last executing test programs: 4m18.979606001s ago: executing program 1 (id=109): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet(0x2, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x1000040, &(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0xee00, @ANYRES64, @ANYRESOCT, @ANYRES16, @ANYBLOB="2efa45d07f38b38f65c3302f160096b93e33bc2a39e75ce2bf5e7ceeda077daed08c407db98b8f9363b0808034743b787774eea61eecd30de8ebd8e6b9fbec2cd2d3771434ab686ac196100673d68102a8f2df971bfd99da8b44007a2b1d022dd8d381aff46d72eb53d169ec810ac95ba6cada7eff252fa4be6d3cbd2a0c9ee16a7d4c5af1940e8b5b207d1f227e8ef61021c7380344d113614afdf3657ab8284ccca68a2ac11d056ad98b63d8df8880253e38f31908cfe4809f8bf65e5623ff8f3f6202d2369daa1c9bbfdfd212ae354f39c2423a2c0865f74a4ce086da4d9918f2e185", @ANYRESOCT=r0], 0x1, 0x206, &(0x7f0000000480)="$eJzs3cFqE0EYAOA/MW0S8dCbIAgrHvRU1CeoSAUxIFRyUPAg2JM5pZfUS/oYgk/ge/kA0lMuMhJ3k03SsNZCNrV83yX/zj+TmdllN7nkT4rcj7tfo9NpRPMgDmLSiL1oxsxZAAA3ySSl+Jlys7YP37a7JgBgs9Z9/q/4VfOSAIANe/vu/evnvd7hUZZ1Is7PRv1RP3/N8y9f9Q6fZH/slaPOR6P+rXn+abb63WGa34nbRf5ZPj6bp3cjor8bjx/m+WnuxZtetjy+HZ82vHcAAAAAAAAAAAAAAAAAAAAAANiW+5HNrK3vs7+/mu8W+fxooT7QSv2eVtxrFYdleaA0rmNTAAAAAAAAAAAAAAAAAAAA8J85Of3y+eNgcDwsg3ZELLa01vRZDXaLtzseNoqoovN1Cpoxb+kWK7/U8H/qvBw0ilO02Q1211/cywTRui5X56pBVsNc3crTm9I0WH8XzMpiVN5N1bM/Orrq4icppcH3B8OT00iVnctnRLuWJxEAAAAAAAAAAAAAAAAAALDwq+8LOmXYrHVRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCz8v//p8HFlspgHBF34q+dZ3PtRGdp7jTewoYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4kX4HAAD//yhHHc4=") r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x8, 0x0) r5 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000400)=@rc={0xa, @none}, 0x80, 0x0}, 0x0) ioctl$X86_IOC_RDMSR_REGS(r4, 0xc02063a0, &(0x7f0000000240)=[0x1, 0x4, 0x5, 0xf, 0x0, 0x7ff, 0x7f, 0x80000000]) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r6, r6) keyctl$setperm(0x5, r6, 0x30925) keyctl$KEYCTL_MOVE(0x1e, r6, 0x0, 0x0, 0x1) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000140)={0x4, 0x5}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3c}, 0x1c) 4m16.594571782s ago: executing program 1 (id=115): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_open_dev$usbfs(0x0, 0x4, 0x2581) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x80005520, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) write(r4, &(0x7f0000000400)='wusb3801 ', 0x9) 4m13.386481617s ago: executing program 1 (id=120): syz_mount_image$vfat(&(0x7f0000001900), &(0x7f0000001ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x2aa, &(0x7f0000001e00)="$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") socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = add_key(&(0x7f0000000040)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) syz_mount_image$vfat(&(0x7f0000003a80), &(0x7f0000003ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000003bc0)) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0xa) fchdir(r5) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) socket$nl_route(0x10, 0x3, 0x0) setregid(r6, r6) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x1) add_key(0x0, 0x0, &(0x7f0000003d80), 0x0, r3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004340)='cgroup.controllers\x00', 0x275a, 0x0) 4m11.716189536s ago: executing program 1 (id=123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000940)={0x1f0, r1, 0x1, 0x74bd28, 0x25dfdbf7, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x10, 0x3, "322d73355f2d2d5d482ee536"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4a97}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa0000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "24382d0f76d3da1e5900f6739c3100129eef0503cb4c27a846"}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xebbd}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9de9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x47651fef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000006}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000240)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000280)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) chdir(&(0x7f0000000380)='./file0\x00') r6 = getpid() pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x400, &(0x7f00000003c0), 0x2, 0x79a, &(0x7f0000000b40)="$eJzs3c1rHGUYAPBntvmoabURBK2ngKCB0o2psVXw0OJBBAsFPduGzTbUbLIhuylNCGgRwYug4kHQS89W682rH1f9A7x7kJaqaTHiQSKzH+m22Y2bdJOt7O8Hs3nfmdl95pl3Pt7sDDsB9KyR9CUTcTgiPkwiDtXGJxHRXyn1RZyszre2upJLhyTW11//PanMc3t1JRcN70kdqFWeiIjv34s4ktkct7S0PDNZKOQXavWx8uz8WGlp+eiF2cnp/HR+7vj4xMSxE8+fON65XP/8afngjY9eeeark3+/+/i1D35I4mQcrE1rzKNTRmKktk7601V4l5fj7U6H66qk2wvAjqS75r7qXh6Hk7Tc1+1FAgB2WdoLXQcAekzi/A8APab+PcDt1ZVcfejuNxJ76+apiNhfzb9+fbM6pa92zW5/5Tro0O3krisjSUQMdyD+SER8/s2bV9Mhduk6JEAz71yOiHPDI5uP/8mmexa269k25hm5p74R/+f++4wO/JdvTyURLzTr/2U2+j/RpP8z2GTf3YmW+/+GzPUOhGkp7f+91HBv21pD/jXD+2q1hyt9vv7k/IVCPj22PRIRo9E/mNbHGz/0nkPX6K1/brWK39j/++Pjt75I46d/78yRud43ePd7pibLk/ebd93NyxFP9tXzv9wwJdlo/6RF//dMmzFeffH9z1pNS/NP860Pm/PfXetXIp5u2v537mhLtrw/cayyOYzVN4omvv7l06FW8RvbPx3WVlfWk4irnc+0ubT9h7bOfzhpvF+ztP0YP1459F2raU3yz9X/F6pqvv0PJG9UygO1cZcmy+WF8YiB5LXN44/deW+9Xp8/zX/0qeb7/1bbf7qLn2sz/74bv3258/x3V5r/1Lbaf/uFa2sz+1rFb6/9Jyql0dqYrY9/1eN2uwt4v+sPAAAAAAAAAAAAAAAAAAAAAAAAANqRiYiDkWSyG+VMJputPsP7sRjKFIql8pHzxcW5qag8K3s4+jP1n7o81PB7qOO138Ov14/dU38uIh6NiE8GH6rUs7liYarbyQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAzYEWz/9P/TrY7aUDAHbN/m4vAACw55z/AaD3OP8DQO9x/geA3uP8DwC9x/kfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXXbm9Ol0WP9rdSWX1qcuLi3OFC8encqXZrKzi7lsrrgwn50uFqcL+WyuONv6kwYrr4VicX4i5hYvjZXzpfJYaWn57Gxxca589sLs5HT+bL5/zzIDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPaVlpZnJguF/IJCpwuDQ9VV3MFP7qu12oOR4A4LmXoSexV0oI151udvnd52Fg/Ayty9QreOSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/L/8GAAD//z/uG9Y=") r7 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./file1\x00', 0x42, 0x98) fadvise64(r7, 0x8000000000000000, 0x400afcf, 0x6) r8 = syz_pidfd_open(r6, 0x0) setns(r8, 0x24020000) 4m8.984721942s ago: executing program 1 (id=132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000940)={0x1f0, r1, 0x1, 0x74bd28, 0x25dfdbf7, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x10, 0x3, "322d73355f2d2d5d482ee536"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4a97}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa0000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "24382d0f76d3da1e5900f6739c3100129eef0503cb4c27a846"}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xebbd}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9de9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x47651fef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000006}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000240)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000280)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) chdir(&(0x7f0000000380)='./file0\x00') r6 = getpid() pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x400, &(0x7f00000003c0), 0x2, 0x79a, &(0x7f0000000b40)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./file1\x00', 0x42, 0x98) fadvise64(r7, 0x8000000000000000, 0x400afcf, 0x6) r8 = syz_pidfd_open(r6, 0x0) setns(r8, 0x24020000) 4m2.992164568s ago: executing program 1 (id=143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000940)={0x1f0, r1, 0x1, 0x74bd28, 0x25dfdbf7, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x10, 0x3, "322d73355f2d2d5d482ee536"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4a97}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa0000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "24382d0f76d3da1e5900f6739c3100129eef0503cb4c27a846"}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xebbd}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9de9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x47651fef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000006}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000240)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000280)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) chdir(&(0x7f0000000380)='./file0\x00') r6 = getpid() pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x400, &(0x7f00000003c0), 0x2, 0x79a, &(0x7f0000000b40)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./file1\x00', 0x42, 0x98) fadvise64(r7, 0x8000000000000000, 0x400afcf, 0x6) r8 = syz_pidfd_open(r6, 0x0) setns(r8, 0x24020000) 3m47.796229394s ago: executing program 32 (id=143): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000940)={0x1f0, r1, 0x1, 0x74bd28, 0x25dfdbf7, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x10, 0x3, "322d73355f2d2d5d482ee536"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4a97}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa0000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "24382d0f76d3da1e5900f6739c3100129eef0503cb4c27a846"}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xebbd}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9de9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x47651fef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000006}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000240)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000280)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) chdir(&(0x7f0000000380)='./file0\x00') r6 = getpid() pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x400, &(0x7f00000003c0), 0x2, 0x79a, &(0x7f0000000b40)="$eJzs3c1rHGUYAPBntvmoabURBK2ngKCB0o2psVXw0OJBBAsFPduGzTbUbLIhuylNCGgRwYug4kHQS89W682rH1f9A7x7kJaqaTHiQSKzH+m22Y2bdJOt7O8Hs3nfmdl95pl3Pt7sDDsB9KyR9CUTcTgiPkwiDtXGJxHRXyn1RZyszre2upJLhyTW11//PanMc3t1JRcN70kdqFWeiIjv34s4ktkct7S0PDNZKOQXavWx8uz8WGlp+eiF2cnp/HR+7vj4xMSxE8+fON65XP/8afngjY9eeeark3+/+/i1D35I4mQcrE1rzKNTRmKktk7601V4l5fj7U6H66qk2wvAjqS75r7qXh6Hk7Tc1+1FAgB2WdoLXQcAekzi/A8APab+PcDt1ZVcfejuNxJ76+apiNhfzb9+fbM6pa92zW5/5Tro0O3krisjSUQMdyD+SER8/s2bV9Mhduk6JEAz71yOiHPDI5uP/8mmexa269k25hm5p74R/+f++4wO/JdvTyURLzTr/2U2+j/RpP8z2GTf3YmW+/+GzPUOhGkp7f+91HBv21pD/jXD+2q1hyt9vv7k/IVCPj22PRIRo9E/mNbHGz/0nkPX6K1/brWK39j/++Pjt75I46d/78yRud43ePd7pibLk/ebd93NyxFP9tXzv9wwJdlo/6RF//dMmzFeffH9z1pNS/NP860Pm/PfXetXIp5u2v537mhLtrw/cayyOYzVN4omvv7l06FW8RvbPx3WVlfWk4irnc+0ubT9h7bOfzhpvF+ztP0YP1459F2raU3yz9X/F6pqvv0PJG9UygO1cZcmy+WF8YiB5LXN44/deW+9Xp8/zX/0qeb7/1bbf7qLn2sz/74bv3258/x3V5r/1Lbaf/uFa2sz+1rFb6/9Jyql0dqYrY9/1eN2uwt4v+sPAAAAAAAAAAAAAAAAAAAAAAAAANqRiYiDkWSyG+VMJputPsP7sRjKFIql8pHzxcW5qag8K3s4+jP1n7o81PB7qOO138Ov14/dU38uIh6NiE8GH6rUs7liYarbyQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAzYEWz/9P/TrY7aUDAHbN/m4vAACw55z/AaD3OP8DQO9x/geA3uP8DwC9x/kfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXXbm9Ol0WP9rdSWX1qcuLi3OFC8encqXZrKzi7lsrrgwn50uFqcL+WyuONv6kwYrr4VicX4i5hYvjZXzpfJYaWn57Gxxca589sLs5HT+bL5/zzIDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPaVlpZnJguF/IJCpwuDQ9VV3MFP7qu12oOR4A4LmXoSexV0oI151udvnd52Fg/Ayty9QreOSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/L/8GAAD//z/uG9Y=") r7 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./file1\x00', 0x42, 0x98) fadvise64(r7, 0x8000000000000000, 0x400afcf, 0x6) r8 = syz_pidfd_open(r6, 0x0) setns(r8, 0x24020000) 2m41.471177052s ago: executing program 4 (id=383): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40801, 0x0) r1 = epoll_create(0x8) mount(0x0, &(0x7f00000001c0)='./dev\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./mnt\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='./dev/sda1\x00', &(0x7f00000002c0)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x8410, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000400)=0x2000000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x2, 0x143102) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000500)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x1fe) mount(0x0, &(0x7f0000000580)='./dev\x00', &(0x7f00000005c0)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x1c5e42, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000640)={0x7, 0x4d, 0x2}, 0xffffff28) socket$rds(0x15, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x42, 0x0) creat(&(0x7f00000003c0)='./file1\x00', 0x108) 2m41.251890504s ago: executing program 4 (id=385): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000280), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) listen(0xffffffffffffffff, 0x6) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r1, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c46800d040001000200010000000200060001000000dd00000038000000450300000800000005002000010005000900000100000000030000000400000005000000060000008000"], 0x58) r2 = inotify_init1(0x80800) inotify_add_watch(r2, &(0x7f0000000640)='./file0\x00', 0x4000261) close(r1) execve(&(0x7f0000000680)='./file0\x00', 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000400)=""/120, 0x78) creat(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='mountinfo\x00') 2m40.503045239s ago: executing program 4 (id=386): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0xc41a, &(0x7f0000000440)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@minixdf}, {@nodioread_nolock}, {@nolazytime}, {@usrjquota, 0x2e}, {@bsdgroups}, {@data_ordered}, {@jqfmt_vfsv0}, {@barrier}, {@journal_path={'journal_path', 0x3d, './file0'}}], [], 0x2c}, 0x1, 0x480, &(0x7f0000000500)="$eJzs3c1vFOUfAPDvbFve+bU/xBcQdRVfGl9aWlA5eBCjCRcTEz3gsZZCkEINrYkQItUDHg0nj+rRxL/Ak1yMetJ41bsxIYaL1UQyZnZnlqXtLtttt0vZzycZdp7ZZ+f5PjPzsM88z2waQM8qZ/8kETsi4teIGIyIvsUZytWXhesXJ/++fnEyiTR988+kP4mIv65fnCyyJvnr9jwxXKptWmL2/IXTE9PTU+fy9OjcmfdGZ89feO7UmYmTUyenzo4fPnzo4NiLL4w/vyb13JnFuvfDmX17jr595fXJY1fe+eHrLLgd+fv19agaWnWZ5Sg3PABPrHrvd5ad+WvDE84dKWvr/RExUGn/g9FXSVUNxmsfdzU4oKPSNE03L9la6wHMp8BdLIluRwB0R/FFn93/Fss6dj+67tqR6g1QVu+FfKm+0x+lPM9A3f3tWitHxLH5fz7Pllh2HAIAYG19m/V/nl2u/1eK++ry/S+fGxqKiP9HxK6IuCcidkfEvRGVvPdHxAMrLL+8KH2z/Bv5INTPW9uv3e1dOxLJS/nc1q39v6L3F0N9eWpnpf4DyYlT01MH8mMyHAObs/RYkzKuvvrLp43eq+//ZUtWftEXzOP4o3/RAN3xibmJ1dS53rWPKmOAl5bWP6nNBCQRsSci9rax/y0Rcerpr/bVNmyq22muef2b6G8joEXSLyOeqp7/+VhU/6gLtcn85OiWmJ46MFpcFUv9+NPlNxqVf/vz31nZ+d+27PVfq/9QUj9fO7vyMi7/9knDe5p2r/9NyVuV9eJy+mBibu7cWMSmZH7p9vGbny3SRf6s/sP7l2//uyJufJF/7sGIyC7ihyLi4Yh4JI/90Yh4LCL2N6n/9688/m779e+srP7HV3T+V77Sd/q7bxqVX45iCKLZ+T9UWRvOt7Ty/1+rAbZ73AAAAGAjKVWegU9KI7X1UmlkpPoM/+7YVpqemZ175sTM+2ePV5+VH4qBUjHSNRgv18ZDx/IxlyI9no8VF+mDlXHjNE3TrZX0yOTMdKfm1IHWbG/Q/jO/93U7OqDjKvNohz9rLbNfeMFd5ZZ59IHuxQGsvzV4jgbYoLR/6F3aP/Su5dr/pYiFLoQCrDPf/9C7tH/oXdo/9C7tH3rSan7X32xl19FO7XkjrlyNiEZ5+tre8+aIWG2ET25v9+NR6vZRbX2leKattqW0TOZ/uxVhdh5bzXwp1iuw2p/GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2ND+CwAA///1Q+UZ") prlimit64(0x0, 0xe, &(0x7f0000000980)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000009c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000a00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000a80)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000b00), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000b80)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000000bc0)={0x0, 0xea60}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000c00)=0x3, 0x4) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44800}, 0x80) read(r3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000dc0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x190) close_range(0xffffffffffffffff, r3, 0x0) r5 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_inode_setsecurity\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000340)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = getpgrp(0x0) rt_tgsigqueueinfo(r6, 0x0, 0x16, &(0x7f0000000200)={0x3f, 0x8000006, 0x1}) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x853]}, 0x8, 0x80000) 2m39.51016554s ago: executing program 4 (id=391): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000040)={0x3, 0xf98, 0x80, 0x0, 0xd}) sendmsg$nl_xfrm(r4, 0x0, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x5c, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80, 0x5c}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x26}, @in6=@remote, 0x6c, 0x1, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0) 2m38.12689783s ago: executing program 4 (id=394): syz_open_dev$ptys(0xc, 0x3, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f00000006c0)=[@increfs, @increfs={0x40046304, 0x3}]}) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff) 2m36.178209817s ago: executing program 4 (id=396): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x1c2100, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000380)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x15, "518aba4d000000000000000000000000002000"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000003c0)={0xfc, {"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", 0xce2}}, 0x1006) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001400)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001440)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001480)=0x7) sched_setscheduler(r3, 0x2, &(0x7f00000014c0)=0x7fffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000015c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000001600), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001640)=0x6) unshare(0x8000000) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001680)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000016c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001700)={0xffffffffffffffff, 0xe0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001900), 