56] device hsr_slave_1 left promiscuous mode [ 197.415321][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.416803][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.418373][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.419664][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.421122][ T56] device bridge_slave_1 left promiscuous mode [ 197.422272][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.465747][ T56] device bridge_slave_0 left promiscuous mode [ 197.467184][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.509975][ T56] device hsr_slave_0 left promiscuous mode [ 197.555355][ T56] device hsr_slave_1 left promiscuous mode [ 197.645282][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.646774][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.648302][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.649821][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.651345][ T56] device bridge_slave_1 left promiscuous mode [ 197.652559][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.666324][ T7440] netlink: 48 bytes leftover after parsing attributes in process `syz.4.479'. [ 197.686355][ T56] device bridge_slave_0 left promiscuous mode [ 197.687480][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.765778][ T7442] loop4: detected capacity change from 0 to 512 [ 197.776088][ T7442] EXT4-fs: inline encryption not supported [ 197.777735][ T56] device hsr_slave_0 left promiscuous mode [ 197.779491][ T7442] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 197.782844][ T7442] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.480: corrupted in-inode xattr [ 197.785578][ T7442] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.480: couldn't read orphan inode 15 (err -117) [ 197.788284][ T7442] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 197.865861][ T56] device hsr_slave_1 left promiscuous mode [ 197.968608][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.971064][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.979127][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.985855][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.998188][ T56] device bridge_slave_1 left promiscuous mode [ 198.001048][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.083405][ T56] device bridge_slave_0 left promiscuous mode [ 198.084656][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.137540][ T56] device hsr_slave_0 left promiscuous mode [ 198.195498][ T56] device hsr_slave_1 left promiscuous mode [ 198.296477][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.297904][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.299703][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.301081][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.302664][ T56] device bridge_slave_1 left promiscuous mode [ 198.303863][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.355763][ T56] device bridge_slave_0 left promiscuous mode [ 198.356833][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.397580][ T56] device hsr_slave_0 left promiscuous mode [ 198.445385][ T56] device hsr_slave_1 left promiscuous mode [ 198.525301][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.526669][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.528239][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.529726][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.531499][ T56] device bridge_slave_1 left promiscuous mode [ 198.532783][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.565759][ T56] device bridge_slave_0 left promiscuous mode [ 198.567099][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.629654][ T6407] EXT4-fs (loop4): unmounting filesystem. [ 198.649903][ T7451] loop4: detected capacity change from 0 to 256 [ 198.755374][ T56] device veth1_macvtap left promiscuous mode [ 198.756594][ T56] device veth0_macvtap left promiscuous mode [ 198.757662][ T56] device veth1_vlan left promiscuous mode [ 198.758627][ T56] device veth0_vlan left promiscuous mode [ 198.845386][ T56] device veth1_macvtap left promiscuous mode [ 198.855431][ T56] device veth0_macvtap left promiscuous mode [ 198.856754][ T56] device veth1_vlan left promiscuous mode [ 198.857837][ T56] device veth0_vlan left promiscuous mode [ 198.895906][ T7454] loop3: detected capacity change from 0 to 128 [ 198.920964][ T7454] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 198.925692][ T56] device veth1_macvtap left promiscuous mode [ 198.926788][ T56] device veth0_macvtap left promiscuous mode [ 198.927938][ T56] device veth1_vlan left promiscuous mode [ 198.928961][ T56] device veth0_vlan left promiscuous mode [ 198.944717][ T6401] EXT4-fs (loop3): unmounting filesystem. [ 199.000568][ T56] device veth1_macvtap left promiscuous mode [ 199.001670][ T56] device veth0_macvtap left promiscuous mode [ 199.002935][ T56] device veth1_vlan left promiscuous mode [ 199.004160][ T56] device veth0_vlan left promiscuous mode [ 199.075549][ T56] device veth1_macvtap left promiscuous mode [ 199.076698][ T56] device veth0_macvtap left promiscuous mode [ 199.077916][ T56] device veth1_vlan left promiscuous mode [ 199.078987][ T56] device veth0_vlan left promiscuous mode [ 199.175402][ T56] device veth1_macvtap left promiscuous mode [ 199.176469][ T56] device veth0_macvtap left promiscuous mode [ 199.177571][ T56] device veth1_vlan left promiscuous mode [ 199.178514][ T56] device veth0_vlan left promiscuous mode [ 201.311214][ T7531] netlink: 48 bytes leftover after parsing attributes in process `syz.3.489'. [ 201.386614][ T56] team0 (unregistering): Port device team_slave_1 removed [ 201.414857][ T7533] loop3: detected capacity change from 0 to 512 [ 201.418524][ T7533] EXT4-fs: inline encryption not supported [ 201.419897][ T7533] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 201.432574][ T7533] EXT4-fs error (device loop3): ext4_iget_extra_inode:4763: inode #15: comm syz.3.490: corrupted in-inode xattr [ 201.435295][ T7533] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.490: couldn't read orphan inode 15 (err -117) [ 201.438808][ T7533] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 201.596058][ T56] team0 (unregistering): Port device team_slave_0 removed [ 201.766077][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.976380][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.277441][ T6401] EXT4-fs (loop3): unmounting filesystem. [ 203.181099][ T7542] loop3: detected capacity change from 0 to 128 [ 203.197497][ T7542] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 203.220109][ T6401] EXT4-fs (loop3): unmounting filesystem. [ 203.576771][ T56] bond0 (unregistering): Released all slaves [ 205.866748][ T56] team0 (unregistering): Port device team_slave_1 removed [ 206.046150][ T56] team0 (unregistering): Port device team_slave_0 removed [ 206.230478][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.416279][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.857062][ T56] bond0 (unregistering): Released all slaves [ 210.227281][ T56] team0 (unregistering): Port device team_slave_1 removed [ 210.386190][ T56] team0 (unregistering): Port device team_slave_0 removed [ 210.546235][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.745691][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.296644][ T56] bond0 (unregistering): Released all slaves [ 213.963525][ T4320] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.965191][ T4320] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.970653][ T4320] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.972284][ T4320] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.973793][ T4320] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 213.975132][ T4320] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.680737][ T56] team0 (unregistering): Port device team_slave_1 removed [ 214.836922][ T56] team0 (unregistering): Port device team_slave_0 removed [ 215.015663][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.225720][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.995292][ T4311] Bluetooth: hci0: command 0x0409 tx timeout [ 216.766947][ T56] bond0 (unregistering): Released all slaves [ 218.075454][ T4311] Bluetooth: hci0: command 0x041b tx timeout [ 218.459073][ T4320] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 218.460647][ T4320] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 218.462162][ T4320] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 218.463579][ T4320] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 218.465569][ T4320] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 218.467852][ T4320] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 219.197495][ T56] team0 (unregistering): Port device team_slave_1 removed [ 219.375964][ T56] team0 (unregistering): Port device team_slave_0 removed [ 219.545619][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.776013][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.155282][ T4311] Bluetooth: hci0: command 0x040f tx timeout [ 220.475290][ T4306] Bluetooth: hci1: command 0x0409 tx timeout [ 221.278116][ T56] bond0 (unregistering): Released all slaves [ 222.245323][ T4306] Bluetooth: hci0: command 0x0419 tx timeout [ 222.555694][ T4306] Bluetooth: hci1: command 0x041b tx timeout [ 223.596771][ T56] team0 (unregistering): Port device team_slave_1 removed [ 223.766425][ T56] team0 (unregistering): Port device team_slave_0 removed [ 223.936023][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.145656][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.635272][ T4311] Bluetooth: hci1: command 0x040f tx timeout [ 225.686641][ T56] bond0 (unregistering): Released all slaves [ 225.990184][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.992133][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.993757][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.995964][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.997722][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.999653][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.001615][ T6411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.003701][ T6411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.006182][ T6411] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.009114][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.021931][ T5473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.023191][ T5473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.024511][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.027824][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.029500][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 226.080008][ T6411] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.081429][ T6411] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.082737][ T6411] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.084121][ T6411] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.127578][ T5473] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.128960][ T5473] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.130285][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.148055][ T4558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.149326][ T4558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.150680][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 226.334535][ T4558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.336690][ T4558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.338622][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.420097][ T5473] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.421522][ T5473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.422821][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 226.441715][ T7594] netlink: 48 bytes leftover after parsing attributes in process `syz.0.498'. [ 226.544216][ T7602] binder: 7601:7602 ioctl 4018620d 0 returned -22 [ 226.554853][ T7555] chnl_net:caif_netlink_parms(): no params data found [ 226.560490][ T7602] binder: 7601:7602 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 226.570967][ T7602] binder: 7601:7602 got transaction to invalid handle, 1 [ 226.575202][ T7548] chnl_net:caif_netlink_parms(): no params data found [ 226.589272][ T7602] binder: 7602:7601 cannot find target node [ 226.591536][ T7602] binder: 7601:7602 transaction call to 0:0 failed 50/29201/-22, size 72-24 line 3062 [ 226.593522][ T7602] binder: 7601:7602 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 226.598279][ T7602] binder: 7602 RLIMIT_NICE not set [ 226.697984][ T7555] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.715708][ T4306] Bluetooth: hci1: command 0x0419 tx timeout [ 226.771887][ T7635] autofs4:pid:7635:autofs_fill_super: called with bogus options [ 226.974925][ T7555] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.980624][ T7555] device bridge_slave_0 entered promiscuous mode [ 226.995979][ T7548] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.997490][ T7548] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.999277][ T7548] device bridge_slave_0 entered promiscuous mode [ 227.002149][ T7555] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.006047][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.009996][ T7555] device bridge_slave_1 entered promiscuous mode [ 227.014507][ T7548] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.023527][ T7548] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.025786][ T7548] device bridge_slave_1 entered promiscuous mode [ 227.052014][ T7555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.061227][ T7548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.064284][ T7555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.072895][ T7548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.088855][ T7548] team0: Port device team_slave_0 added [ 227.093837][ T7555] team0: Port device team_slave_0 added [ 227.096847][ T7548] team0: Port device team_slave_1 added [ 227.098886][ T7555] team0: Port device team_slave_1 added [ 227.113108][ T7555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.115197][ T7555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.122227][ T7555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.124684][ T7548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.130311][ T7548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.134886][ T7548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.140464][ T7555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.141773][ T7555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.150368][ T7555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.153430][ T7548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.154647][ T7548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.161441][ T7548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.267674][ T7555] device hsr_slave_0 entered promiscuous mode [ 227.335852][ T7555] device hsr_slave_1 entered promiscuous mode [ 227.375547][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 227.385545][ T7555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.386968][ T7555] Cannot create hsr debugfs directory [ 227.468249][ T7548] device hsr_slave_0 entered promiscuous mode [ 227.477126][ T7657] 9pnet_fd: Insufficient options for proto=fd [ 227.526147][ T7548] device hsr_slave_1 entered promiscuous mode [ 227.559419][ T7664] loop0: detected capacity change from 0 to 512 [ 227.567039][ T7548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.569518][ T7548] Cannot create hsr debugfs directory [ 227.580517][ T7669] overlayfs: missing 'lowerdir' [ 227.614820][ T7664] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 227.620393][ T7664] System zones: 1-12 [ 227.639605][ T7664] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.503: missing EA_INODE flag [ 227.644187][ T7664] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.503: error while reading EA inode 12 err=-117 [ 227.651690][ T7664] EXT4-fs (loop0): 1 orphan inode deleted [ 227.652873][ T7664] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 227.670603][ T7664] fscrypt (loop0, inode 15): Reserved bits set in encryption policy [ 227.714650][ T6409] EXT4-fs (loop0): unmounting filesystem. [ 227.734928][ T7681] loop2: detected capacity change from 0 to 1024 [ 227.772004][ T7681] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 227.837406][ T7683] netlink: 48 bytes leftover after parsing attributes in process `syz.0.507'. [ 228.330499][ T7705] binder: 7704:7705 ioctl 4018620d 0 returned -22 [ 228.332446][ T7705] binder: 7704:7705 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 228.337244][ T7705] binder: 7704:7705 got transaction to invalid handle, 1 [ 228.338582][ T7705] binder: 7705:7704 cannot find target node [ 228.339798][ T7705] binder: 7704:7705 transaction call to 0:0 failed 53/29201/-22, size 72-24 line 3062 [ 228.341815][ T7705] binder: 7704:7705 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 228.344143][ T7705] binder: 7705 RLIMIT_NICE not set [ 228.576711][ T6411] EXT4-fs (loop2): unmounting filesystem. [ 228.787842][ T7736] autofs4:pid:7736:autofs_fill_super: called with bogus options [ 229.100985][ T7742] 9pnet_fd: Insufficient options for proto=fd [ 229.158350][ T5097] binder: undelivered TRANSACTION_ERROR: 29201 [ 229.188197][ T7751] overlayfs: missing 'lowerdir' [ 229.285187][ T7555] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 229.328233][ T7555] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 229.689221][ T7771] netlink: 48 bytes leftover after parsing attributes in process `syz.1.517'. [ 229.706339][ T7555] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 229.798449][ T7548] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 229.899518][ T7555] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 229.937612][ T7548] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 229.966307][ T7789] binder: 7788:7789 ioctl 4018620d 0 returned -22 [ 229.969102][ T7789] binder: 7788:7789 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 229.971918][ T7789] binder: 7788:7789 got transaction to invalid handle, 1 [ 229.973181][ T7789] binder: 7789:7788 cannot find target node [ 229.974282][ T7789] binder: 7788:7789 transaction call to 0:0 failed 56/29201/-22, size 72-24 line 3062 [ 229.976357][ T7548] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 230.000291][ T7548] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 230.081407][ T7555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.099144][ T7548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.121334][ T7548] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.130269][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.131779][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.133245][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.134884][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.147403][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.148798][ T4378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.156877][ T7555] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.166173][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.169510][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 230.171299][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 230.175152][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.177811][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.179646][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.180960][ T4378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.208742][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.210864][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.212898][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 230.214971][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 230.221605][ T4378] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.222994][ T4378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 230.224787][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 230.229914][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 230.231849][ T4378] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.233049][ T4378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.234676][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.241088][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.243114][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.248620][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.250657][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.252594][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.254636][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 230.257667][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 230.259659][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 230.261686][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 230.263482][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 230.265800][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.267716][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 230.270664][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.272544][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.277718][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 230.279606][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 230.281577][ T7548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.285142][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 230.289794][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 230.297410][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 230.299318][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 230.305073][ T7555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 230.410256][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.411719][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.417986][ T7548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.423667][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 230.425171][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 230.434123][ T7555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.583962][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.588144][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.598989][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.600902][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.602794][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.604534][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.608416][ T7548] device veth0_vlan entered promiscuous mode [ 230.613385][ T7548] device veth1_vlan entered promiscuous mode [ 230.623935][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 230.627597][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 230.629229][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.631046][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.644173][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.645922][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 230.647614][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 230.649139][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 230.663020][ T7555] device veth0_vlan entered promiscuous mode [ 230.706587][ T7555] device veth1_vlan entered promiscuous mode [ 