0x0, 0x2d, &(0x7f0000001940)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001980), &(0x7f00000019c0), 0x8, 0x27, 0x8, 0x8, &(0x7f0000001a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x7, 0x1, &(0x7f0000001b00)=ANY=[@ANYBLOB="0200000000000400"], &(0x7f0000001b40)='syzkaller\x00', 0x5, 0xff7, &(0x7f0000001b80)=""/4087, 0x40f00, 0xc, '\x00', r7, @fallback=0x1f, r1, 0x8, &(0x7f0000002b80)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, r8, r1, 0x6, &(0x7f0000002bc0), &(0x7f0000002c00)=[{0x5, 0x3, 0xe, 0xa}, {0x1, 0x2, 0x3, 0x1}, {0x1, 0x3, 0x400000b, 0x2}, {0x5, 0x4, 0x6, 0xc}, {0x3, 0x3, 0x4, 0x3}, {0x3, 0x3, 0x10, 0x6}], 0x10, 0x5}, 0x94) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000002c80)={'rti800\x00', [0x140, 0xc1, 0x4, 0x0, 0xfffffffd, 0x1, 0x8002, 0x1000, 0x1004, 0xc72d, 0x6, 0xfffbfffb, 0x1, 0x8, 0x10001, 0x80000000, 0xfc, 0xed, 0x6, 0x7, 0x4, 0x0, 0x36, 0x4000b, 0xffe, 0x9, 0xae, 0x0, 0x9, 0x80, 0x4]}) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000003d40)) socket$nl_route(0x10, 0x3, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2m28.448463108s ago: executing program 0 (id=422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000680)=@filename='./dev/sda1\x00', &(0x7f0000000780)='./mnt\x00', &(0x7f00000007c0)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000800)='./mnt\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000880)="ff", 0x58200, 0xfb2200) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000005c0), 0x800) getuid() msgctl$IPC_SET(0x0, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 2m27.717343762s ago: executing program 0 (id=424): syz_open_dev$ptys(0xc, 0x3, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f00000006c0)=[@increfs, @increfs={0x40046304, 0x3}]}) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff) 2m24.979503799s ago: executing program 0 (id=429): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) epoll_create1(0x0) keyctl$invalidate(0x15, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/intl_enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000140)='1', 0x1) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000002c0)=0x2, 0x4) setsockopt(r5, 0x84, 0x7d, &(0x7f0000000300)="0000000001000000", 0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0, 0x200}, 0x8) bind(r5, &(0x7f00000003c0)=@in={0x2, 0x4e20, @loopback}, 0x80) connect(r5, &(0x7f0000000400)=@in={0x2, 0x4e20, @loopback}, 0x10) ioctl$XFS_IOC_FSGROWFSDATA(r3, 0x4010586e, 0x0) sendto(r5, &(0x7f0000000500)='\x00', 0x2710, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth1_macvtap\x00', &(0x7f0000000080)=@ethtool_sfeatures={0x15}}) 2m24.350285633s ago: executing program 0 (id=431): syz_mount_image$exfat(0x0, &(0x7f0000001440)='./bus\x00', 0x20020c0, 0x0, 0x0, 0x0, &(0x7f0000001480)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000d80)='./file0\x00', 0xc41a, &(0x7f0000000dc0)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f0000000e80)="$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") prlimit64(0x0, 0xe, &(0x7f0000002240)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002280)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000022c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002340)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000023c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002440)=0x6) rmdir(0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(0x0, r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000024c0)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000300)=ANY=[@ANYBLOB="1d7796d3db935f005a5b46bdadadc2c842a4bf59ab789ef5ebfc052ff1bba77c1fd7b2cb1679b547c71fcae31a7811510c5d09b6f06278a8ce2b280760a2778a1421748596e25c7081e0ae1c3df2b6bd12ca579ee72a500b1637eb03da7bb403c86e05dbdb053b6964528db571c3ef2f661becf83c0912c59040f098c8a0860a977806f6fe6c216631a43ed5eacc188b5979567a821e7ab9189a3cf8e88e7f029136a592407a8ee54205c22abe84991109a94e", @ANYRES16=r5, @ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) connect$unix(r3, &(0x7f00000025c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000000c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) read$alg(r8, &(0x7f0000000200)=""/212, 0xd4) socket$nl_netfilter(0x10, 0x3, 0xc) 2m23.446578334s ago: executing program 0 (id=436): syz_open_dev$ptys(0xc, 0x3, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f00000006c0)=[@increfs, @increfs={0x40046304, 0x3}]}) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) keyctl$read(0x2, 0x0, 0x0, 0x0) 2m21.979779283s ago: executing program 0 (id=439): socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000380)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x15, "518aba4d000000000000000000000000002000"}) dup(0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001400)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001440)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x2, &(0x7f00000014c0)=0x7fffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000015c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001600), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001640)=0x6) unshare(0x8000000) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001680)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001700)={0xffffffffffffffff, 0xe0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001900), 0x0, 0x2d, &(0x7f0000001940)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001980), &(0x7f00000019c0), 0x8, 0x27, 0x8, 0x8, &(0x7f0000001a00)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000002c80)={'rti800\x00', [0x140, 0xc1, 0x4, 0x0, 0xfffffffd, 0x1, 0x8002, 0x1000, 0x1004, 0xc72d, 0x6, 0xfffbfffb, 0x1, 0x8, 0x10001, 0x80000000, 0xfc, 0xed, 0x6, 0x7, 0x4, 0x0, 0x36, 0x4000b, 0xffe, 0x9, 0xae, 0x0, 0x9, 0x80, 0x4]}) ptrace$getregs(0xb, r1, 0x0, &(0x7f0000002d40)=""/4096) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000003d40)) socket$nl_route(0x10, 0x3, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2m20.856680856s ago: executing program 33 (id=396): socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x1c2100, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000380)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x15, "518aba4d000000000000000000000000002000"}) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f00000003c0)={0xfc, {"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", 0xce2}}, 0x1006) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001400)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001440)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001480)=0x7) sched_setscheduler(r3, 0x2, &(0x7f00000014c0)=0x7fffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001540)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000015c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000001600), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001640)=0x6) unshare(0x8000000) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001680)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000016c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001700)={0xffffffffffffffff, 0xe0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001900), 0x0, 0x2d, &(0x7f0000001940)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001980), &(0x7f00000019c0), 0x8, 0x27, 0x8, 0x8, &(0x7f0000001a00)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x7, 0x1, &(0x7f0000001b00)=ANY=[@ANYBLOB="0200000000000400"], &(0x7f0000001b40)='syzkaller\x00', 0x5, 0xff7, &(0x7f0000001b80)=""/4087, 0x40f00, 0xc, '\x00', r7, @fallback=0x1f, r1, 0x8, &(0x7f0000002b80)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, r8, r1, 0x6, &(0x7f0000002bc0), &(0x7f0000002c00)=[{0x5, 0x3, 0xe, 0xa}, {0x1, 0x2, 0x3, 0x1}, {0x1, 0x3, 0x400000b, 0x2}, {0x5, 0x4, 0x6, 0xc}, {0x3, 0x3, 0x4, 0x3}, {0x3, 0x3, 0x10, 0x6}], 0x10, 0x5}, 0x94) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000002c80)={'rti800\x00', [0x140, 0xc1, 0x4, 0x0, 0xfffffffd, 0x1, 0x8002, 0x1000, 0x1004, 0xc72d, 0x6, 0xfffbfffb, 0x1, 0x8, 0x10001, 0x80000000, 0xfc, 0xed, 0x6, 0x7, 0x4, 0x0, 0x36, 0x4000b, 0xffe, 0x9, 0xae, 0x0, 0x9, 0x80, 0x4]}) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000003d40)) socket$nl_route(0x10, 0x3, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2m6.662045001s ago: executing program 34 (id=439): socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000380)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x15, "518aba4d000000000000000000000000002000"}) dup(0xffffffffffffffff) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001400)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001440)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r1, 0x2, &(0x7f00000014c0)=0x7fffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000001540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000015c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000001600), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001640)=0x6) unshare(0x8000000) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001680)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001700)={0xffffffffffffffff, 0xe0, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001900), 0x0, 0x2d, &(0x7f0000001940)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001980), &(0x7f00000019c0), 0x8, 0x27, 0x8, 0x8, &(0x7f0000001a00)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000002c80)={'rti800\x00', [0x140, 0xc1, 0x4, 0x0, 0xfffffffd, 0x1, 0x8002, 0x1000, 0x1004, 0xc72d, 0x6, 0xfffbfffb, 0x1, 0x8, 0x10001, 0x80000000, 0xfc, 0xed, 0x6, 0x7, 0x4, 0x0, 0x36, 0x4000b, 0xffe, 0x9, 0xae, 0x0, 0x9, 0x80, 0x4]}) ptrace$getregs(0xb, r1, 0x0, &(0x7f0000002d40)=""/4096) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000003d40)) socket$nl_route(0x10, 0x3, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 15.72233947s ago: executing program 5 (id=741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x4c, 0x3, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0xf}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x5}}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x4}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x9}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c4}, 0x8000) flock(r3, 0x5) socket$nl_rdma(0x10, 0x3, 0x14) r4 = fsopen(&(0x7f0000000340)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x0) fchdir(0xffffffffffffffff) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/resume', 0x88102, 0x0) write$cgroup_int(r5, &(0x7f00000001c0)=0x720, 0x12) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, 0x0, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) process_madvise(r8, &(0x7f0000000080)=[{0x0}], 0x1, 0x65, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40810}, 0x4084) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r9, 0x0, 0x0) 13.948920029s ago: executing program 5 (id=745): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) listen(0xffffffffffffffff, 0x6) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c46800d040001000200010000000200060001000000dd00000038000000450300000800000005002000010005000900000100000000030000000400000005000000060000008000"], 0x58) r4 = inotify_init1(0x80800) inotify_add_watch(r4, &(0x7f0000000640)='./file0\x00', 0x4000261) close(r3) execve(&(0x7f0000000680)='./file0\x00', 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000400)=""/120, 0x78) creat(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='mountinfo\x00') 12.129653093s ago: executing program 5 (id=747): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) chdir(&(0x7f0000000800)='./mnt\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000880)="ff", 0x58200, 0xfb2200) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000005c0), 0x800) getuid() getresgid(&(0x7f0000000640), 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 10.830264374s ago: executing program 5 (id=749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000680)=@filename='./dev/sda1\x00', &(0x7f0000000780)='./mnt\x00', &(0x7f00000007c0)='ext4\x00', 0x8410, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000880)="ff", 0x58200, 0xfb2200) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000005c0), 0x800) getuid() getresgid(&(0x7f0000000640), 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 10.570881091s ago: executing program 2 (id=751): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1000000, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, 0x0, 0x101400, 0x100) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 10.227834246s ago: executing program 6 (id=752): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000040)={0x3, 0xf98, 0x80, 0x0, 0xd}) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x5c, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80, 0x5c}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x26}, @in6=@remote, 0x6c, 0x1, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_getparam(r1, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$FUSE_NOTIFY_RETRIEVE(r6, 0x0, 0x0) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x95a) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 9.320668057s ago: executing program 2 (id=753): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(0xffffffffffffffff, &(0x7f0000000200)="21000000470010aaaaaaaaaa00030000000000000000000000000000000300"/76, 0x4d) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c000000130005002cbd70000000010000000000", @ANYRES32=r2, @ANYBLOB="12030000000000000a000100aa"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 9.295661529s ago: executing program 6 (id=754): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x19, 0x0, @val=@tcx}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x12f) mount(0x0, &(0x7f00000008c0)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./tracing\x00', 0x10b802, 0x9) sendfile(r1, r1, 0x0, 0x1000000201005) socket$xdp(0x2c, 0x3, 0x0) socket(0x29, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./tracing\x00', &(0x7f0000000a00)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000bc0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r3, &(0x7f0000000c40)='p:p1 ./file0:0', 0xe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000cc0)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x0) io_submit(0x0, 0x0, 0x0) listxattr(&(0x7f0000000d00)='./file0\x00', 0x0, 0x0) syz_clone(0x4a044000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.127075267s ago: executing program 2 (id=755): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x1c1002, 0x12) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x2204054, &(0x7f0000000140)=ANY=[@ANYRESOCT, @ANYRESDEC, @ANYRES16=r0, @ANYRESOCT=r1], 0x1, 0xc72, &(0x7f0000000880)="$eJzs3U9sHNd9B/DfGy7FpdxWTOwoThsXm6ZIZcVy9C+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spAVTFOihhwBF0UNOBFqjQIoGRlMEPTKtCyQXH4qceiJaxAiKHtgiQC4NWMzsW3FJkRIlkfpjfz629N2dfW/3vZnFjCTwNy8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIjffe3c8RNpFw1rD2EwAMBDcWHsK8dP7ub6DwB8aFza7d//AQAAAAAAAAAAAACARyVFEU9HirkLa2miet5RP9/uv3FzfGR0+26DqerZV7Uvf9VPnDx1+osvDZ/p5vn2TLf/4P5P4wuf7eTs9bn5qYWFqcnG+Ez7yuzk1K7f4Y2xS+car95//62OVjugcf3NG5NXry40Tr54atPLN4c+GHjq8NDZ4eePPddtOz4yOjq20aTe2/5B776wU4XHgSjiWKR44bs/Ta2IKOLB90W959jf0f58MQarSRytJjE+MlpNZLrdmlksX7zY3RFFRCMGbnVqdvfR9sciav37MtZ714xYKodfDvhoOb2xudZ86/L0VONia36xvdienbmYOqMt59OIIs6kiOWIWB24/e36o4hapPj2obV0OSL6uvvh81Vh8M7jKPZxjrtQjrPRH7FcPAHH7DE2EEW8Hil+9t6RuJLPM9W55nMRr5f5/Yh3ynwlIpVfjNMRP9nme8STqRZF/Hl5/M+upcnqfNA9r5z/auPLM1dne9p2zyv3eH247Uyx6+vD3hrckg/HY35uqkcRreqMv5bu/w87AAAAAAAAAAAAAAAAAOy1wSjiU5HitX/7w6quOKq69ENnh39v6Jd7a8afvcv7lG1fjIilYnc1uQdyYeDFdDGle68lfkyq55589Sjij3L93zd30f5B70MAAAAAAAAAAAAAAAAAAADATtKZH0eKl98/kpajd03x9sy1xmBEdFaF7a7928i91tfX1xupk82cEzmXci7nXMm5mjOK3D9nM+dEzqWcyzlXcq7mjL7cP2cz50TOpZzLOVdyruaMWu6fs5lzIudSzuWcKzlXc7r7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA3iuiiF9Eim99fS1FiohmxER0cmXgUY8OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgNpCK+Fykav9+8ta0WEan6v+NI+dvpaB4o8+PRHC7zlWiey9mqstb85o6fUuzrHLh//amIH0WKgfq7tw54Pv79nWe3vgbxzjc2nv1qrZN93ReHPhh46vChs8Ojv/7sTo/TdgM4er49c+NmY3xkdHSsZ3Mtf/rHe7YN5c/1bdo7C2+9/WZrenpq/v4flF+BB+j+BD1ItY/KTD2oHkTtUQ+j79HN/S4O9T2cMxT7qbz+/yRSfOH9f+9e8DvX/3r8UufZxmH++R9vXP9f3vpGu7z+17b2y9f/8pq+3fX/6Z5tL+c/jfTXIuqL1+f6D0fUF956+1j7euva1LWpmdPHj39pePhLp473H4ioX21PT/U82pPdBQAAAAAAAAAAAAAAAPDwpCJ+J1K0frSWGhFxs6rXGjo7/Pyx5/qir6q32lS3/cbYpXONV2evz81PLSxMTTbGZ9pXZiendvtx9arca3xkdF8mcwedovHBfR7/YP3V2bm35tvX/mBx60tV5dvB+rnLC4vzrSu3vZz7l+Ns9m45Wg14fGS0GvR0uzVTdb24bTH9vetPRfxHpLhyupE+0zPSdKtUb6P+r7f+f2nrG+1B/X9vQWm3/u9jPdvKz0ypiJ9Hit/6i2fjM9U4D8Zt+yy3+5tIcfTMp3O7OFC2646hc1+BTmVg2fZ/IsU//GJz22495NMbbU/sesc+IcrjfyhSfO/PvhO/kbdtvv/D9sf/4NY3ut/jv37n+z8807Pt4Kb7FTzw1MnH/1ikeOXpd+Ozedud7v/RvffGkdz41v059un+H5/o2TaUP/c392bqAAAAAAAAAAAAT7T+VMTfRoofjNbSS3nbbn7+b3LrG+3Tz399smfb5N6sV3TXBw+8UwEAAADgMdGfivhxpLi2+O6tGurN9d899Z+/vVH/OZK2vFr9O9+vVPcN2Mt//+s1lD934sGnDQAAAAAAAAAAAAAAAAAAAI+VlIp4Ka+nPlHV80/uuJ76SqR47b9eyO3S4bJddx34oer3+oXZmWPnpqdnr7QWW5enpxpjc60rU2XfZyLF2l9/OvctqvXVu+vNd9Z431iLfT5SjP5dt21nLfbu2uTPbLQ9Ubb9WKT4z7/f3La7jvUnNtqeLNv+VaT42j9t3/bwRttTZdvvRIoffq3RbXuwbNu9P+onN9q+eGW22IejAgAAAAAAAAAAAAAAAAAAwEdNfyriTyLFf19fvlXLn9f/7+95WnnnGz3r/W9xs1rnf6ha/3+nx/ez/n91X4GlnT4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+nFIU8XakmLuwllYGyucd9fPtmRs3x0dGt+82mKqefVX78lf9xMlTp7/40vCZbt65/177VLwxdulc49XZ63PzUwsLU5ON8Zn2ldnJqV2/w/3374vaNluPVjugcf3NG5NXry40Tr54atPLN4c+GHjq8NDZ4eePPddtOz4yOjrW06bWv+vRb3bkT2/blHZoeiCK+MtI8cJ3f5p+MBBRxAPti8pdvjv7bbCaxNFqEuMjo9VEptutmcXyxYvdHVFENHo6Nbv7aK+PxV5rRiyVwy8HfLSc3thca751eXqqcbE1v9hebM/OXEyd0ZbzaUQRZ1LEckSsDtz+dv1RxJuR4tuH1tI/D5Rf5rwfPn9h7CvHT+48jmIf57gL5Tgb/RHLxb0es/X19fWHN87H3UAU8Y+R4mfvHYl/GYjqVFadzj4X8XqZ3494JzrHO6Xr//eox8veqkUR/1se/7Nr6b2B8nzQPa+c/2rjyzNXZ3vads8rT/z14WF6zK8n9Sjih9UZfy396zbXh15LD2tQAAAAAAAAAAAAAAAAAFSFnb8WKV5+/0iq6oNv1RS3Z641LrUuT3fK+rq1f92a6fX19fVG6mQz50TOpZzLOVdyruaMIvfP2Syzvr4+kZ8v5VzOuZJzNWf05f45mzknci7lXM65knM1Z9Ry/5zNnBM5l3Iu51zJuZozHpPaPQAAAAAAAAAAAAAAAAAA4MOlqP5L8a2vr6X1gc760hPRyZW7rAfKk+//AwAA///QDfvN") socket$nl_route(0x10, 0x3, 0x0) inotify_init1(0x80800) prlimit64(0x0, 0xe, &(0x7f0000001600)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000001640)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000001680)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001700)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000001780), 0x651, 0x0) recvmmsg(r4, &(0x7f00000017c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001800)=0x6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7ffffff, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2711}, 0x10) open(0x0, 0x80242, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001840), 0x2) r7 = memfd_create(&(0x7f0000001880)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x3) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000001a40)={r7, 0x1, 0x0, 0x2000}) ppoll(&(0x7f0000001a80)=[{r8, 0x1008}, {r8, 0x2c}], 0x2, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000200)="c7", 0x1) 9.099621649s ago: executing program 6 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000940)={0x1f0, r1, 0x1, 0x74bd28, 0x25dfdbf7, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x10, 0x3, "322d73355f2d2d5d482ee536"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4a97}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xa0000000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "24382d0f76d3da1e5900f6739c3100129eef0503cb4c27a846"}}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xebbd}]}, @TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9de9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x47651fef}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000006}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(0xffffffffffffffff) write$FUSE_BMAP(r3, &(0x7f0000000240)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000280)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chdir(&(0x7f0000000380)='./file0\x00') r4 = getpid() pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x400, &(0x7f00000003c0), 0x2, 0x79a, &(0x7f0000000b40)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./file1\x00', 0x42, 0x98) fadvise64(r5, 0x8000000000000000, 0x400afcf, 0x6) r6 = syz_pidfd_open(r4, 0x0) setns(r6, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 8.921318998s ago: executing program 6 (id=757): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000200), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000340), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000003c0)={0x0, 'erspan0\x00', {0x1}, 0x26}) mount(0x0, 0x0, 0x0, 0x2208004, 0x0) getrusage(0x1, &(0x7f0000001540)) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000014c0)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001500)=0x40) 8.79949835s ago: executing program 7 (id=758): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001f00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001f40)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001fc0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002040)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000020c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002100), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000002140)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f0000002180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000021c0), 0x12) rename(&(0x7f0000002200)='./cgroup.net/cgroup.procs\x00', &(0x7f0000002240)='./file1\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000980)={0x20071026}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, 0x0, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x15, 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000001a80), 0x80000001, 0x83080) r9 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, 0x0) syz_open_dev$usbfs(&(0x7f0000001b00), 0x77, 0x1501) 7.41259734s ago: executing program 2 (id=759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) chdir(&(0x7f0000000800)='./mnt\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000880)="ff", 0x58200, 0xfb2200) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000005c0), 0x800) getuid() getresgid(&(0x7f0000000640), 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 6.52571426s ago: executing program 7 (id=761): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x19, 0x0, @val=@tcx}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x12f) mount(0x0, &(0x7f00000008c0)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./tracing\x00', 0x10b802, 0x9) sendfile(r1, r1, 0x0, 0x1000000201005) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socket(0x29, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./tracing\x00', &(0x7f0000000a00)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000bc0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r3, &(0x7f0000000c40)='p:p1 ./file0:0', 0xe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000cc0)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x0) io_submit(0x0, 0x0, 0x0) listxattr(&(0x7f0000000d00)='./file0\x00', 0x0, 0x0) syz_clone(0x4a044000, 0x0, 0x0, 0x0, 0x0, 0x0) 6.52342593s ago: executing program 5 (id=762): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r3, 0x0, 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f00000001c0)={0x1f, 0x0, 0x1}, 0x6) write(r7, &(0x7f0000000200)="21000000470010aaaaaaaaaa00030000000000000000000000000000000300"/76, 0x4d) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c000000130005002cbd70000000010000000000", @ANYRES32=r5, @ANYBLOB="12030000000000000a000100aa"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 5.821293231s ago: executing program 2 (id=763): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1000000, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f00000004c0)="$eJzs20tvG0UcAPD/rp30TUIpjz6AQEFEPJImLdADQgKBxAUJCQ7lGJK0KnUb1ASJVhEEhLiiStwRRyQ+ASe4IOCExJUPgCpVKJcWTkZr7yaO4zycOnHAv5+09czuuDN/74w9u5MNoGcNZf8kEQcj4o+IGKhnVxYYqr/cWZyf/HtxfjKJavXtv5JauduL85NF0eJ9B/LMcBqRfp7E8Rb1zl67fmmiUpm+mufL+etzFy9PXJi+MH1l/OzZM6fHXnxh/PmOxJm16faxj2dOHH3j3RtvTp678d4v3yVF/E1xdMjQy+scfLJa7XB13XWoIZ2Uu9gQ2lLKx15fbfwPRCmWT95AvP5ZVxsHbKtqtVo9sPbhhSrwP5ZEt1sAdEfxQ59d/xbbDk09doVbr9QvgLK47+Rb/Ug50rxMX9P1bScNRcS5hX++zrbYnvsQAAAr/JDNf55tNf9L44GGcvfka0ODEXFvRByOiPsi4khE3B9RK/tgRDzUZv1DTfnV85/05pYC26Rs/vdSvra1cv5XzP5isJTnDtXi70vOX6xMn8o/k+Ho25Plx9ap48fXfv9yrWON879sy+ov5oJ5O26W96x8z9TE3MTdxNzo1qcRx8qt4k+WVgKSiDgaEce2WMfFp789sdaxjeNfRwfWmarfRDxVP/8L0RR/IUuNzl3+YHT22vUW65Oje6MyfWq06BWr/frbF2+tVf9dxd8B2fnf37L/L8U/mDSu18629//v2eD4Vvt/f/JOLd2f7/toYm7u6lhE/6WVnaK2f3x1viifxT98svX4PxzLn8TxiMg68cMR8UhEPJq3/bGIeDwiTq4T48+vPvH+1uPfXln8U22d/+VEfzTvaZ0oXfrp+9jbUOlgO/Fn5/9MLTWc79nM999m2tV+bwYAAID/pjQiDkaSjiyl03RkpP738kdif1qZmZ175vzMh1em6s8IDEZfWtzpGmi4HzqWX9YX+fGm/On8vvFXpX21/MjkTGWq28FDjzuwxvjP/FnqduuAbed5Lehdxj/0LuMfepfxD72rxfjf1412ADuv1e//J11oB7Dzmsa/ZT/oIa7/oXcZ/9C7jH/oSbP7YuOH5CUkViUi3RXN2MZEUt4VzehSotvfTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xbwAAAP//Eg/hCA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$dir(0xffffffffffffff9c, 0x0, 0x101400, 0x100) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x8) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 5.431152771s ago: executing program 7 (id=764): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000400)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000040)={0x3, 0xf98, 0x80, 0x0, 0xd}) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x5c, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80, 0x5c}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in=@dev={0xac, 0x14, 0x14, 0x26}, @in6=@remote, 0x6c, 0x1, 0x0, 0x0, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_getparam(r1, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$FUSE_NOTIFY_RETRIEVE(r6, 0x0, 0x0) ioctl$RTC_IRQP_SET(r6, 0x4008700c, 0x95a) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) 5.210146993s ago: executing program 3 (id=765): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(0xffffffffffffffff, &(0x7f0000000200)="21000000470010aaaaaaaaaa00030000000000000000000000000000000300"/76, 0x4d) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c000000130005002cbd70000000010000000000", @ANYRES32=r2, @ANYBLOB="12030000000000000a000100aa"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 4.408833344s ago: executing program 3 (id=766): gettid() syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20, &(0x7f0000000680)={[{@norecovery}, {@stripe={'stripe', 0x3d, 0x2}}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}, {@user_xattr}, {@test_dummy_encryption_v1}]}, 0x1, 0x612, &(0x7f0000000a00)="$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") open(0x0, 0x8000, 0x112) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000080)='pstore\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000500)='rootcontext', &(0x7f0000000540)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000700), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000740), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000780)=0x6) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000007c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r5 = fcntl$dupfd(r4, 0x406, r4) write$cgroup_pid(r5, 0x0, 0x0) mkdir(&(0x7f0000000500)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000540)='./my_sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x7fff) 3.417283584s ago: executing program 6 (id=769): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) timer_create(0x5, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000180)=r3) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x1, 0x0, &(0x7f0000000340)=""/68, 0x0, 0x60000}) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f00000003c0)={0x0, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, 0x0, &(0x7f0000000440)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000004c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x4008af04, &(0x7f0000000540)) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000240)=""/21, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000005c0), 0x301, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) set_mempolicy(0x8006, &(0x7f0000000280)=0xfff, 0x5) r4 = socket$kcm(0x2, 0x0, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES16=r0, @ANYBLOB="80e839909a7407099d7963e0eca14be5ae5ba238b7cd1fe855c1b66ec386f9541cebd38fad7e3eddef304545c9abc69ebbc2dde9794ee71e8ea662a1233a54391c95c8385853fa25d11510feb360763655af6691dd6c863889", @ANYRES16=r0, @ANYRESDEC=r5, @ANYBLOB="e3559981fb3fe1cae9bf97cdbe31c021cb7b1f0ff6f5bc5b27ec45fc5f21b7ae87023fd4633abfd0782e202a", @ANYRES8=r1, @ANYRESOCT=r4], 0x5c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) 3.306653055s ago: executing program 3 (id=770): syz_open_dev$usbmon(0x0, 0xcef, 0x20200) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RVERSION(r0, 0x0, 0x15) socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8001, 0x80000008e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000480), 0x318, 0x0) recvmmsg(r3, &(0x7f00000004c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) syz_open_dev$loop(0x0, 0x6b, 0x901) setitimer(0x2, &(0x7f0000000540)={{}, {0x0, 0x2710}}, &(0x7f0000000580)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSRS485(r5, 0x542f, 0x0) r6 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x39, &(0x7f00000005c0)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r6, &(0x7f0000000600)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r6, &(0x7f0000000640), 0x40000000000017d, 0x888) timer_create(0x3, 0x0, &(0x7f0000000680)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x4c80, &(0x7f0000001cc0)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) syz_open_procfs(0x0, &(0x7f0000002cc0)='oom_score_adj\x00') 2.463392641s ago: executing program 2 (id=771): socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000240)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000740)={0x2020}, 0x2020) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) listen(0xffffffffffffffff, 0x6) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r3, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c46800d040001000200010000000200060001000000dd00000038000000450300000800000005002000010005000900000100000000030000000400000005000000060000008000"], 0x58) r4 = inotify_init1(0x80800) inotify_add_watch(r4, &(0x7f0000000640)='./file0\x00', 0x4000261) close(r3) execve(&(0x7f0000000680)='./file0\x00', 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000400)=""/120, 0x78) creat(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000500)='mountinfo\x00') 2.214567546s ago: executing program 3 (id=772): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000001f00)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001f40)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001fc0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002040)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000020c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002100), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000002140)='cgroup2\x00', 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f0000002180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000021c0), 0x12) rename(&(0x7f0000002200)='./cgroup.net/cgroup.procs\x00', &(0x7f0000002240)='./file1\x00') r6 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000000980)={0x20071026}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, 0x0, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x15, 0x0, 0x0) r8 = syz_open_dev$usbmon(&(0x7f0000001a80), 0x80000001, 0x83080) r9 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, 0x0) syz_open_dev$usbfs(&(0x7f0000001b00), 0x77, 0x1501) 1.260988582s ago: executing program 3 (id=773): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000680)=@filename='./dev/sda1\x00', &(0x7f0000000780)='./mnt\x00', &(0x7f00000007c0)='ext4\x00', 0x8410, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./file2\x00', 0x18d042, 0x15) pwrite64(r4, &(0x7f0000000880)="ff", 0x58200, 0xfb2200) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000005c0), 0x800) getuid() getresgid(&(0x7f0000000640), 0x0, 0x0) 1.257068453s ago: executing program 6 (id=774): syz_open_dev$ptys(0xc, 0x3, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x0, 0x800000000000, 0x4, 0x3, 0x0, 0x0, 0x0, 0x10000000000}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0x4, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r4, 0x200a0204) keyctl$join(0x1, &(0x7f00000000c0)={'syz', 0x3}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f00000006c0)=[@increfs, @increfs={0x40046304, 0x3}]}) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "26a1173fb9462d3589e67197f90b08e4230300000012a5f6a31854ec98e950cfed21fcad7ffefbcb566a1582f8938caa52dd8d39af080000006ad59300", 0xfff7fffd}, 0x4629, 0xffffffffffffffff) keyctl$read(0x2, r7, 0x0, 0x0) 565.708613ms ago: executing program 3 (id=775): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x19, 0x0, @val=@tcx}, 0x1c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0x12f) mount(0x0, &(0x7f00000008c0)='./proc\x00', &(0x7f0000000900)='proc\x00', 0x0, 0x0) r1 = open(&(0x7f0000000040)='./tracing\x00', 0x10b802, 0x9) sendfile(r1, r1, 0x0, 0x1000000201005) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) socket(0x29, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000009c0)='./tracing\x00', &(0x7f0000000a00)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./file0\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000bc0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r3, &(0x7f0000000c40)='p:p1 ./file0:0', 0xe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c80)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000cc0)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r2, 0x0) io_submit(0x0, 0x0, 0x0) listxattr(&(0x7f0000000d00)='./file0\x00', 0x0, 0x0) syz_clone(0x4a044000, 0x0, 0x0, 0x0, 0x0, 0x0) 226.648877ms ago: executing program 5 (id=776): syz_mount_image$vfat(&(0x7f0000001900), &(0x7f0000001ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x2aa, &(0x7f0000001e00)="$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") socket$inet6(0xa, 0x2, 0x0) umount2(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000380), 0x651, 0x0) recvmmsg(r1, &(0x7f00000003c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x69b0f3af8502838e, 0x39, 0x37, 0x34, 0x63, 0x62, 0x65, 0x37, 0x30, 0x34, 0x66, 0x39, 0x35, 0x33, 0x34, 0x30]}, &(0x7f0000000540)={0x0, "7da66b45ff48b0d0cb7df69e710be22be201ffdf7fe5c4d7dd56ba0f0acb0181596fc709e46da7f21ae1654caa27925f969f104a0b7c40b8cfd01a7bd56322d7", 0x34}, 0x48, 0xfffffffffffffffa) add_key(0x0, 0x0, 0x0, 