230.709779][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 230.711591][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 230.714011][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.721746][ T7548] device veth0_macvtap entered promiscuous mode [ 230.725004][ T7861] overlayfs: missing 'lowerdir' [ 230.732607][ T7548] device veth1_macvtap entered promiscuous mode [ 230.744699][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 230.746576][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 230.748080][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 230.749615][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 230.751212][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 230.762059][ T7555] device veth0_macvtap entered promiscuous mode [ 230.765003][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.768470][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.770537][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.772440][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.774266][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.780107][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.781790][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.783596][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.787270][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.790188][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.792829][ T7548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.794853][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 230.797979][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 230.799962][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 230.801078][ T6897] binder: undelivered TRANSACTION_ERROR: 29201 [ 230.811835][ T7555] device veth1_macvtap entered promiscuous mode [ 230.832305][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.843251][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.848365][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.851096][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.875883][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.877738][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.879269][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.884833][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.886962][ T7548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.888624][ T7548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.926092][ T7548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.929585][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.931099][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.932623][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.948115][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.952162][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.956137][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.027511][ T7883] autofs4:pid:7883:autofs_fill_super: called with bogus options [ 231.246630][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.255020][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.261868][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.268482][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.272503][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.285263][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.316843][ T7555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.319702][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 231.321153][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.322863][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.324353][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 231.334082][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 231.339617][ T7548] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.341110][ T7548] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.342598][ T7548] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.344061][ T7548] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.351620][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.353734][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.357683][ T7887] netlink: 48 bytes leftover after parsing attributes in process `syz.0.529'. [ 231.358687][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.361228][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.362907][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.364981][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.386779][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.388595][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.390317][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.392126][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.393833][ T7555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.395684][ T7555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.398667][ T7555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.401275][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 231.404913][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 231.480693][ T7555] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.482262][ T7555] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.483631][ T7555] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.484939][ T7555] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.509395][ T5931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.510831][ T5931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.520681][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.566417][ T5931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.567958][ T5931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.569387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 231.588428][ T5931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.589783][ T5931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.591122][ T5931] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 231.613077][ T7908] overlayfs: missing 'lowerdir' [ 231.621490][ T5931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.622932][ T5931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.624462][ T4899] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 231.764051][ T7921] binder: BINDER_SET_CONTEXT_MGR already set [ 231.765113][ T7921] binder: 7920:7921 ioctl 4018620d 20004a80 returned -16 [ 231.767120][ T7921] binder_user_error: 2 callbacks suppressed [ 231.767126][ T7921] binder: 7920:7921 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 231.770612][ T7921] binder: 7921 RLIMIT_NICE not set [ 232.425720][ T7981] netlink: 48 bytes leftover after parsing attributes in process `syz.1.540'. [ 232.557495][ T7991] overlayfs: missing 'lowerdir' [ 233.129154][ T8035] overlayfs: missing 'lowerdir' [ 233.145761][ T8036] netlink: 48 bytes leftover after parsing attributes in process `syz.7.552'. [ 233.353221][ T8055] binder: 8047:8055 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 233.371846][ T8055] binder: 8055 RLIMIT_NICE not set [ 234.170579][ T8081] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 234.177965][ T8081] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 234.260442][ T8086] netlink: 48 bytes leftover after parsing attributes in process `syz.7.567'. [ 234.668765][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.153953][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.176323][ C0] Unknown status report in ack skb [ 235.215140][ T8119] netlink: 52 bytes leftover after parsing attributes in process `syz.2.577'. [ 235.297403][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.330860][ T8127] binder: BINDER_SET_CONTEXT_MGR already set [ 235.367996][ T8127] binder: 8126:8127 ioctl 4018620d 20004a80 returned -16 [ 235.377383][ T8127] binder: 8126:8127 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 235.388222][ T8127] binder: 8127 RLIMIT_NICE not set [ 235.402955][ T8130] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 235.409056][ T8130] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 235.429791][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.821834][ T8148] netlink: 48 bytes leftover after parsing attributes in process `syz.9.584'. [ 235.831558][ T8150] loop7: detected capacity change from 0 to 256 [ 235.845155][ T8159] 9pnet_fd: Insufficient options for proto=fd [ 235.852513][ T8150] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 235.859189][ T8150] FAT-fs (loop7): Filesystem has been set read-only [ 235.987761][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.347657][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.353998][ T8179] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 236.362324][ T8179] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 236.471415][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.499491][ T8190] loop7: detected capacity change from 0 to 1024 [ 236.513664][ T8190] EXT4-fs: Ignoring removed nomblk_io_submit option [ 236.882295][ T8214] 9pnet_fd: Insufficient options for proto=fd [ 236.892023][ T8190] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 237.020954][ T8222] binder: 8219:8222 ioctl c0306201 0 returned -14 [ 237.043028][ T8222] binder: 8219:8222 got transaction to invalid handle, 1 [ 237.056581][ T8222] binder: 8222:8219 cannot find target node [ 237.057773][ T8222] binder: 8219:8222 transaction call to 0:0 failed 63/29201/-22, size 72-24 line 3062 [ 237.074489][ T8222] binder: 8219:8222 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 237.091438][ T8222] binder: 8222 RLIMIT_NICE not set [ 237.283742][ T8221] netlink: 48 bytes leftover after parsing attributes in process `syz.2.600'. [ 237.330834][ T7555] EXT4-fs (loop7): unmounting filesystem. [ 237.338377][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.460096][ T8244] overlayfs: missing 'lowerdir' [ 237.565032][ T8249] autofs4:pid:8249:autofs_fill_super: called with bogus options [ 237.845781][ T5097] binder: undelivered TRANSACTION_ERROR: 29201 [ 238.053976][ T8280] 9pnet_fd: Insufficient options for proto=fd [ 238.482988][ T8294] netlink: 28 bytes leftover after parsing attributes in process `syz.7.615'. [ 238.518106][ T8298] overlayfs: missing 'lowerdir' [ 238.596564][ T8303] netlink: 48 bytes leftover after parsing attributes in process `syz.1.617'. [ 238.614204][ T8307] binder: 8306:8307 ioctl c0306201 0 returned -14 [ 238.616986][ T8307] binder: 8306:8307 got transaction to invalid handle, 1 [ 238.618188][ T8307] binder: 8307:8306 cannot find target node [ 238.623598][ T8307] binder: 8306:8307 transaction call to 0:0 failed 67/29201/-22, size 72-24 line 3062 [ 238.629829][ T8307] binder: 8306:8307 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 238.643184][ T8307] binder: 8307 RLIMIT_NICE not set [ 238.978713][ T8344] netlink: 108 bytes leftover after parsing attributes in process `syz.0.625'. [ 239.008860][ T8348] autofs4:pid:8348:autofs_fill_super: called with bogus options [ 239.061353][ T8355] overlayfs: missing 'lowerdir' [ 239.102351][ T8353] loop0: detected capacity change from 0 to 8192 [ 239.559539][ T4360] binder: undelivered TRANSACTION_ERROR: 29201 [ 239.567767][ T8369] netlink: 48 bytes leftover after parsing attributes in process `syz.2.632'. [ 240.059602][ T8383] loop0: detected capacity change from 0 to 512 [ 240.067323][ T8386] loop9: detected capacity change from 0 to 512 [ 240.134292][ T8386] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 240.136220][ T8383] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 240.219375][ T8398] loop2: detected capacity change from 0 to 8192 [ 240.226902][ T7548] EXT4-fs (loop9): unmounting filesystem. [ 240.274713][ T6409] EXT4-fs (loop0): unmounting