0x24, r3) syz_mount_image$vfat(&(0x7f0000003a80), &(0x7f0000003ac0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000003bc0)) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000005c0)={'veth0_to_team\x00', 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0xa) fchdir(r6) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) socket$nl_route(0x10, 0x3, 0x0) setregid(r7, r7) fchmodat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0xfffffed3) openat$dm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 0s ago: executing program 7 (id=777): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) getsockname$packet(r1, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(0xffffffffffffffff, &(0x7f0000000200)="21000000470010aaaaaaaaaa00030000000000000000000000000000000300"/76, 0x4d) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="2c000000130005002cbd70000000010000000000", @ANYRES32=r2, @ANYBLOB="12030000000000000a000100aa"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.70' (ED25519) to the list of known hosts. [ 58.302475][ T4176] cgroup: Unknown subsys name 'net' [ 58.452204][ T4176] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.708032][ T4176] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 61.413337][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.421015][ T4199] rdma_rxe: rxe_register_device failed with error -23 [ 61.421886][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.430507][ T4190] rdma_rxe: rxe_register_device failed with error -23 [ 61.436987][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.443028][ T4191] rdma_rxe: rxe_register_device failed with error -23 [ 61.462809][ T4189] rdma_rxe: rxe_register_device failed with error -23 [ 61.473620][ T4199] rdma_rxe: failed to add rxe_eth0 [ 61.479726][ T4190] rdma_rxe: failed to add rxe_eth0 [ 61.485351][ T4189] rdma_rxe: failed to add rxe_eth0 [ 61.491050][ T4191] rdma_rxe: failed to add rxe_eth0 [ 61.574740][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.573764][ T4188] infiniband rxe0: set active [ 61.606598][ T4188] infiniband rxe0: added rxe_eth0 [ 61.652370][ T4188] RDS/IB: rxe0: added [ 61.657006][ T4188] smc: adding ib device rxe0 with port count 1 [ 61.663342][ T4188] smc: ib device rxe0 port 1 has pnetid [ 61.681089][ T13] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.709962][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.884898][ T4199] chnl_net:caif_netlink_parms(): no params data found [ 61.910124][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 61.925560][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.973830][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 61.992738][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 62.079522][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.156166][ T4199] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.169715][ T4199] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.178315][ T4199] device bridge_slave_0 entered promiscuous mode [ 62.206338][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.216607][ T4199] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.223688][ T4199] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.237097][ T4199] device bridge_slave_1 entered promiscuous mode [ 62.245021][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.252513][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.261464][ T4190] device bridge_slave_0 entered promiscuous mode [ 62.270224][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.277505][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.285609][ T4190] device bridge_slave_1 entered promiscuous mode [ 62.328045][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.335128][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.343484][ T4189] device bridge_slave_0 entered promiscuous mode [ 62.364363][ T4199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.381648][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.389472][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.397605][ T4189] device bridge_slave_1 entered promiscuous mode [ 62.404612][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.411887][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.422504][ T4191] device bridge_slave_0 entered promiscuous mode [ 62.432705][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.444540][ T4199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.474303][ T4188] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.476415][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.492701][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.502566][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.513153][ T4191] device bridge_slave_1 entered promiscuous mode [ 62.528557][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.551731][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.620995][ T4199] team0: Port device team_slave_0 added [ 62.637320][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.648639][ T4190] team0: Port device team_slave_0 added [ 62.656979][ T4199] team0: Port device team_slave_1 added [ 62.679552][ T4189] team0: Port device team_slave_0 added [ 62.689491][ T4190] team0: Port device team_slave_1 added [ 62.696737][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.721633][ T4189] team0: Port device team_slave_1 added [ 62.748193][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.755159][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.781158][ T4199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.815074][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.822078][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.848419][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.862301][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.869616][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.895665][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.907865][ T4199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.914816][ T4199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.941370][ T4199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.953250][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.960342][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.986561][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.000062][ T4191] team0: Port device team_slave_0 added [ 63.006270][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.013303][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.040097][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.070115][ T4191] team0: Port device team_slave_1 added [ 63.122357][ T4199] device hsr_slave_0 entered promiscuous mode [ 63.129636][ T4199] device hsr_slave_1 entered promiscuous mode [ 63.155414][ T4189] device hsr_slave_0 entered promiscuous mode [ 63.163107][ T4189] device hsr_slave_1 entered promiscuous mode [ 63.169978][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.178084][ T4189] Cannot create hsr debugfs directory [ 63.194365][ T4190] device hsr_slave_0 entered promiscuous mode [ 63.201543][ T4190] device hsr_slave_1 entered promiscuous mode [ 63.208452][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.216012][ T4190] Cannot create hsr debugfs directory [ 63.222382][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.229388][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.255511][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.295193][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.302512][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.328882][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.420107][ T23] Bluetooth: hci2: command 0x0409 tx timeout [ 63.428285][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 63.434546][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 63.441477][ T23] Bluetooth: hci0: command 0x0409 tx timeout [ 63.449077][ T23] Bluetooth: hci3: command 0x0409 tx timeout [ 63.494718][ T4191] device hsr_slave_0 entered promiscuous mode [ 63.501758][ T4191] device hsr_slave_1 entered promiscuous mode [ 63.509361][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.517278][ T4191] Cannot create hsr debugfs directory [ 63.537694][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 63.585126][ T3854] infiniband rxe0: set active [ 63.606255][ T23] rxe_eth0 speed is unknown, defaulting to 1000 [ 63.695554][ T4199] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.713189][ T4199] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.734277][ T4199] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.753045][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.760692][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.769309][ T4188] device bridge_slave_0 entered promiscuous mode [ 63.777359][ T4199] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.794360][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.804421][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.812980][ T4188] device bridge_slave_1 entered promiscuous mode [ 63.856029][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.876895][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.912930][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.930890][ T4188] team0: Port device team_slave_0 added [ 63.939881][ T4188] team0: Port device team_slave_1 added [ 63.945852][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.954568][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.983726][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.998776][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.005731][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.032235][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.051177][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.061255][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.068719][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.094974][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.120187][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.157685][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.170911][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.194394][ T4188] device hsr_slave_0 entered promiscuous mode [ 64.201493][ T4188] device hsr_slave_1 entered promiscuous mode [ 64.208696][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.216260][ T4188] Cannot create hsr debugfs directory [ 64.270440][ T4199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.308359][ T4191] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.327867][ T4191] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.337065][ T4191] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.361036][ T4191] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.373488][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.422353][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.431767][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.453499][ T4199] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.477615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.486099][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.497753][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.508589][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.519428][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.529813][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.537292][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.550402][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.587215][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.595188][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.604574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.613732][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.620850][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.630122][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.639088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.647846][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.654916][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.662716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.672486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.681541][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.690426][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.699933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.708497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.718681][ T4188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.734117][ T4188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.748374][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.758294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.767678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.776135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.792776][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.801319][ T4188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.811669][ T4188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.827143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.834997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.843109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.852559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.863630][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.870736][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.878499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.887341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.909993][ T4199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.926176][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.935376][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.945811][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.952923][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.960879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.972340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.980797][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.987895][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.996152][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.004958][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.013652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.041465][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.054691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.065162][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.080504][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.092905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.105645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.115869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.124089][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.135558][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.145623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.161829][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.176921][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.185330][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.200356][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.210245][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.225088][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.237588][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.269860][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.279321][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.288052][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.297483][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.305684][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.314377][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.337382][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.348784][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.366281][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.382267][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.398422][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.405958][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.443355][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.458816][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.473352][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.480489][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.491069][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.499570][ T4270] Bluetooth: hci3: command 0x041b tx timeout [ 65.500668][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.505682][ T4270] Bluetooth: hci0: command 0x041b tx timeout [ 65.520613][ T4270] Bluetooth: hci1: command 0x041b tx timeout [ 65.521006][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.527034][ T4270] Bluetooth: hci4: command 0x041b tx timeout [ 65.533687][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.539985][ T4270] Bluetooth: hci2: command 0x041b tx timeout [ 65.554197][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.563135][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.575920][ T4199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.595876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.607656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.617058][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.625660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.637074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.646336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.679404][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.689226][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.716193][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.739552][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.753181][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.763341][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.777912][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.807568][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.816100][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.826288][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.838173][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.845893][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.858888][ T4199] device veth0_vlan entered promiscuous mode [ 65.872598][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.893472][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.904078][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.912530][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.921017][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.929436][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.937458][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.949981][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.960334][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.969026][ T1368] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.976080][ T1368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.989825][ T4199] device veth1_vlan entered promiscuous mode [ 66.000198][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.022975][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.053425][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.062570][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.077360][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.085926][ T1368] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.093036][ T1368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.102893][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.115381][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.144430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.162631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.174013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.183137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.193051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.224347][ T4188] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.244498][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.261785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.270674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.278486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.286369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.295120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.304316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.312772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.321470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.330501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.339830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.350571][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.411189][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.427707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.438758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.448524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.466477][ T4199] device veth0_macvtap entered promiscuous mode [ 66.477056][ T4189] device veth0_vlan entered promiscuous mode [ 66.498141][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.506910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.514841][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.525791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.538640][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.559535][ T4199] device veth1_macvtap entered promiscuous mode [ 66.572746][ T4189] device veth1_vlan entered promiscuous mode [ 66.583481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.592743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.600917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.610374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.624295][ T4191] device veth0_vlan entered promiscuous mode [ 66.656039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.665378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.674261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.683094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.694111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.702716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.710386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.718175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.725957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.734103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.743470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.754575][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.764234][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.780388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.789619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.803860][ T4199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.816754][ T4190] device veth0_vlan entered promiscuous mode [ 66.826040][ T4191] device veth1_vlan entered promiscuous mode [ 66.833699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.843831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.854072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.869341][ T4199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.879985][ T4199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.889104][ T4199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.899370][ T4199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.916225][ T4190] device veth1_vlan entered promiscuous mode [ 66.932411][ T4189] device veth0_macvtap entered promiscuous mode [ 66.942978][ T4189] device veth1_macvtap entered promiscuous mode [ 66.963663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.972050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.980920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.989932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.999022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.007912][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.041188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.049998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.060550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.069965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.079102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.096538][ T4191] device veth0_macvtap entered promiscuous mode [ 67.130157][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.143315][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.154974][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.164990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.174421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.183757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.192359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.201073][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.210388][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.218686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.234539][ T4191] device veth1_macvtap entered promiscuous mode [ 67.245674][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.260872][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.272413][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.286908][ T4188] device veth0_vlan entered promiscuous mode [ 67.294274][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.303547][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.312462][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.322160][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.343925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.353098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.362503][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.371550][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.385465][ T4190] device veth0_macvtap entered promiscuous mode [ 67.408565][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.419822][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.430073][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.442066][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.454527][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.466142][ T4188] device veth1_vlan entered promiscuous mode [ 67.477601][ T4190] device veth1_macvtap entered promiscuous mode [ 67.499407][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.509373][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.517983][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.527907][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.541051][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.552259][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.563008][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.573768][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.584490][ T4294] Bluetooth: hci2: command 0x040f tx timeout [ 67.590116][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.593710][ T4294] Bluetooth: hci4: command 0x040f tx timeout [ 67.610900][ T4294] Bluetooth: hci1: command 0x040f tx timeout [ 67.618147][ T4294] Bluetooth: hci0: command 0x040f tx timeout [ 67.638291][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.638367][ T4294] Bluetooth: hci3: command 0x040f tx timeout [ 67.649207][ T1368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.653895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.667567][ T1368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.678964][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.692663][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.703577][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.713831][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.724765][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.734910][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.746269][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.758437][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.781622][ T4191] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.790900][ T4191] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.800029][ T4191] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.809063][ T4191] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.821166][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.830779][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.840797][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.850124][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.861771][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.872953][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.883371][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.894088][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.906552][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.917730][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.929193][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.938409][ T4188] device veth0_macvtap entered promiscuous mode [ 67.963476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.971836][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.984110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.996185][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.005171][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.013960][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.023044][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.063611][ T4188] device veth1_macvtap entered promiscuous mode [ 68.070236][ T1368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.079620][ T1368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.109060][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.120979][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.168148][ T4297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.176080][ T4297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.187954][ T1368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.195483][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.206872][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.216641][ T1368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.224597][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.235384][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.245337][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.256997][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.267101][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.277791][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.289091][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.297245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.305092][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.313134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.323367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.348287][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.371293][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.381606][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.392218][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.402720][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.413277][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.424758][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.435608][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.455073][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.500573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.515648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.528909][ T4188] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.538445][ T4188] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.549182][ T4188] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.557997][ T4188] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.587590][ T1368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.610120][ T1368] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.673885][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.675251][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.726478][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 68.736487][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 68.746478][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 68.756474][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 68.766468][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 68.776467][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.786472][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.796474][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.806475][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.816472][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 68.877082][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.900300][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.551401][ T4313] IPVS: Unknown mcast interface: rose0 [ 69.635687][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.645193][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.659102][ T4267] Bluetooth: hci0: command 0x0419 tx timeout [ 69.665759][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 69.680677][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.686639][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 69.688467][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.694023][ T4267] Bluetooth: hci2: command 0x0419 tx timeout [ 69.746916][ T4294] Bluetooth: hci3: command 0x0419 tx timeout [ 69.846633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.105994][ T4322] syz.0.6 uses obsolete (PF_INET,SOCK_PACKET) [ 70.130542][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.674935][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.686007][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.782353][ T4321] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6'. [ 70.808232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.873705][ T4297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.932723][ T4297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.972589][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.991609][ T4327] loop4: detected capacity change from 0 to 512 [ 71.781830][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.796275][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.991367][ T26] audit: type=1800 audit(1794008922.909:2): pid=4328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.7" name="bmaControls" dev="configfs" ino=32513 res=0 errno=0 [ 71.998765][ T4327] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 72.022599][ T4327] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5: invalid indirect mapped block 256 (level 1) [ 72.631818][ T4344] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.748726][ T4327] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.5: invalid indirect mapped block 2683928664 (level 1) [ 72.835634][ T4327] EXT4-fs (loop4): 1 truncate cleaned up [ 72.883982][ T4327] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 72.972191][ T4348] loop0: detected capacity change from 0 to 2048 [ 73.415244][ T4348] UDF-fs: bad mount option "ÿÿ0xffffffffffffffffÿÿ" or missing value [ 73.474552][ T4348] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.175179][ T4357] loop2: detected capacity change from 0 to 2048 [ 75.313797][ T4361] loop1: detected capacity change from 0 to 512 [ 76.364728][ T4371] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 76.394626][ T4371] CIFS: Attempting to mount \\1#7.0.0.1\Ë7Ì [ 76.400899][ T4371] CIFS: VFS: No username specified [ 76.420264][ T4373] xt_SECMARK: invalid mode: 2 [ 76.573605][ T4373] loop1: detected capacity change from 0 to 512 [ 76.631696][ T4373] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 76.957554][ T4338] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 78.782607][ T4410] loop1: detected capacity change from 0 to 256 [ 79.197315][ T4410] exfat: Bad value for 'dmask' [ 79.543388][ T4418] process 'syz.4.20' launched './file0' with NULL argv: empty string added [ 82.325794][ T4433] overlayfs: failed to clone upperpath [ 83.698275][ T4445] loop0: detected capacity change from 0 to 512 [ 84.182260][ T1326] rxe_eth0 speed is unknown, defaulting to 1000 [ 86.728712][ T1348] cfg80211: failed to load regulatory.db [ 86.924082][ T4469] CIFS: Attempting to mount \\127.0.0.1\share [ 87.318794][ T4469] CIFS: VFS: No username specified [ 88.768188][ T4485] futex_wake_op: syz.1.36 tries to shift op by 144; fix this program [ 90.257236][ T4500] loop4: detected capacity change from 0 to 512 [ 91.191178][ T4509] kernel profiling enabled (shift: 23) [ 91.869093][ T4500] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 92.110182][ T147] Bluetooth: Wrong link type (-71) [ 92.336683][ T4526] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 92.373835][ T4526] loop1: detected capacity change from 0 to 512 [ 92.598773][ T4528] xt_TCPMSS: Only works on TCP SYN packets [ 92.610127][ T4528] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 93.960395][ T4526] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz.1.43: pblk 0 bad header/extent: invalid magic - magic e, entries 0, max 15(0), depth 0(0) [ 93.980077][ T4526] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.43: couldn't read orphan inode 11 (err -117) [ 93.993118][ T4526] EXT4-fs (loop1): 1 truncate cleaned up [ 93.998931][ T4526] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,,errors=continue. Quota mode: writeback. [ 94.286560][ T4551] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.48' sets config #1 [ 95.747973][ T4553] loop4: detected capacity change from 0 to 1024 [ 95.815525][ T4558] loop0: detected capacity change from 0 to 128 [ 96.085963][ T4563] loop3: detected capacity change from 0 to 256 [ 96.534782][ T4563] exfat: Bad value for 'dmask' [ 101.322706][ T4606] md: md3 stopped. [ 101.366771][ T4600] event trace: Could not enable event p1 [ 101.415342][ T4619] usb usb5: usbfs: interface 0 claimed by hub while 'syz.1.64' sets config #1 [ 102.968834][ T4629] loop1: detected capacity change from 0 to 256 [ 103.627328][ T4629] ======================================================= [ 103.627328][ T4629] WARNING: The mand mount option has been deprecated and [ 103.627328][ T4629] and is ignored by this kernel. Remove the mand [ 103.627328][ T4629] option from the mount to silence this warning. [ 103.627328][ T4629] ======================================================= [ 103.675184][ T4629] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 103.729241][ T26] audit: type=1800 audit(1794008954.649:3): pid=4628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.66" name="file1" dev="loop1" ino=1048628 res=0 errno=0 [ 104.756512][ T4637] loop3: detected capacity change from 0 to 40427 [ 104.813633][ T4637] F2FS-fs (loop3): build fault injection attr: rate: 14, type: 0x1ffff [ 104.822585][ T4637] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0xe4 [ 104.841565][ T4637] F2FS-fs (loop3): invalid crc value [ 105.229662][ T4637] F2FS-fs (loop3): Found nat_bits in checkpoint [ 105.287296][ T4637] F2FS-fs (loop3) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x44e/0xaa0 [ 105.369548][ T4637] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 105.537469][ T4637] F2FS-fs (loop3) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x180/0x8e0 [ 106.159198][ T4199] attempt to access beyond end of device [ 106.159198][ T4199] loop3: rw=2049, want=45104, limit=40427 [ 106.751616][ T4655] IPVS: Unknown mcast interface: rose0 [ 110.201737][ T4680] loop0: detected capacity change from 0 to 164 [ 111.350128][ T4680] rock: directory entry would overflow storage [ 111.356612][ T4680] rock: sig=0x5252, size=5, remaining=3 [ 111.362234][ T4680] isofs_fill_super: root inode is not a directory. Corrupted media? [ 111.561983][ T4683] loop4: detected capacity change from 0 to 512 [ 112.013001][ T4689] xt_SECMARK: invalid mode: 2 [ 112.053562][ T4689] loop4: detected capacity change from 0 to 512 [ 112.674683][ T4689] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 112.927236][ T4694] loop0: detected capacity change from 0 to 128 [ 114.822846][ T4701] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.848251][ T4699] loop4: detected capacity change from 0 to 2048 [ 114.956900][ T4699] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 115.352608][ T4708] md/raid1:md1: active with 1 out of 2 mirrors [ 115.427311][ T4719] loop4: detected capacity change from 0 to 128 [ 115.478195][ T4720] md: recovery of RAID array md1 [ 115.503194][ T4720] md: md1: recovery done. [ 115.714465][ T4714] md: md1 stopped. [ 116.052599][ T4719] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 118.664931][ T4736] sched: RT throttling activated [ 118.895565][ T4746] tmpfs: Bad value for 'mpol' [ 119.119010][ T4745] loop1: detected capacity change from 0 to 128 [ 121.545227][ T26] audit: type=1326 audit(1794008972.459:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4750 comm="syz.2.98" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e64d47b19 code=0x0 [ 122.125184][ T4767] loop1: detected capacity change from 0 to 128 [ 126.877887][ T26] audit: type=1326 audit(1794008977.789:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.4.108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff646113b19 code=0x7ffc0000 [ 127.025813][ T4783] 9pnet: Insufficient options for proto=fd [ 127.270767][ T26] audit: type=1326 audit(1794008977.789:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.4.108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7ff646113b19 code=0x7ffc0000 [ 127.437174][ T26] audit: type=1326 audit(1794008977.789:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.4.108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff646113b19 code=0x7ffc0000 [ 127.476480][ T26] audit: type=1326 audit(1794008977.789:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.4.108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff646113b19 code=0x7ffc0000 [ 127.573922][ T26] audit: type=1326 audit(1794008977.789:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.4.108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff646113b19 code=0x7ffc0000 [ 127.646094][ T26] audit: type=1326 audit(1794008977.789:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.4.108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff646113b19 code=0x7ffc0000 [ 127.684061][ T26] audit: type=1326 audit(1794008977.789:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.4.108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff646113b19 code=0x7ffc0000 [ 127.780450][ T26] audit: type=1326 audit(1794008977.789:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4781 comm="syz.4.108" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff646113b19 code=0x7ffc0000 [ 127.825676][ T4799] loop1: detected capacity change from 0 to 256 [ 129.387656][ T4794] ceph: No mds server is up or the cluster is laggy [ 129.524442][ T4771] libceph: connect (1)[c::]:6789 error -101 [ 129.572926][ T4771] libceph: mon0 (1)[c::]:6789 connect error [ 130.518431][ T4807] IPVS: length: 172 != 24 [ 130.523797][ T4807] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 130.535935][ T4807] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 131.562044][ T4825] loop0: detected capacity change from 0 to 2048 [ 131.688462][ T4831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.118'. [ 132.471882][ T4828] tipc: Enabling of bearer rejected, failed to enable media [ 132.516366][ T4828] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 132.700230][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.706582][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.794225][ T4828] i2c i2c-0: new_device: Can't parse I2C address [ 133.120189][ T4829] loop4: detected capacity change from 0 to 1024 [ 133.232225][ T4833] loop1: detected capacity change from 0 to 128 [ 133.292263][ T4833] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 134.260965][ T4843] netlink: 'syz.3.122': attribute type 11 has an invalid length. [ 134.819249][ T4397] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 136.675487][ T4859] loop1: detected capacity change from 0 to 2048 [ 136.681666][ T4853] loop0: detected capacity change from 0 to 2048 [ 136.706776][ T4263] Bluetooth: hci1: command 0x0409 tx timeout [ 137.550022][ T4869] loop4: detected capacity change from 0 to 128 [ 137.573402][ T4869] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 139.423731][ T4397] FAT-fs (loop4): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 141.710277][ T4885] loop1: detected capacity change from 0 to 2048 [ 144.191458][ T4920] netlink: 4 bytes leftover after parsing attributes in process `syz.0.147'. [ 144.212492][ T4920] device batadv0 entered promiscuous mode [ 144.223988][ T4920] device macsec1 entered promiscuous mode [ 144.346991][ T4920] device batadv0 left promiscuous mode [ 146.546739][ T4920] syz.0.147 (4920) used greatest stack depth: 20912 bytes left [ 146.610040][ T4941] loop0: detected capacity change from 0 to 512 [ 146.681455][ T4941] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 146.695246][ T4942] loop3: detected capacity change from 0 to 4096 [ 146.702458][ T4941] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.153: invalid indirect mapped block 256 (level 1) [ 146.720560][ T4941] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.153: invalid indirect mapped block 2683928664 (level 1) [ 146.738428][ T4941] EXT4-fs (loop0): 1 truncate cleaned up [ 146.744513][ T4941] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 146.840368][ T4946] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.030937][ T4954] loop4: detected capacity change from 0 to 4096 [ 148.222490][ T4954] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5 [ 148.222490][ T4954] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 148.222490][ T4954] [ 148.447909][ T4954] EXT4-fs (loop4): Journaled quota options ignored when QUOTA feature is enabled [ 148.458648][ T4954] EXT4-fs (loop4): Ignoring removed orlov option [ 148.465161][ T4954] EXT4-fs (loop4): Mount option "nouser_xattr" will be removed by 3.5 [ 148.465161][ T4954] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 148.465161][ T4954] [ 148.477007][ T4959] Zero length message leads to an empty skb [ 148.495752][ T4954] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,noacl,nodioread_nolock,dioread_lock,stripe=0x0000000000000000,init_itable,grpjquota=wÅü5ÔTÕÔ)­`)YFæ¾nA­½@T<Ÿ3»Ú‚$¢ó×rçcnH³<¿pƒrèñ¹“>ÅwC¾" žð-ùËòöè€Ó8/,orlov,nouser_xattr,,errors=continue. Quota mode: writeback. [ 148.539738][ T4962] loop0: detected capacity change from 0 to 128 [ 148.583273][ T4962] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 148.820731][ T4966] netlink: 20 bytes leftover after parsing attributes in process `syz.4.157'. [ 149.764523][ T4396] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 151.667773][ T26] audit: type=1800 audit(1794009002.109:13): pid=4987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.160" name="file2" dev="sda1" ino=2047 res=0 errno=0 [ 152.540272][ T5000] tmpfs: Unknown parameter 'y' [ 152.649547][ T5000] loop0: detected capacity change from 0 to 2048 [ 152.995586][ T5000] loop0: p1 < > [ 153.352733][ T4664] udevd[4664]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 153.503400][ T5008] loop4: detected capacity change from 0 to 2048 [ 154.587301][ T4664] udevd[4664]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 156.559577][ T5032] jffs2: notice: (5032) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 158.849718][ T5051] loop4: detected capacity change from 0 to 2048 [ 158.974501][ T5054] loop3: detected capacity change from 0 to 512 [ 158.993147][ T5051] EXT4-fs (loop4): failed to initialize system zone (-117) [ 159.007843][ T5051] EXT4-fs (loop4): mount failed [ 159.137490][ T5054] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 159.246593][ T5054] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 159.803000][ T5054] EXT4-fs (loop3): 1 truncate cleaned up [ 159.818971][ T5054] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,jqfmt=vfsv1,. Quota mode: none. [ 159.890280][ T5062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.183'. [ 159.905801][ T5064] rxe_eth0 speed is unknown, defaulting to 1000 [ 160.029315][ T5071] loop4: detected capacity change from 0 to 2048 [ 160.329985][ T5081] netlink: 'syz.4.186': attribute type 1 has an invalid length. [ 161.103363][ T5081] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.120815][ T5098] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5893: inode #12: comm syz.3.181: bad extra_isize 62 (inode size 256) [ 161.139546][ T5098] EXT4-fs (loop3): Remounting filesystem read-only [ 161.317628][ T5090] bond1: (slave veth0_to_bond): making interface the new active one [ 161.353388][ T5090] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 161.390159][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 161.451940][ T5090] syz.4.186 (5090) used greatest stack depth: 19888 bytes left [ 162.355189][ T4263] Bluetooth: hci5: command 0x0409 tx timeout [ 162.470114][ T5064] chnl_net:caif_netlink_parms(): no params data found [ 162.483142][ T5123] loop4: detected capacity change from 0 to 512 [ 162.564000][ T5123] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 162.578358][ T5104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.675713][ T5123] EXT4-fs (loop4): 1 truncate cleaned up [ 162.681577][ T5123] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,jqfmt=vfsv1,. Quota mode: none. [ 162.803047][ T5064] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.855269][ T5064] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.886942][ T5064] device bridge_slave_0 entered promiscuous mode [ 162.927506][ T5064] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.956469][ T5064] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.985020][ T5064] device bridge_slave_1 entered promiscuous mode [ 163.059679][ T5064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.100718][ T5064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.255806][ T5064] team0: Port device team_slave_0 added [ 163.273281][ T5142] loop0: detected capacity change from 0 to 128 [ 163.282061][ T5064] team0: Port device team_slave_1 added [ 163.328349][ T5064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.565084][ T5064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.593119][ T5064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.632142][ T5064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.640700][ T5064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.697560][ T5064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.817420][ T5064] device hsr_slave_0 entered promiscuous mode [ 163.926874][ T5064] device hsr_slave_1 entered promiscuous mode [ 163.941075][ T5064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.954672][ T5064] Cannot create hsr debugfs directory [ 164.296132][ T5064] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 164.379104][ T5172] loop4: detected capacity change from 0 to 128 [ 164.401602][ T5172] FAT-fs (loop4): Unrecognized mount option "d" or missing value [ 164.430060][ T5064] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 164.461163][ T5064] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 164.472145][ T23] Bluetooth: hci5: command 0x041b tx timeout [ 164.599585][ T5064] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 165.551484][ T5064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.276178][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.294740][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.339894][ T5064] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.377417][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.038775][ T21] Bluetooth: hci5: command 0x040f tx timeout [ 167.096380][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.150282][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.157531][ T4323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.165320][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.199145][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.219986][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.227133][ T4323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.266840][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.327123][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.347019][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.363230][ T5187] loop4: detected capacity change from 0 to 512 [ 167.379883][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.423568][ T5187] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 167.433457][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.434232][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.491960][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.517777][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.640454][ T5187] EXT4-fs (loop4): 1 truncate cleaned up [ 167.647467][ T5187] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,jqfmt=vfsv1,. Quota mode: none. [ 167.732977][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.762115][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.921780][ T5195] loop3: detected capacity change from 0 to 512 [ 167.944389][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.996923][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.007176][ T5195] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 168.172439][ T5195] EXT4-fs (loop3): 1 truncate cleaned up [ 168.186753][ T5195] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,jqfmt=vfsv1,. Quota mode: none. [ 168.238804][ T5064] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.263935][ T5199] loop0: detected capacity change from 0 to 128 [ 168.700210][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.725889][ T5207] EXT4-fs error (device loop4): __ext4_expand_extra_isize:5893: inode #12: comm syz.4.202: bad extra_isize 62 (inode size 256) [ 168.740498][ T5207] EXT4-fs (loop4): Remounting filesystem read-only [ 168.762571][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.789046][ T5064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.929319][ T5210] EXT4-fs error (device loop3): __ext4_expand_extra_isize:5893: inode #12: comm syz.3.204: bad extra_isize 62 (inode size 256) [ 168.944226][ T5210] EXT4-fs (loop3): Remounting filesystem read-only [ 169.096690][ T4294] Bluetooth: hci5: command 0x0419 tx timeout [ 170.083656][ T5219] loop3: detected capacity change from 0 to 2048 [ 170.338428][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.354784][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.396847][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.415470][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.442341][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.466340][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.494157][ T5064] device veth0_vlan entered promiscuous mode [ 170.519388][ T5064] device veth1_vlan entered promiscuous mode [ 170.572534][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.593866][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.617636][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.634843][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.654317][ T5064] device veth0_macvtap entered promiscuous mode [ 170.687874][ T5064] device veth1_macvtap entered promiscuous mode [ 170.711879][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.736497][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.746333][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.758092][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.767979][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.778471][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.788440][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.799202][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.809213][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.834167][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.516975][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.527967][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 171.541531][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.541583][ T4270] Bluetooth: hci5: command 0x0405 tx timeout [ 171.557283][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.577109][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.607123][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.620458][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.630498][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.642175][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.652397][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.663227][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.674832][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.686375][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.697318][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.709036][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.765264][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.833619][ T5064] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.055815][ T5064] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.335724][ T5064] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.345961][ T5236] loop4: detected capacity change from 0 to 128 [ 172.355312][ T5064] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.133734][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 173.155848][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 173.254716][ T5246] loop0: detected capacity change from 0 to 512 [ 173.258363][ T5244] netlink: 'syz.2.215': attribute type 30 has an invalid length. [ 173.282223][ T5244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.215'. [ 173.296812][ T5244] bond0: option arp_missed_max: invalid value (0) [ 173.314858][ T5246] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 173.336556][ T5244] bond0: option arp_missed_max: allowed values 1 - 255 [ 173.396344][ T5246] EXT4-fs (loop0): 1 truncate cleaned up [ 173.409982][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.425758][ T5246] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,jqfmt=vfsv1,. Quota mode: none. [ 173.476009][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.529699][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.554386][ T4323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.564392][ T4323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.590435][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 174.825095][ T5266] EXT4-fs error (device loop0): __ext4_expand_extra_isize:5893: inode #12: comm syz.0.216: bad extra_isize 62 (inode size 256) [ 174.844936][ T5266] EXT4-fs (loop0): Remounting filesystem read-only [ 174.887943][ T5269] loop5: detected capacity change from 0 to 128 [ 175.329091][ T5274] loop0: detected capacity change from 0 to 512 [ 175.395564][ T5274] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 176.490078][ T26] audit: type=1800 audit(1794009026.929:14): pid=5282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.224" name="file2" dev="sda1" ino=2047 res=0 errno=0 [ 176.603122][ T5274] EXT4-fs (loop0): 1 truncate cleaned up [ 176.630432][ T5274] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,jqfmt=vfsv1,. Quota mode: none. [ 177.038838][ T5294] fuse: Bad value for 'fd' [ 178.842639][ T5311] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 179.455916][ T5312] loop0: detected capacity change from 0 to 2048 [ 179.661387][ T5312] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 179.683377][ T5315] loop4: detected capacity change from 0 to 2048 [ 181.003325][ T5339] netlink: 28 bytes leftover after parsing attributes in process `syz.4.244'. [ 184.192033][ T5367] SET target dimension over the limit! [ 185.014960][ T5386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.256'. [ 185.986726][ T4270] Bluetooth: hci3: command 0x0406 tx timeout [ 185.995738][ T4270] Bluetooth: hci0: command 0x0406 tx timeout [ 186.133448][ T4270] Bluetooth: hci1: command 0x0406 tx timeout [ 186.171214][ T4270] Bluetooth: hci4: command 0x0406 tx timeout [ 186.197926][ T4270] Bluetooth: hci2: command 0x0406 tx timeout [ 187.215317][ T5406] loop5: detected capacity change from 0 to 2048 [ 187.945736][ T5412] 9pnet: Insufficient options for proto=fd [ 187.975876][ T5412] netlink: 'syz.4.266': attribute type 1 has an invalid length. [ 188.061051][ T5412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.123634][ T5417] bond1: (slave veth0_to_bond): Releasing active interface [ 188.196956][ T5417] bond2: (slave veth0_to_bond): making interface the new active one [ 188.210563][ T5417] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 188.220510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 188.417250][ T5419] device bond2 entered promiscuous mode [ 188.429423][ T5419] device veth0_to_bond entered promiscuous mode [ 188.456179][ T5427] netlink: 28 bytes leftover after parsing attributes in process `syz.5.268'. [ 188.513533][ T5429] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.579101][ T5432] 9pnet: Insufficient options for proto=fd [ 188.609818][ T5432] netlink: 'syz.0.279': attribute type 1 has an invalid length. [ 189.297794][ T5432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 189.373827][ T5439] bond1: (slave veth0_to_bond): making interface the new active one [ 189.391020][ T5439] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 189.423614][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 189.567906][ T5442] device bond1 entered promiscuous mode [ 189.573755][ T5442] device veth0_to_bond entered promiscuous mode [ 192.445472][ T5477] overlayfs: failed to clone lowerpath [ 194.582838][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.589197][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.637248][ T5503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.281'. [ 201.280672][ T5556] netlink: 28 bytes leftover after parsing attributes in process `syz.3.302'. [ 204.477852][ T5601] netlink: 28 bytes leftover after parsing attributes in process `syz.5.316'. [ 204.519988][ T5605] 9pnet: Insufficient options for proto=fd [ 204.715802][ T5601] device netdevsim3 entered promiscuous mode [ 204.758593][ T5605] netlink: 'syz.0.317': attribute type 1 has an invalid length. [ 205.258747][ T5605] 8021q: adding VLAN 0 to HW filter on device bond2 [ 206.348392][ T5606] netlink: 'syz.3.315': attribute type 12 has an invalid length. [ 206.447641][ T5607] bond1: (slave veth0_to_bond): Releasing active interface [ 206.454913][ T5607] device veth0_to_bond left promiscuous mode [ 206.489077][ T5607] bond2: (slave veth0_to_bond): making interface the new active one [ 206.528268][ T5607] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 206.795589][ T5609] device bond2 entered promiscuous mode [ 206.806882][ T5609] device veth0_to_bond entered promiscuous mode [ 207.556664][ T5644] netlink: 'syz.2.324': attribute type 9 has an invalid length. [ 207.564713][ T5644] netlink: 'syz.2.324': attribute type 6 has an invalid length. [ 207.626639][ T5642] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 207.934727][ T5651] 9pnet: Insufficient options for proto=fd [ 207.975702][ T5656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.330'. [ 208.068858][ T5651] netlink: 'syz.0.339': attribute type 1 has an invalid length. [ 208.258625][ T5651] 8021q: adding VLAN 0 to HW filter on device bond3 [ 208.427216][ T5660] bond2: (slave veth0_to_bond): Releasing active interface [ 208.439842][ T5660] device veth0_to_bond left promiscuous mode [ 208.462285][ T5660] bond3: (slave veth0_to_bond): making interface the new active one [ 208.475041][ T5660] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 208.496223][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 210.767526][ T5692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.342'. [ 211.525303][ T5703] overlayfs: failed to clone lowerpath [ 216.767422][ T5748] netlink: 12 bytes leftover after parsing attributes in process `syz.3.356'. [ 219.052129][ T5778] netlink: 'syz.4.362': attribute type 9 has an invalid length. [ 219.059879][ T5778] netlink: 'syz.4.362': attribute type 6 has an invalid length. [ 219.070551][ T5778] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 221.989557][ T5807] 8021q: adding VLAN 0 to HW filter on device bond3 [ 222.037892][ T5809] device bond3 entered promiscuous mode [ 222.957524][ T5824] capability: warning: `syz.3.377' uses deprecated v2 capabilities in a way that may be insecure [ 226.184423][ T5850] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.240469][ T5854] device bond1 entered promiscuous mode [ 228.545451][ T5881] Invalid ELF header magic: != ELF [ 230.357729][ T5887] 9pnet: Insufficient options for proto=fd [ 230.447896][ T5897] netlink: 'syz.0.395': attribute type 1 has an invalid length. [ 230.951817][ T5897] 8021q: adding VLAN 0 to HW filter on device bond4 [ 230.992335][ T5887] bond3: (slave veth0_to_bond): Releasing active interface [ 233.589828][ T5933] 8021q: adding VLAN 0 to HW filter on device bond1 [ 233.607842][ T5938] device bond1 entered promiscuous mode [ 234.433386][ T5943] 9pnet: Insufficient options for proto=fd [ 234.461414][ T5943] netlink: 'syz.0.411': attribute type 1 has an invalid length. [ 234.697839][ T5943] 8021q: adding VLAN 0 to HW filter on device bond5 [ 234.712324][ T5951] bond5: (slave veth0_to_bond): making interface the new active one [ 235.413505][ T5951] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 235.431520][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 235.452351][ T5943] device bond5 entered promiscuous mode [ 235.577709][ T5943] device veth0_to_bond entered promiscuous mode [ 237.047133][ T4335] libceph: connect (1)[c::]:6789 error -101 [ 237.053311][ T4335] libceph: mon0 (1)[c::]:6789 connect error [ 237.816738][ T4263] libceph: connect (1)[c::]:6789 error -101 [ 237.822914][ T5963] ceph: No mds server is up or the cluster is laggy [ 237.829880][ T4263] libceph: mon0 (1)[c::]:6789 connect error [ 238.004083][ T5981] 8021q: adding VLAN 0 to HW filter on device bond2 [ 238.053744][ T5983] device bond2 entered promiscuous mode [ 240.567048][ T6004] 9pnet: Insufficient options for proto=fd [ 240.587005][ T6004] netlink: 'syz.3.427': attribute type 1 has an invalid length. [ 240.632273][ T6004] 8021q: adding VLAN 0 to HW filter on device bond3 [ 240.757430][ T6004] bond3: (slave veth0_to_bond): making interface the new active one [ 240.769163][ T6004] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 240.779597][ T6002] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 240.791979][ T6010] device bond3 entered promiscuous mode [ 240.806253][ T6010] device veth0_to_bond entered promiscuous mode [ 242.826639][ T6027] 8021q: adding VLAN 0 to HW filter on device bond4 [ 242.855706][ T6031] device bond4 entered promiscuous mode [ 246.847660][ T6076] rxe_eth0 speed is unknown, defaulting to 1000 [ 248.442458][ T6076] chnl_net:caif_netlink_parms(): no params data found [ 248.695845][ T6076] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.875550][ T6076] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.875622][ T4335] Bluetooth: hci6: command 0x0409 tx timeout [ 248.884210][ T6076] device bridge_slave_0 entered promiscuous mode [ 248.897672][ T6076] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.906530][ T6076] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.914555][ T6076] device bridge_slave_1 entered promiscuous mode [ 250.700831][ T6113] netlink: 'syz.5.445': attribute type 1 has an invalid length. [ 250.764233][ T6113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.838862][ T6076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.862925][ T6076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.922411][ T6108] device bond1 entered promiscuous mode [ 250.957549][ T4263] Bluetooth: hci6: command 0x041b tx timeout [ 250.976272][ T6076] team0: Port device team_slave_0 added [ 250.991406][ T6076] team0: Port device team_slave_1 added [ 251.563431][ T6076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.658741][ T6076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.702841][ T6076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.736120][ T6076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.781750][ T6076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.856415][ T6076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.007795][ T6076] device hsr_slave_0 entered promiscuous mode [ 252.029888][ T6076] device hsr_slave_1 entered promiscuous mode [ 252.037644][ T6076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.045660][ T6076] Cannot create hsr debugfs directory [ 252.831046][ T6076] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 252.854723][ T6076] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 252.875928][ T6076] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 252.899363][ T6076] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 253.016687][ T4262] Bluetooth: hci6: command 0x040f tx timeout [ 253.076749][ T6076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.120133][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 253.138634][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 253.196066][ T6076] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.298925][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 253.319844][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 253.361850][ T567] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.368982][ T567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.037268][ T6076] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 254.084760][ T6076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.118578][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 