filesystem. [ 240.298110][ T7726] I/O error, dev loop2, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 240.364339][ T8412] autofs4:pid:8412:autofs_fill_super: called with bogus options [ 240.373419][ T8414] overlayfs: missing 'workdir' [ 240.488174][ T8422] binder: 8420:8422 ioctl c0306201 0 returned -14 [ 240.499904][ T8422] binder: 8420:8422 got transaction to invalid handle, 1 [ 240.504597][ T8422] binder: 8422:8420 cannot find target node [ 240.518022][ T8422] binder: 8420:8422 transaction call to 0:0 failed 71/29201/-22, size 72-24 line 3062 [ 240.524369][ T8422] binder: 8420:8422 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 240.538559][ T8422] binder: 8422 RLIMIT_NICE not set [ 240.567188][ T8430] comedi comedi0: bad chanlist[0]=0x00000008 chan=8 range length=2 [ 240.645994][ T8435] netlink: 48 bytes leftover after parsing attributes in process `syz.7.646'. [ 240.802743][ T8455] device syzkaller0 entered promiscuous mode [ 240.897863][ T8455] tipc: Started in network mode [ 240.898850][ T8455] tipc: Node identity 8ac5ff00d131, cluster identity 4711 [ 240.900371][ T8455] tipc: Enabled bearer , priority 0 [ 240.904778][ T8458] tipc: Resetting bearer [ 240.912939][ T8454] tipc: Resetting bearer [ 240.995814][ T8454] tipc: Disabling bearer [ 241.109704][ T8471] autofs4:pid:8471:autofs_fill_super: called with bogus options [ 241.144976][ T8474] overlayfs: missing 'workdir' [ 241.165427][ T8476] netlink: 8 bytes leftover after parsing attributes in process `syz.7.654'. [ 241.326863][ T4852] binder: undelivered TRANSACTION_ERROR: 29201 [ 241.656450][ T8490] netlink: 48 bytes leftover after parsing attributes in process `syz.2.659'. [ 241.943439][ T8508] usb usb5: usbfs: interface 0 claimed by hub while 'syz.2.662' sets config #1 [ 242.205289][ T8510] overlayfs: missing 'workdir' [ 242.223714][ T8512] capability: warning: `syz.1.666' uses deprecated v2 capabilities in a way that may be insecure [ 242.282541][ T8516] binder: 8514:8516 got transaction to invalid handle, 1 [ 242.284271][ T8516] binder: 8516:8514 cannot find target node [ 242.286428][ T8516] binder: 8514:8516 transaction call to 0:0 failed 75/29201/-22, size 72-24 line 3062 [ 242.290643][ T8516] binder: 8514:8516 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 242.292928][ T8516] binder: 8516 RLIMIT_NICE not set [ 242.621441][ T8539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.672'. [ 242.667685][ T8523] loop0: detected capacity change from 0 to 32768 [ 242.689937][ T8543] netlink: 48 bytes leftover after parsing attributes in process `syz.7.673'. [ 242.692768][ T8523] loop0: p1 p3 < > [ 242.813162][ T8549] loop0: detected capacity change from 0 to 512 [ 242.826429][ T8549] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 242.844843][ T8549] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.675: attempt to clear invalid blocks 1024 len 1 [ 242.865763][ T8549] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.675: invalid indirect mapped block 1819239214 (level 0) [ 242.877413][ T8549] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.675: invalid indirect mapped block 33554432 (level 2) [ 242.881754][ T8549] EXT4-fs (loop0): 1 truncate cleaned up [ 242.882722][ T8549] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 242.912576][ T6409] EXT4-fs (loop0): unmounting filesystem. [ 243.234753][ T5093] binder: undelivered TRANSACTION_ERROR: 29201 [ 243.242499][ T8568] syz.0.679 uses obsolete (PF_INET,SOCK_PACKET) [ 243.378322][ T8161] udevd[8161]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 243.382528][ T56] device hsr_slave_0 left promiscuous mode [ 243.389041][ T7596] udevd[7596]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 243.435470][ T56] device hsr_slave_1 left promiscuous mode [ 243.506584][ T8597] netlink: 48 bytes leftover after parsing attributes in process `syz.2.689'. [ 243.508430][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.511942][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.517493][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.518995][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.520746][ T56] device bridge_slave_1 left promiscuous mode [ 243.523029][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.565850][ T56] device bridge_slave_0 left promiscuous mode [ 243.567145][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.610075][ T56] device hsr_slave_0 left promiscuous mode [ 243.646902][ T56] device hsr_slave_1 left promiscuous mode [ 243.735310][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.736779][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.740344][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.758425][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.774885][ T56] device bridge_slave_1 left promiscuous mode [ 243.776605][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.818218][ T8605] binder: 8604:8605 got transaction to invalid handle, 1 [ 243.823202][ T8605] binder: 8605:8604 cannot find target node [ 243.829644][ T8605] binder: 8604:8605 transaction call to 0:0 failed 79/29201/-22, size 72-24 line 3062 [ 243.839986][ T8605] binder: 8604:8605 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 243.851047][ T8605] binder: 8605 RLIMIT_NICE not set [ 244.452279][ T56] device bridge_slave_0 left promiscuous mode [ 244.454626][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.557158][ T56] device veth1_macvtap left promiscuous mode [ 244.558324][ T56] device veth0_macvtap left promiscuous mode [ 244.559566][ T56] device veth1_vlan left promiscuous mode [ 244.560578][ T56] device veth0_vlan left promiscuous mode [ 244.634780][ T4852] binder: undelivered TRANSACTION_ERROR: 29201 [ 244.665467][ T56] device veth1_macvtap left promiscuous mode [ 244.666634][ T56] device veth0_macvtap left promiscuous mode [ 244.667738][ T56] device veth1_vlan left promiscuous mode [ 244.668818][ T56] device veth0_vlan left promiscuous mode [ 244.733884][ T8638] netlink: 48 bytes leftover after parsing attributes in process `syz.2.702'. [ 245.965024][ T8653] fuse: Bad value for 'fd' [ 246.864033][ T8667] binder: 8666:8667 got transaction to invalid handle, 1 [ 246.867506][ T8667] binder: 8667:8666 cannot find target node [ 246.868419][ T8667] binder: 8666:8667 transaction call to 0:0 failed 83/29201/-22, size 72-24 line 3062 [ 246.870259][ T8667] binder: 8666:8667 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 246.872265][ T8667] binder: 8667 RLIMIT_NICE not set [ 247.694622][ T4852] binder: undelivered TRANSACTION_ERROR: 29201 [ 247.759957][ T8672] netlink: 48 bytes leftover after parsing attributes in process `syz.2.715'. [ 247.856757][ T56] team0 (unregistering): Port device team_slave_1 removed [ 248.071698][ T56] team0 (unregistering): Port device team_slave_0 removed [ 248.425732][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.555847][ T4306] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 248.557776][ T4306] Bluetooth: hci8: Injecting HCI hardware error event [ 248.559737][ T4306] Bluetooth: hci8: hardware error 0x00 [ 248.625680][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.806140][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.807138][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 249.629776][ T8684] fuse: Bad value for 'fd' [ 250.126939][ T56] bond0 (unregistering): Released all slaves [ 250.805297][ T4306] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 252.436658][ T56] team0 (unregistering): Port device team_slave_1 removed [ 252.596292][ T56] team0 (unregistering): Port device team_slave_0 removed [ 252.766828][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.966638][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.487281][ T56] bond0 (unregistering): Released all slaves [ 254.781715][ T8599] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.787082][ T8599] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 254.992432][ T8703] binder: 8701:8703 got transaction to invalid handle, 1 [ 255.003286][ T8703] binder: 8703:8701 cannot find target node [ 255.020811][ T8703] binder: 8701:8703 transaction call to 0:0 failed 87/29201/-22, size 72-24 line 3062 [ 255.022985][ T8703] binder: 8701:8703 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 255.051866][ T8703] binder: 8703 RLIMIT_NICE not set [ 255.236605][ T8714] netlink: 48 bytes leftover after parsing attributes in process `syz.1.727'. [ 255.725661][ T8744] fuse: Bad value for 'fd' [ 255.769110][ T8749] autofs4:pid:8749:autofs_fill_super: called with bogus options [ 255.793911][ T8751] loop0: detected capacity change from 0 to 8 [ 255.801449][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 255.866896][ T8756] loop7: detected capacity change from 0 to 256 [ 255.868995][ T8756] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 255.880785][ T8756] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 256.660159][ T8793] netlink: 48 bytes leftover after parsing attributes in process `syz.9.743'. [ 256.856580][ T8812] Illegal XDP return value 4294967294 on prog (id 42) dev syz_tun, expect packet loss! [ 256.900960][ T8815] autofs4:pid:8815:autofs_fill_super: called with bogus options [ 256.917751][ T8817] binder: 8816:8817 got transaction to invalid handle, 1 [ 256.918897][ T8817] binder: 8817:8816 cannot find target node [ 256.919887][ T8817] binder: 8816:8817 transaction call to 0:0 failed 91/29201/-22, size 72-24 line 3062 [ 256.937761][ T8817] binder: 8816:8817 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 256.949711][ T8817] binder: 8817 RLIMIT_NICE not set [ 257.117607][ T8819] mmap: syz.7.748 (8819) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 257.739345][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 257.867104][ T8861] netlink: 48 bytes leftover after parsing attributes in process `syz.9.755'. [ 258.140560][ T8885] autofs4:pid:8885:autofs_fill_super: called with bogus options [ 258.269867][ T8896] tmpfs: Bad value for 'mpol' [ 258.354534][ T8905] binder: 8904:8905 got transaction to invalid handle, 1 [ 258.357410][ T8905] binder: 8905:8904 cannot find target node [ 258.362762][ T8905] binder: 8904:8905 transaction call to 0:0 failed 95/29201/-22, size 72-24 line 3062 [ 258.385363][ T8905] binder: 8904:8905 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 258.390748][ T8905] binder: 8905 RLIMIT_NICE not set [ 258.452783][ T8909] device hsr0 entered promiscuous mode [ 258.825947][ T8933] netlink: 48 bytes leftover after parsing attributes in process `syz.2.767'. [ 258.830488][ T8930] loop9: detected capacity change from 0 to 8192 [ 259.038540][ T8953] autofs4:pid:8953:autofs_fill_super: called with bogus options [ 259.409580][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 259.471868][ T8966] netlink: 'syz.7.774': attribute type 1 has an invalid length. [ 259.492675][ T8966] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.494958][ T8966] bond1: (slave bond2): making interface the new active one [ 259.497703][ T8966] bond1: (slave bond2): Enslaving as an active interface with an up link [ 259.503853][ T8966] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 259.623118][ T8980] loop1: detected capacity change from 0 to 1024 [ 259.656894][ T8980] EXT4-fs (loop1): Unsupported blocksize for fs-verity [ 259.776793][ T8998] netlink: 48 bytes leftover after parsing attributes in process `syz.1.780'. [ 259.885667][ T9011] autofs4:pid:9011:autofs_fill_super: called with bogus options [ 259.969105][ T9020] binder: tried to use weak ref as strong ref [ 259.970575][ T9020] binder: 9020:9019 cannot find target node [ 260.159424][ T9038] netlink: 'syz.9.791': attribute type 1 has an invalid length. [ 260.181840][ T9038] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.567646][ T9057] Cannot find set identified by id 0 to match [ 260.585797][ T9054] netlink: 48 bytes leftover after parsing attributes in process `syz.9.795'. [ 260.595350][ T9063] autofs4:pid:9063:autofs_fill_super: called with bogus options [ 260.947665][ T9102] binder_user_error: 2 callbacks suppressed [ 260.947674][ T9102] binder: tried to use weak ref as strong ref [ 260.957485][ T9102] binder: 9100:9102 Acquire 1 refcount change on invalid ref 0 ret -22 [ 260.959368][ T9102] binder: 9100:9102 got transaction to invalid handle, 1 [ 260.960695][ T9102] binder_debug: 2 callbacks suppressed [ 260.960707][ T9102] binder: 9102:9100 cannot find target node [ 260.962823][ T9102] binder: 9100:9102 transaction call to 0:0 failed 101/29201/-22, size 72-24 line 3062 [ 260.964801][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 261.001710][ T9107] autofs4:pid:9107:autofs_fill_super: called with bogus options [ 261.267774][ T9124] netlink: 48 bytes leftover after parsing attributes in process `syz.2.812'. [ 262.489375][ T9148] binder: 9145:9148 ioctl 4018620d 0 returned -22 [ 262.500233][ T9166] autofs4:pid:9166:autofs_fill_super: called with bogus options [ 262.500680][ T9148] binder: tried to use weak ref as strong ref [ 262.502618][ T9148] binder: 9145:9148 Acquire 1 refcount change on invalid ref 0 ret -22 [ 262.504738][ T9148] binder: 9145:9148 got transaction to invalid handle, 1 [ 262.506669][ T9148] binder: 9148:9145 cannot find target node [ 262.507734][ T9148] binder: 9145:9148 transaction call to 0:0 failed 104/29201/-22, size 72-24 line 3062 [ 262.509795][ T9148] binder: 9145:9148 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 262.512157][ T9148] binder: 9148 RLIMIT_NICE not set [ 263.187851][ T4350] binder: undelivered TRANSACTION_ERROR: 29201 [ 263.304431][ T9198] netlink: 48 bytes leftover after parsing attributes in process `syz.7.828'. [ 263.829378][ T9219] autofs4:pid:9219:autofs_fill_super: called with bogus options [ 263.863296][ T9221] printk: console [ttyS0] disabled [ 264.007097][ T9232] binder: 9231:9232 ioctl 4018620d 0 returned -22 [ 264.008382][ T9232] binder: tried to use weak ref as strong ref [ 264.009484][ T9232] binder: 9231:9232 Acquire 1 refcount change on invalid ref 0 ret -22 [ 264.019007][ T9232] binder: 9232:9231 cannot find target node [ 264.019929][ T9232] binder: 9231:9232 transaction call to 0:0 failed 107/29201/-22, size 72-24 line 3062 [ 264.133383][ T4306] Bluetooth: unknown link type 128 [ 264.141492][ T9242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.832664][ T4354] binder: undelivered TRANSACTION_ERROR: 29201 [ 264.926337][ T9283] netlink: 48 bytes leftover after parsing attributes in process `syz.2.843'. [ 264.960499][ T9295] fuse: Bad value for 'fd' [ 264.962012][ T9293] autofs4:pid:9293:autofs_fill_super: called with bogus options [ 265.062596][ T9303] netlink: 60 bytes leftover after parsing attributes in process `syz.9.850'. [ 265.064124][ T9303] netlink: 60 bytes leftover after parsing attributes in process `syz.9.850'. [ 265.067344][ T9303] netlink: 60 bytes leftover after parsing attributes in process `syz.9.850'. [ 265.323151][ T9309] gadgetfs: bound to dummy_udc driver [ 265.510254][ T9312] binder: 9311:9312 ioctl 4018620d 0 returned -22 [ 265.518106][ T9312] binder: 9312:9311 cannot find target node [ 265.536961][ T9318] loop1: detected capacity change from 0 to 8 [ 265.970885][ T9347] fuse: Bad value for 'fd' [ 266.064137][ T9356] autofs4:pid:9356:autofs_fill_super: called with bogus options [ 266.155382][ T4306] Bluetooth: hci0: command 0x0409 tx timeout [ 266.161767][ T9365] rtc-efi rtc-efi.0: write status is 3 [ 266.206028][ T9368] netlink: 48 bytes leftover after parsing attributes in process `syz.0.863'. [ 266.331209][ T7] binder_debug: 1 callbacks suppressed [ 266.331218][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 266.742966][ T9382] fuse: Bad value for 'fd' [ 266.842693][ T9396] fuse: Bad value for 'fd' [ 267.293931][ T9411] autofs4:pid:9411:autofs_fill_super: called with bogus options [ 267.417081][ T9419] netlink: 48 bytes leftover after parsing attributes in process `syz.7.876'. [ 267.529235][ T9433] binder: 9432:9433 ioctl c0306201 0 returned -14 [ 267.530660][ T9433] binder_user_error: 8 callbacks suppressed [ 267.530666][ T9433] binder: 9432:9433 got transaction to invalid handle, 1 [ 267.532967][ T9433] binder: 9433:9432 cannot find target node [ 267.533965][ T9433] binder: 9432:9433 transaction call to 0:0 failed 114/29201/-22, size 72-24 line 3062 [ 267.551790][ T9433] binder: 9432:9433 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 267.553977][ T9433] binder: 9433 RLIMIT_NICE not set [ 268.352622][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 268.524107][ T9491] autofs4:pid:9491:autofs_fill_super: called with bogus options [ 268.636312][ T9498] netlink: 48 bytes leftover after parsing attributes in process `syz.0.888'. [ 270.399018][ T9537] binder: 9535:9537 ioctl c0306201 0 returned -14 [ 270.402369][ T9538] autofs4:pid:9538:autofs_fill_super: called with bogus options [ 270.404980][ T9537] binder: 9535:9537 got transaction to invalid handle, 1 [ 270.412893][ T9537] binder: 9537:9535 cannot find target node [ 270.416228][ T9537] binder: 9535:9537 transaction call to 0:0 failed 118/29201/-22, size 72-24 line 3062 [ 270.418256][ T9537] binder: 9535:9537 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 270.430020][ T9537] binder: 9537 RLIMIT_NICE not set [ 270.855560][ T9556] netlink: 48 bytes leftover after parsing attributes in process `syz.7.902'. [ 270.898303][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.0.904'. [ 271.045174][ T9580] loop7: detected capacity change from 0 to 512 [ 271.080431][ T9580] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 271.161301][ T7555] EXT4-fs (loop7): unmounting filesystem. [ 271.190864][ T9596] autofs4:pid:9596:autofs_fill_super: called with bogus options [ 271.260809][ T3901] binder: undelivered TRANSACTION_ERROR: 29201 [ 271.368879][ T9609] Cannot find add_set index 0 as target [ 271.796447][ T9626] netlink: 48 bytes leftover after parsing attributes in process `syz.2.917'. [ 272.217167][ T9662] binder: 9661:9662 ioctl c0306201 0 returned -14 [ 272.222653][ T9662] binder: 9661:9662 got transaction to invalid handle, 1 [ 272.223802][ T9662] binder: 9662:9661 cannot find target node [ 272.224697][ T9662] binder: 9661:9662 transaction call to 0:0 failed 122/29201/-22, size 72-24 line 3062 [ 272.234712][ T9662] binder: 9661:9662 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 272.243104][ T9662] binder: 9662 RLIMIT_NICE not set [ 272.298184][ T9669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.927'. [ 272.330734][ T9669] bridge1: port 1(erspan0) entered blocking state [ 272.334834][ T9669] bridge1: port 1(erspan0) entered disabled state [ 272.340112][ T9669] device erspan0 entered promiscuous mode [ 272.345874][ T9669] bridge1: port 1(erspan0) entered blocking state [ 272.346809][ T9669] bridge1: port 1(erspan0) entered forwarding state [ 272.379044][ T9674] loop7: detected capacity change from 0 to 256 [ 272.477110][ T9678] netlink: 48 bytes leftover after parsing attributes in process `syz.0.929'. [ 273.026694][ T3901] binder: undelivered TRANSACTION_ERROR: 29201 [ 273.202064][ T9727] IPv6: ADDRCONF(NETDEV_CHANGE): bridge1: link becomes ready [ 273.269518][ T9732] netlink: 'syz.2.940': attribute type 6 has an invalid length. [ 273.436293][ T9741] netlink: 48 bytes leftover after parsing attributes in process `syz.2.942'. [ 273.564187][ T9747] device syzkaller0 entered promiscuous mode [ 274.297914][ T9778] loop2: detected capacity change from 0 to 512 [ 274.312275][ T9778] EXT4-fs: Ignoring removed orlov option [ 274.344192][ T9778] EXT4-fs (loop2): corrupt root inode, run e2fsck [ 274.345330][ T9778] EXT4-fs (loop2): mount failed [ 274.479708][ T9788] netlink: 48 bytes leftover after parsing attributes in process `syz.0.954'. [ 274.589227][ T9798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.955'. [ 274.590894][ T9798] netlink: 20 bytes leftover after parsing attributes in process `syz.0.955'. [ 274.844533][ T9819] netlink: set zone limit has 8 unknown bytes [ 275.318965][ T9841] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 275.321889][ T9841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.323095][ T9841] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.435859][ T9849] netlink: 48 bytes leftover after parsing attributes in process `syz.2.966'. [ 275.475193][ T9856] loop9: detected capacity change from 0 to 512 [ 275.484996][ T9856] EXT4-fs: inline encryption not supported [ 275.498719][ T9856] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 275.580682][ T9866] binder: 9862:9866 got transaction to invalid handle, 1 [ 275.585453][ T9866] binder: 9866:9862 cannot find target node [ 275.586627][ T9866] binder: 9862:9866 transaction call to 0:0 failed 126/29201/-22, size 72-24 line 3062 [ 275.588736][ T9856] EXT4-fs (loop9): 1 truncate cleaned up [ 275.589769][ T9856] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 275.602290][ T9866] binder: 9862:9866 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 275.604664][ T9866] binder: 9866 RLIMIT_NICE not set [ 275.652714][ T7548] EXT4-fs (loop9): unmounting filesystem. [ 276.580763][ T3901] binder: undelivered TRANSACTION_ERROR: 29201 [ 276.696371][ T9921] netlink: 48 bytes leftover after parsing attributes in process `syz.0.979'. [ 276.793501][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.980'. [ 277.204669][ T9958] netlink: 'syz.7.986': attribute type 13 has an invalid length. [ 277.217585][ T9958] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 277.230895][ T9958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.232586][ T9958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.471437][ T9971] loop7: detected capacity change from 0 to 512 [ 277.487220][ T9971] ext3: Unknown parameter 'euid>00000000000000000000' [ 277.585180][ T5473] nci: nci_ntf_packet: unknown ntf opcode 0x32 [ 277.756758][ T9988] binder: 9987:9988 got transaction to invalid handle, 1 [ 277.758045][ T9988] binder: 9988:9987 cannot find target node [ 277.759194][ T9988] binder: 9987:9988 transaction call to 0:0 failed 130/29201/-22, size 72-24 line 3062 [ 277.771314][ T9988] binder: 9987:9988 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 277.773927][ T9988] binder: 9988 RLIMIT_NICE not set [ 278.186459][T10008] tipc: Can't bind to reserved service type 0 [ 278.305845][T10012] netlink: 48 bytes leftover after parsing attributes in process `syz.9.991'. [ 278.571452][ T4354] binder: undelivered TRANSACTION_ERROR: 29201 [ 279.041768][T10038] fuse: Bad value for 'fd' [ 279.073888][T10043] autofs4:pid:10043:autofs_fill_super: called with bogus options [ 279.130096][T10051] fuse: Bad value for 'fd' [ 280.315401][ T4306] Bluetooth: hci7: command 0x0406 tx timeout [ 280.469122][ T9971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.513417][T10098] loop2: detected capacity change from 0 to 1024 [ 280.514835][T10098] EXT4-fs: Ignoring removed bh option [ 280.929610][T10112] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1010'. [ 280.945617][T10098] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 280.956605][T10098] overlayfs: missing 'lowerdir' [ 280.958157][T10098] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.1008: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 280.977867][T10098] EXT4-fs (loop2): Remounting filesystem read-only [ 281.015502][ T6411] EXT4-fs (loop2): unmounting filesystem. [ 281.071144][T10119] loop7: detected capacity change from 0 to 512 [ 281.072700][T10119] EXT4-fs: inline encryption not supported [ 281.083546][T10119] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 281.113047][T10119] EXT4-fs error (device loop7): ext4_iget_extra_inode:4763: inode #15: comm syz.7.1012: corrupted in-inode xattr [ 281.115611][T10119] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.1012: couldn't read orphan inode 15 (err -117) [ 281.121789][T10119] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 281.177701][ T7555] EXT4-fs (loop7): unmounting filesystem. [ 281.209252][T10129] loop7: detected capacity change from 0 to 128 [ 281.224767][T10129] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 281.249240][ T7555] EXT4-fs (loop7): unmounting filesystem. [ 281.318611][T10135] binder: 10133:10135 got transaction to invalid handle, 1 [ 281.324589][T10135] binder: 10135:10133 cannot find target node [ 281.333247][T10135] binder: 10133:10135 transaction call to 0:0 failed 134/29201/-22, size 72-24 line 3062 [ 281.347819][T10135] binder: 10133:10135 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 281.360637][T10135] binder: 10135 RLIMIT_NICE not set [ 281.688105][T10159] autofs4:pid:10159:autofs_fill_super: called with bogus options [ 282.134554][ T4354] binder: undelivered TRANSACTION_ERROR: 29201 [ 282.231309][T10179] fuse: Bad value for 'fd' [ 282.435035][T10188] binder: 10182:10188 tried to acquire reference to desc 0, got 1 instead [ 282.438104][T10188] binder: 10182:10188 ioctl c0306201 0 returned -14 [ 282.455853][T10187] loop9: detected capacity change from 0 to 1024 [ 282.457231][T10187] EXT4-fs: Ignoring removed bh option [ 282.459711][T10188] binder: 10182:10188 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 282.488742][T10188] binder: 10188 RLIMIT_NICE not set [ 282.506172][T10192] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1024'. [ 282.513706][T10187] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 282.518972][T10187] overlayfs: missing 'lowerdir' [ 282.534388][T10187] EXT4-fs error (device loop9): ext4_find_dest_de:2115: inode #12: block 7: comm syz.9.1022: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 282.541525][T10187] EXT4-fs (loop9): Remounting filesystem read-only [ 282.561142][ T7548] EXT4-fs (loop9): unmounting filesystem. [ 282.612372][T10203] loop9: detected capacity change from 0 to 512 [ 282.635657][T10203] EXT4-fs: inline encryption not supported [ 282.704774][T10203] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 282.713241][T10203] EXT4-fs error (device loop9): ext4_iget_extra_inode:4763: inode #15: comm syz.9.1025: corrupted in-inode xattr [ 282.722381][T10203] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.1025: couldn't read orphan inode 15 (err -117) [ 282.725497][T10203] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 283.064514][ T7548] EXT4-fs (loop9): unmounting filesystem. [ 283.193996][T10216] netlink: 'syz.2.1029': attribute type 1 has an invalid length. [ 284.462918][T10216] 8021q: adding VLAN 0 to HW filter on device bond2 [ 284.466890][T10216] bond1: (slave bond2): making interface the new active one [ 284.468175][T10216] bond1: (slave bond2): Enslaving as an active interface with an up link [ 284.499557][T10232] fuse: Bad value for 'fd' [ 284.527569][T10216] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 284.701739][T10245] overlayfs: failed to clone upperpath [ 284.957524][T10248] loop2: detected capacity change from 0 to 512 [ 284.963245][T10250] loop9: detected capacity change from 0 to 1024 [ 284.983655][T10250] EXT4-fs: Ignoring removed bh option [ 285.018148][T10248] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 285.022474][T10250] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 285.034833][T10248] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.1036: attempt to clear invalid blocks 1024 len 1 [ 285.040597][T10250] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 285.042929][T10248] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1036: invalid indirect mapped block 1819239214 (level 0) [ 285.052453][T10250] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 285.054814][T10248] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1036: invalid indirect mapped block 33554432 (level 2) [ 285.068042][T10248] EXT4-fs (loop2): 1 truncate cleaned up [ 285.073329][T10250] EXT4-fs error (device loop9): ext4_find_dest_de:2115: inode #12: block 7: comm syz.9.1037: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 285.079098][T10250] EXT4-fs (loop9): Remounting filesystem read-only [ 285.080538][T10248] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 285.149082][ T7548] EXT4-fs (loop9): unmounting filesystem. [ 285.223754][ T6411] EXT4-fs (loop2): unmounting filesystem. [ 286.123607][T10293] loop2: detected capacity change from 0 to 256 [ 286.142354][T10293] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 286.145711][T10295] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1038'. [ 286.154017][T10293] FAT-fs (loop2): Filesystem has been set read-only [ 287.572296][T10320] netlink: 'syz.9.1048': attribute type 1 has an invalid length. [ 287.655660][ T4306] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 287.658394][ T4306] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 287.660358][ T4306] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 287.662467][ T4306] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 287.666411][ T4306] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 287.667698][ T4306] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 287.697645][T10320] 8021q: adding VLAN 0 to HW filter on device bond3 [ 287.699430][T10320] bond2: (slave bond3): making interface the new active one [ 287.962202][T10320] bond2: (slave bond3): Enslaving as an active interface with an up link [ 288.685105][T10329] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 288.706418][T10341] binder: 10340:10341 tried to acquire reference to desc 0, got 1 instead [ 288.794601][T10344] binder: 10340:10344 ioctl c0306201 0 returned -14 [ 288.804243][T10341] binder: 10340:10341 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 288.815414][T10341] binder: 10341 RLIMIT_NICE not set [ 289.613761][T10374] device syzkaller0 entered promiscuous mode [ 289.616883][T10378] tipc: Started in network mode [ 289.619293][T10378] tipc: Node identity 5e2162bc34e9, cluster identity 4711 [ 289.621464][T10378] tipc: Enabled bearer , priority 0 [ 289.724407][ T4311] Bluetooth: hci2: command 0x0409 tx timeout [ 289.759241][ T5291] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.765032][T10351] tipc: Resetting bearer [ 290.019109][T10391] loop2: detected capacity change from 0 to 1024 [ 290.033386][T10391] EXT4-fs: Ignoring removed bh option [ 290.064497][T10391] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 290.099577][T10391] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 290.101328][T10391] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 290.103219][T10391] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.1061: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 290.108620][T10351] tipc: Disabling bearer [ 290.110907][T10391] EXT4-fs (loop2): Remounting filesystem read-only [ 290.122728][ T6411] EXT4-fs (loop2): unmounting filesystem. [ 290.137456][ T5291] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.203431][T10398] overlayfs: failed to clone upperpath [ 290.567464][ T5291] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.571375][T10325] chnl_net:caif_netlink_parms(): no params data found [ 290.589321][T10325] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.590657][T10325] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.592305][T10325] device bridge_slave_0 entered promiscuous mode [ 290.594566][T10325] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.596179][T10325] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.597795][T10325] device bridge_slave_1 entered promiscuous mode [ 290.647740][ T5291] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.651567][T10325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.653944][T10325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.661206][T10325] team0: Port device team_slave_0 added [ 290.663417][T10325] team0: Port device team_slave_1 added [ 290.669101][T10325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.670247][T10325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.674604][T10325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.677158][T10325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.678306][T10325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.682442][T10325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.727553][T10325] device hsr_slave_0 entered promiscuous mode [ 290.765402][T10325] device hsr_slave_1 entered promiscuous mode [ 290.805276][T10325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.806593][T10325] Cannot create hsr debugfs directory [ 291.054970][T10432] device syzkaller0 entered promiscuous mode [ 291.058595][T10432] tipc: Enabled bearer , priority 0 [ 291.897571][ T4311] Bluetooth: hci2: command 0x041b tx timeout [ 291.898621][ T4311] Bluetooth: hci7: command 0x0406 tx timeout [ 292.255125][ T3901] tipc: Node number set to 1542782720 [ 292.261176][T10429] tipc: Resetting bearer [ 292.346425][T10429] tipc: Disabling bearer [ 292.609913][T10455] netlink: 'syz.0.1066': attribute type 1 has an invalid length. [ 292.611207][T10450] loop2: detected capacity change from 0 to 256 [ 292.708801][T10455] 8021q: adding VLAN 0 to HW filter on device bond2 [ 292.718481][T10463] binder: 10462:10463 tried to acquire reference to desc 0, got 1 instead [ 292.720080][T10463] binder: 10462:10463 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 292.721300][T10455] bond1: (slave bond2): making interface the new active one [ 292.724139][T10463] binder: 10463 RLIMIT_NICE not set [ 292.736726][T10455] bond1: (slave bond2): Enslaving as an active interface with an up link [ 292.981830][T10472] autofs4:pid:10472:autofs_fill_super: called with bogus options [ 293.160406][T10461] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 293.886398][T10499] overlayfs: failed to clone upperpath [ 293.892274][T10499] autofs4:pid:10499:autofs_fill_super: called with bogus options [ 293.910247][ C1] Unknown status report in ack skb [ 293.915283][ T4306] Bluetooth: hci2: command 0x040f tx timeout [ 294.005720][T10515] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1078'. [ 294.052634][ T3994] netdevsim netdevsim12 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.057997][ T3994] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.061133][ T3994] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.064868][ T3994] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.068815][ T3994] netdevsim netdevsim6 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.071452][ T3994] netdevsim netdevsim8 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.073770][ T3994] netdevsim netdevsim8 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.078845][ T3994] netdevsim netdevsim5 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.080296][ T3994] netdevsim netdevsim5 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.082009][ T3994] netdevsim netdevsim5 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.083519][ T3994] netdevsim netdevsim5 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.085155][ T3994] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.086810][ T3994] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.088422][ T3994] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.090027][ T3994] netdevsim netdevsim3 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.091558][ T3994] netdevsim netdevsim4 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.093180][ T3994] netdevsim netdevsim4 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.094734][ T3994] netdevsim netdevsim4 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.099896][ T3994] netdevsim netdevsim4 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.101505][ T3994] netdevsim netdevsim1 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.103008][ T3994] netdevsim netdevsim1 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.104587][ T3994] netdevsim netdevsim1 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.107369][ T3994] netdevsim netdevsim1 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.121252][T10519] device syzkaller0 entered promiscuous mode [ 294.126141][T10519] tipc: Started in network mode [ 294.127125][T10519] tipc: Node identity 6efce096fa8c, cluster identity 4711 [ 294.128600][T10519] tipc: Enabled bearer , priority 0 [ 294.134726][T10518] tipc: Resetting bearer [ 294.226608][T10518] tipc: Disabling bearer [ 294.555596][T10536] loop9: detected capacity change from 0 to 256 [ 294.594299][T10534] binder: 10533:10534 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 294.601746][T10534] binder: 10533:10534 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 294.622405][T10539] device syzkaller0 entered promiscuous mode [ 294.624869][T10534] binder: 10534 RLIMIT_NICE not set [ 294.633334][T10539] tipc: Enabled bearer , priority 0 [ 294.644894][T10538] tipc: Resetting bearer [ 294.736764][T10538] tipc: Disabling bearer [ 294.877985][T10543] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1088'. [ 295.156299][T10325] netdevsim netdevsim8 eth9 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.168384][T10545] netlink: 'syz.9.1089': attribute type 1 has an invalid length. [ 295.183008][T10546] 8021q: adding VLAN 0 to HW filter on device bond5 [ 295.186041][T10546] bond4: (slave bond5): making interface the new active one [ 295.187676][T10546] bond4: (slave bond5): Enslaving as an active interface with an up link [ 295.189369][T10548] tipc: Enabling of bearer rejected, failed to enable media [ 295.221772][ T5291] device hsr_slave_0 left promiscuous mode [ 295.238662][ T5291] device hsr_slave_1 left promiscuous mode [ 295.355407][ T5291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.357254][ T5291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.361815][ T5291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.363203][ T5291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.365531][ T5291] device bridge_slave_1 left promiscuous mode [ 295.366518][ T5291] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.561904][T10561] autofs4:pid:10561:autofs_fill_super: called with bogus options [ 295.572550][ T5291] device bridge_slave_0 left promiscuous mode [ 295.573750][ T5291] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.761680][T10574] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1099'. [ 295.795466][ T5291] device veth1_macvtap left promiscuous mode [ 295.796885][ T5291] device veth0_macvtap left promiscuous mode [ 295.798058][ T5291] device veth1_vlan left promiscuous mode [ 295.799154][ T5291] device veth0_vlan left promiscuous mode [ 296.005416][ T4311] Bluetooth: hci2: command 0x0419 tx timeout [ 298.168700][ T5291] team0 (unregistering): Port device team_slave_1 removed [ 298.326221][ T5291] team0 (unregistering): Port device team_slave_0 removed [ 298.485610][ T5291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.687534][ T5291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.157030][ T5291] bond0 (unregistering): Released all slaves [ 300.504723][T10325] netdevsim netdevsim8 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.542841][T10594] tipc: Enabling of bearer rejected, failed to enable media [ 300.583832][T10609] netlink: 'syz.7.1103': attribute type 1 has an invalid length. [ 300.621070][T10609] 8021q: adding VLAN 0 to HW filter on device bond4 [ 300.623097][T10609] bond3: (slave bond4): making interface the new active one [ 300.624595][T10609] bond3: (slave bond4): Enslaving as an active interface with an up link [ 300.669181][T10615] loop2: detected capacity change from 0 to 512 [ 300.670649][T10615] EXT4-fs: inline encryption not supported [ 300.679148][T10615] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 300.693832][T10615] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.1106: corrupted in-inode xattr [ 300.699791][T10615] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1106: couldn't read orphan inode 15 (err -117) [ 300.704962][T10615] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 301.148692][T10628] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1110'. [ 301.212335][T10325] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 301.298403][T10325] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 301.600459][T10325] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 301.668407][T10645] Unknown status report in ack skb [ 301.711965][T10325] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 302.083159][T10660] tipc: Enabling of bearer rejected, failed to enable media [ 302.118728][T10325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.132004][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.133795][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.141046][T10664] loop9: detected capacity change from 0 to 1024 [ 302.141120][T10325] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.154613][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 302.156534][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 302.157999][ T5473] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.159284][ T5473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.173357][T10664] EXT4-fs: Ignoring removed bh option [ 302.197309][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 302.202837][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 302.204774][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.207807][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.209081][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.218351][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 302.220078][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 302.227111][T10664] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 302.246104][T10664] overlayfs: missing 'lowerdir' [ 302.248601][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 302.262103][T10664] EXT4-fs error (device loop9): ext4_find_dest_de:2115: inode #12: block 7: comm syz.9.1116: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 302.269017][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 302.279385][T10664] EXT4-fs (loop9): Remounting filesystem read-only [ 302.298551][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 302.300658][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 302.307640][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 302.314480][ T7548] EXT4-fs (loop9): unmounting filesystem. [ 302.319397][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 302.321319][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 302.328909][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 302.335930][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 302.342956][T10325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 302.362419][ T6411] EXT4-fs (loop2): unmounting filesystem. [ 302.404485][T10677] device syzkaller0 entered promiscuous mode [ 302.420770][T10677] tipc: Enabled bearer , priority 0 [ 302.433423][T10673] tipc: Resetting bearer [ 302.513914][T10673] tipc: Disabling bearer [ 302.583613][T10693] binder: 10692:10693 tried to acquire reference to desc 0, got 1 instead [ 302.585492][T10693] binder: 10692:10693 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 302.587621][T10693] binder: 10693 RLIMIT_NICE not set [ 302.620246][T10325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.659946][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 302.662269][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 302.993060][T10699] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1124'. [ 303.063460][ C1] Unknown status report in ack skb [ 303.161963][T10325] device veth0_vlan entered promiscuous mode [ 303.164925][T10325] device veth1_vlan entered promiscuous mode [ 303.170191][T10728] loop9: detected capacity change from 0 to 1024 [ 303.188609][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 303.190399][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.191999][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 303.193605][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.199412][T10728] EXT4-fs: Ignoring removed bh option [ 303.200972][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 303.203062][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 303.211039][ T5473] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 303.220120][T10325] device veth0_macvtap entered promiscuous mode [ 303.236255][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 303.237885][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 303.239859][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 303.244918][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 303.260103][T10325] device veth1_macvtap entered promiscuous mode [ 303.264426][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.269910][T10728] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 303.274179][T10728] overlayfs: missing 'workdir' [ 303.285857][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.287553][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.289255][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.290832][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.294812][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.300896][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 303.309039][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.315703][T10728] EXT4-fs error (device loop9): ext4_find_dest_de:2115: inode #12: block 7: comm syz.9.1127: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 303.321597][T10728] EXT4-fs (loop9): Remounting filesystem read-only [ 303.326666][T10325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.328273][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 303.329821][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 303.331700][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.342913][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.344685][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.353401][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.365960][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.367570][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.369252][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.370934][T10325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.379276][T10325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.382880][ T7548] EXT4-fs (loop9): unmounting filesystem. [ 303.414990][T10325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.418848][T10325] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.421764][T10325] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.423316][T10325] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.449402][T10325] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.459937][T10746] loop9: detected capacity change from 0 to 512 [ 303.461443][T10746] EXT4-fs: inline encryption not supported [ 303.477544][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 303.479308][ T4558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.493678][T10746] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 303.523726][T10746] EXT4-fs error (device loop9): ext4_iget_extra_inode:4763: inode #15: comm syz.9.1128: corrupted in-inode xattr [ 303.544111][T10746] EXT4-fs error (device loop9): ext4_orphan_get:1410: comm syz.9.1128: couldn't read orphan inode 15 (err -117) [ 303.551209][T10746] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 303.620661][ T5291] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.622327][ T5291] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.623965][ T5291] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 303.934879][ T5991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.937534][ T5991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.941072][ T5991] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 304.038662][T10771] loop2: detected capacity change from 0 to 256 [ 304.105884][T10771] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 304.108157][T10771] FAT-fs (loop2): Filesystem has been set read-only [ 304.322076][T10789] loop2: detected capacity change from 0 to 1024 [ 304.330549][T10789] EXT4-fs: Ignoring removed bh option [ 304.387514][ T7548] EXT4-fs (loop9): unmounting filesystem. [ 304.390029][T10789] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 304.418711][T10789] overlayfs: missing 'workdir' [ 304.424039][T10789] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.1138: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 304.493089][T10798] binder: 10795:10798 tried to acquire reference to desc 0, got 1 instead [ 304.494877][T10798] binder: 10795:10798 got transaction with invalid data ptr [ 304.508002][T10789] EXT4-fs (loop2): Remounting filesystem read-only [ 304.515576][T10798] binder: 10795:10798 transaction call to 10795:0 failed 157/29201/-14, size 0-24 line 3350 [ 304.517730][T10798] binder: 10795:10798 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 304.519995][T10798] binder: 10798 RLIMIT_NICE not set [ 304.531006][ T6411] EXT4-fs (loop2): unmounting filesystem. [ 304.962302][T10822] netlink: 'syz.9.1144': attribute type 1 has an invalid length. [ 304.980193][T10822] 8021q: adding VLAN 0 to HW filter on device bond7 [ 304.982738][T10822] bond6: (slave bond7): making interface the new active one [ 304.984253][T10822] bond6: (slave bond7): Enslaving as an active interface with an up link [ 305.030918][T10830] device syzkaller0 entered promiscuous mode [ 305.545818][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 305.561133][ C1] Unknown status report in ack skb [ 305.575387][T10866] loop7: detected capacity change from 0 to 512 [ 305.599977][T10866] EXT4-fs: inline encryption not supported [ 305.601346][T10866] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 305.612399][T10866] EXT4-fs error (device loop7): ext4_iget_extra_inode:4763: inode #15: comm syz.7.1152: corrupted in-inode xattr [ 305.622291][T10866] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.1152: couldn't read orphan inode 15 (err -117) [ 305.626197][T10871] loop8: detected capacity change from 0 to 1024 [ 305.627623][T10871] EXT4-fs: Ignoring removed bh option [ 305.628852][T10866] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 305.710153][T10871] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 305.719318][T10871] overlayfs: missing 'workdir' [ 305.721690][T10871] EXT4-fs error (device loop8): ext4_find_dest_de:2115: inode #12: block 7: comm syz.8.1153: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 305.733755][T10871] EXT4-fs (loop8): Remounting filesystem read-only [ 305.810855][T10325] EXT4-fs (loop8): unmounting filesystem. [ 305.840225][T10886] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1156'. [ 305.938609][T10889] autofs4:pid:10889:autofs_fill_super: called with bogus options [ 306.206336][T10892] loop8: detected capacity change from 0 to 256 [ 306.234077][T10895] device syzkaller0 entered promiscuous mode [ 306.403435][T10910] tmpfs: Unknown parameter 'usrquota' [ 306.793082][T10919] binder: 10918:10919 tried to acquire reference to desc 0, got 1 instead [ 306.807519][T10919] binder: 10918:10919 got transaction with invalid data ptr [ 306.808895][T10919] binder: 10918:10919 transaction call to 10918:0 failed 162/29201/-14, size 0-24 line 3350 [ 306.817632][T10919] binder: 10918:10919 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 306.986375][T10946] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1171'. [ 307.023745][ T7555] EXT4-fs (loop7): unmounting filesystem. [ 307.057648][T10953] loop7: detected capacity change from 0 to 256 [ 307.303892][T10971] autofs4:pid:10971:autofs_fill_super: called with bogus options [ 307.530800][ C1] Unknown status report in ack skb [ 307.550558][T10966] tipc: Enabling of bearer rejected, failed to enable media [ 307.595099][T10981] device syzkaller0 entered promiscuous mode [ 307.602837][T10981] tipc: Started in network mode [ 307.607029][T10981] tipc: Node identity 325d32d40c2a, cluster identity 4711 [ 307.610583][T10981] tipc: Enabled bearer , priority 0 [ 307.613233][T10980] tipc: Resetting bearer [ 307.625613][ T5093] binder: undelivered TRANSACTION_ERROR: 29201 [ 307.679191][T10993] loop2: detected capacity change from 0 to 256 [ 307.696495][T10980] tipc: Disabling bearer [ 308.167342][T11012] netlink: 'syz.7.1188': attribute type 1 has an invalid length. [ 308.206248][T11012] 8021q: adding VLAN 0 to HW filter on device bond6 [ 308.208110][T11012] bond5: (slave bond6): making interface the new active one [ 308.209705][T11012] bond5: (slave bond6): Enslaving as an active interface with an up link [ 308.213411][T11012] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1188'. [ 308.216888][T11012] 8021q: adding VLAN 0 to HW filter on device bond5 [ 308.634449][T11036] binder_user_error: 1 callbacks suppressed [ 308.634459][T11036] binder: 11035:11036 tried to acquire reference to desc 0, got 1 instead [ 308.637668][T11036] binder: 11035:11036 got transaction with invalid data ptr [ 308.640370][T11036] binder: 11035:11036 transaction call to 11035:0 failed 167/29201/-14, size 0-24 line 3350 [ 308.649399][T11036] binder: 11035:11036 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 308.653759][T11036] binder: 11036 RLIMIT_NICE not set [ 309.113213][T11057] loop9: detected capacity change from 0 to 256 [ 309.370525][T11079] autofs4:pid:11079:autofs_fill_super: called with bogus options [ 309.579376][ T6897] binder: undelivered TRANSACTION_ERROR: 29201 [ 309.618115][T11084] loop2: detected capacity change from 0 to 256 [ 309.666737][T11089] netlink: 'syz.2.1202': attribute type 1 has an invalid length. [ 309.707954][T11089] 8021q: adding VLAN 0 to HW filter on device bond4 [ 309.711059][T11089] bond3: (slave bond4): making interface the new active one [ 309.712631][T11089] bond3: (slave bond4): Enslaving as an active interface with an up link [ 309.719595][T11089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1202'. [ 309.726193][T11089] 8021q: adding VLAN 0 to HW filter on device bond3 [ 309.804265][T11107] loop2: detected capacity change from 0 to 512 [ 309.811057][T11107] EXT4-fs: inline encryption not supported [ 309.813025][T11107] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 309.824865][T11107] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.1205: corrupted in-inode xattr [ 309.833289][T11107] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.1205: couldn't read orphan inode 15 (err -117) [ 309.839732][T11107] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 310.238348][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.239864][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.724233][T11054] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 310.893417][T11129] fuse: Bad value for 'fd' [ 310.979222][ T6411] EXT4-fs (loop2): unmounting filesystem. [ 311.071258][ C0] Unknown status report in ack skb [ 311.199121][ C1] ------------[ cut here ]------------ [ 311.200096][ C1] WARNING: CPU: 1 PID: 11137 at net/mac80211/tx.c:4961 __ieee80211_beacon_get+0xf78/0x12fc [ 311.201643][ C1] Modules linked in: [ 311.202274][ C1] CPU: 1 PID: 11137 Comm: syz.8.1208 Not tainted syzkaller #0 [ 311.203465][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 311.205158][ C1] pstate: 42400005 (nZcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 311.206478][ C1] pc : __ieee80211_beacon_get+0xf78/0x12fc [ 311.207449][ C1] lr : __ieee80211_beacon_get+0xf78/0x12fc [ 311.208626][ C1] sp : ffff800008017ae0 [ 311.209427][ C1] x29: ffff800008017b20 x28: ffff0000e1080e80 x27: ffffffffffffe520 [ 311.210988][ C1] x26: 00000000ffffffff x25: ffff0000f38dd000 x24: ffff0000efac0258 [ 311.212580][ C1] x23: dfff800000000000 x22: ffff800008017b8c x21: ffff0000f3a3a228 [ 311.214157][ C1] x20: 0000000000000000 x19: ffff0000f3a3a760 x18: 0000000000000000 [ 311.215624][ C1] x17: 00000000ffff0000 x16: ffff8000082dbd3c x15: 0000000000000000 [ 311.217079][ C1] x14: 0000000000000007 x13: 0000000000ff0100 x12: ffff800017c5d008 [ 311.218491][ C1] x11: ff00800011462380 x10: 0000000000000000 x9 : ffff800011462380 [ 311.219937][ C1] x8 : ffff0000d2739c00 x7 : 0000000000000000 x6 : 0000000000000000 [ 311.221412][ C1] x5 : 0000000000000000 x4 : 0000000000000000 x3 : ffff80001146165c [ 311.222910][ C1] x2 : 000000000000000a x1 : 0000000000000000 x0 : 0000000000000000 [ 311.224303][ C1] Call trace: [ 311.224885][ C1] __ieee80211_beacon_get+0xf78/0x12fc [ 311.226014][ C1] ieee80211_beacon_get_tim+0x70/0x44c [ 311.227098][ C1] mac80211_hwsim_beacon_tx+0x1e4/0x8fc [ 311.228156][ C1] __iterate_interfaces+0x200/0x47c [ 311.229128][ C1] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 311.230488][ C1] mac80211_hwsim_beacon+0xc8/0x1b0 [ 311.231503][ C1] __hrtimer_run_queues+0x444/0xc58 [ 311.232503][ C1] hrtimer_run_softirq+0x164/0x408 [ 311.233466][ C1] handle_softirqs+0x318/0xc90 [ 311.234356][ C1] __do_softirq+0x14/0x20 [ 311.235074][ C1] ____do_softirq+0x14/0x20 [ 311.235849][ C1] call_on_irq_stack+0x30/0x48 [ 311.236692][ C1] do_softirq_own_stack+0x20/0x2c [ 311.237532][ C1] __irq_exit_rcu+0x23c/0x430 [ 311.238346][ C1] irq_exit_rcu+0x14/0x84 [ 311.239103][ C1] el1_interrupt+0x38/0x54 [ 311.239870][ C1] el1h_64_irq_handler+0x18/0x24 [ 311.240729][ C1] el1h_64_irq+0x64/0x68 [ 311.241458][ C1] _raw_spin_unlock_irqrestore+0x58/0xac [ 311.242452][ C1] __skb_try_recv_datagram+0x148/0x40c [ 311.243387][ C1] __unix_dgram_recvmsg+0x238/0xb20 [ 311.244247][ C1] unix_dgram_recvmsg+0xd0/0xe8 [ 311.245067][ C1] ____sys_recvmsg+0x270/0x754 [ 311.245882][ C1] do_recvmmsg+0x36c/0x9d8 [ 311.246630][ C1] __arm64_sys_recvmmsg+0x184/0x244 [ 311.247541][ C1] invoke_syscall+0x98/0x290 [ 311.248337][ C1] el0_svc_common+0x13c/0x258 [ 311.249159][ C1] do_el0_svc+0x5c/0x134 [ 311.249862][ C1] el0_svc+0x58/0x128 [ 311.250534][ C1] el0t_64_sync_handler+0x84/0xf0 [ 311.251367][ C1] el0t_64_sync+0x18c/0x190 [ 311.252100][ C1] irq event stamp: 109047 [ 311.252900][ C1] hardirqs last enabled at (109046): [] _raw_spin_unlock_irqrestore+0x48/0xac [ 311.254810][ C1] hardirqs last disabled at (109047): [] el1_dbg+0x24/0x80 [ 311.256272][ C1] softirqs last enabled at (106974): [] handle_softirqs+0xb1c/0xc90 [ 311.257979][ C1] softirqs last disabled at (108953): [] __do_softirq+0x14/0x20 [ 311.259603][ C1] ---[ end trace 0000000000000000 ]---