254.155264][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 254.185349][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 254.206054][ T567] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.213222][ T567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.253225][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 254.269880][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 254.305386][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 254.333926][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 254.350648][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 254.447501][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 254.473220][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 254.492934][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 254.618206][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 254.764865][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 254.811213][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 255.010311][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 255.147707][ T6158] netlink: 'syz.3.463': attribute type 1 has an invalid length. [ 255.580364][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.591324][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.704158][ T4264] Bluetooth: hci6: command 0x0419 tx timeout [ 255.750503][ T6158] 8021q: adding VLAN 0 to HW filter on device bond5 [ 255.810349][ T6160] device bond5 entered promiscuous mode [ 256.830662][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 256.857610][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 256.890635][ T6076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.048874][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 258.071509][ T1368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 258.133820][ T6204] sctp: [Deprecated]: syz.3.472 (pid 6204) Use of struct sctp_assoc_value in delayed_ack socket option. [ 258.133820][ T6204] Use struct sctp_sack_info instead [ 258.724815][ T6202] netlink: 44 bytes leftover after parsing attributes in process `syz.2.473'. [ 258.785584][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 258.795633][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 258.824720][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 258.832872][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 258.844490][ T6076] device veth0_vlan entered promiscuous mode [ 259.017070][ T6076] device veth1_vlan entered promiscuous mode [ 259.063680][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 259.084050][ T6212] netlink: 'syz.2.476': attribute type 1 has an invalid length. [ 259.127474][ T6212] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.387863][ T6212] device bond2 entered promiscuous mode [ 259.880590][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.917402][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.928803][ T6076] device veth0_macvtap entered promiscuous mode [ 259.940278][ T6076] device veth1_macvtap entered promiscuous mode [ 259.981547][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.016481][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.200596][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.212640][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.225147][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.549164][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.689788][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.000937][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.011521][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.023080][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.036662][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.047157][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.058422][ T6076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.068628][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 261.078111][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 261.086320][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 261.196821][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 261.318427][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.335321][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.346053][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.453114][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.477815][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.822389][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.932366][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.969809][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.996663][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.010911][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.021378][ T6076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.040069][ T6076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.051700][ T6076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.346852][ T6247] ip_tables: iptables: counters copy to user failed while replacing table [ 262.580248][ T6249] ip_tables: iptables: counters copy to user failed while replacing table [ 262.600375][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.629601][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.759705][ T6076] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.868383][ T6076] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.016655][ T6076] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.036542][ T6076] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.135458][ T4263] Bluetooth: hci7: command 0x0409 tx timeout [ 263.177613][ T6225] rxe_eth0 speed is unknown, defaulting to 1000 [ 263.204488][ T6251] netlink: 'syz.3.487': attribute type 1 has an invalid length. [ 263.568721][ T6251] 8021q: adding VLAN 0 to HW filter on device bond6 [ 263.995145][ T6255] device bond6 entered promiscuous mode [ 264.743744][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.765419][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.857447][ T4395] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.061650][ T4395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.080118][ T4395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.123393][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 265.177109][ T4264] Bluetooth: hci7: command 0x041b tx timeout [ 265.320349][ T6225] chnl_net:caif_netlink_parms(): no params data found [ 266.778702][ T6294] sctp: failed to load transform for md5: -2 [ 267.108554][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.186461][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.213013][ T6225] device bridge_slave_0 entered promiscuous mode [ 267.335333][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.448776][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.636252][ T6225] device bridge_slave_1 entered promiscuous mode [ 267.830350][ T4264] Bluetooth: hci7: command 0x040f tx timeout [ 267.903298][ T6225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.040595][ T6225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.157369][ T6225] team0: Port device team_slave_0 added [ 268.200036][ T6225] team0: Port device team_slave_1 added [ 268.336112][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.436293][ T26] audit: type=1800 audit(1794009119.859:15): pid=6322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.500" name="file2" dev="sda1" ino=2047 res=0 errno=0 [ 269.489884][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.562334][ T6225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.589158][ T6225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.603784][ T6225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.660805][ T6225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.039243][ T4335] Bluetooth: hci7: command 0x0419 tx timeout [ 270.043971][ T6225] device hsr_slave_0 entered promiscuous mode [ 270.095444][ T6225] device hsr_slave_1 entered promiscuous mode [ 270.837378][ T6225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.844973][ T6225] Cannot create hsr debugfs directory [ 273.453285][ T26] audit: type=1800 audit(1794009123.869:16): pid=6351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.501" name="file2" dev="sda1" ino=2047 res=0 errno=0 [ 273.505611][ T6225] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 273.522291][ T6225] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 273.558149][ T6225] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 273.638497][ T6225] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 274.209107][ T6225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.320329][ T6225] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.345823][ T6362] netlink: 'syz.5.509': attribute type 9 has an invalid length. [ 274.354555][ T6362] netlink: 'syz.5.509': attribute type 6 has an invalid length. [ 274.467994][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 274.486829][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 274.517350][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 274.586889][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.607073][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.614247][ T4323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.640364][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.652328][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.661905][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.670852][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.677981][ T4323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.719913][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.771066][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.801582][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.823371][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.849093][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.869972][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.897650][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.912094][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.949361][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.989404][ T6225] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 275.026818][ T6225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 275.064168][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 275.087047][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 276.219781][ T26] audit: type=1800 audit(1794009126.649:17): pid=6386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.516" name="file2" dev="sda1" ino=2047 res=0 errno=0 [ 276.352201][ T6390] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 276.352201][ T6390] [ 276.366147][ T6390] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 276.379054][ T6390] CIFS: Attempting to mount \\127.0.0.1\share [ 276.563927][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 276.577129][ T567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 276.610485][ T6225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.551965][ T6390] CIFS: VFS: Error connecting to socket. Aborting operation. [ 277.560809][ T6390] CIFS: VFS: cifs_mount failed w/return code = -4 [ 277.799236][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.829889][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.875202][ T6408] loop6: detected capacity change from 0 to 512 [ 277.890626][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 277.917826][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 277.947594][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 277.963401][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.992902][ T6408] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 278.006769][ T6225] device veth0_vlan entered promiscuous mode [ 278.172037][ T6225] device veth1_vlan entered promiscuous mode [ 278.790300][ T6225] device veth0_macvtap entered promiscuous mode [ 278.814328][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 278.823471][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 278.838292][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.851102][ T6408] EXT4-fs (loop6): 1 truncate cleaned up [ 279.167297][ T6408] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,jqfmt=vfsv1,. Quota mode: none. [ 279.206678][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.234759][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.388980][ T6225] device veth1_macvtap entered promiscuous mode [ 279.424952][ T6418] netlink: 'syz.3.523': attribute type 9 has an invalid length. [ 279.432745][ T6418] netlink: 'syz.3.523': attribute type 6 has an invalid length. [ 279.540805][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.563355][ T6426] EXT4-fs error (device loop6): __ext4_expand_extra_isize:5893: inode #12: comm syz.6.517: bad extra_isize 62 (inode size 256) [ 279.578127][ T6426] EXT4-fs (loop6): Remounting filesystem read-only [ 279.598437][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.664166][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.766452][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.872083][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.015606][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.208312][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.953687][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.014567][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.073588][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.115850][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.135404][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.145673][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.156288][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.168192][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.177995][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 282.187709][ T6066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 282.204031][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.235509][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.424741][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.436550][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.446470][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.457662][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.467565][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.478010][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.498458][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.516401][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.538907][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.570982][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.603020][ T6225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.642227][ T6225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.742374][ T6225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.783654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 282.805936][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 282.833724][ T6225] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.865856][ T6225] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.905157][ T6225] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.943512][ T6225] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.672488][ T1348] Bluetooth: hci5: command 0x0406 tx timeout [ 283.868746][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.897492][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.944709][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 283.977203][ T4396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.005478][ T4396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.042426][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 285.498569][ T6479] overlayfs: failed to clone upperpath [ 286.324671][ T6491] loop7: detected capacity change from 0 to 128 [ 288.674297][ T26] audit: type=1800 audit(1794009139.109:18): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.543" name="file2" dev="sda1" ino=2047 res=0 errno=0 [ 292.460759][ T6536] loop6: detected capacity change from 0 to 2048 [ 294.113403][ T6536] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 296.473191][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.486028][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.579140][ T6586] device bond1 left promiscuous mode [ 296.585217][ T6586] device bond2 left promiscuous mode [ 296.591217][ T6586] device bond3 left promiscuous mode [ 296.596555][ T6586] device veth0_to_bond left promiscuous mode [ 296.603880][ T6586] device bond4 left promiscuous mode [ 296.609714][ T6586] device bond5 left promiscuous mode [ 296.615728][ T6586] device bond6 left promiscuous mode [ 297.276269][ T6594] loop6: detected capacity change from 0 to 8 [ 297.417322][ T6594] squashfs image failed sanity check [ 299.504517][ T6618] ip_tables: iptables: counters copy to user failed while replacing table [ 300.065279][ T6610] device syzkaller0 entered promiscuous mode [ 301.071140][ T6628] loop7: detected capacity change from 0 to 512 [ 301.315036][ T6628] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 301.385075][ T6628] EXT4-fs (loop7): 1 truncate cleaned up [ 301.576929][ T6628] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,jqfmt=vfsv1,. Quota mode: none. [ 302.237935][ T6628] EXT4-fs error (device loop7): __ext4_expand_extra_isize:5893: inode #12: comm syz.7.573: bad extra_isize 62 (inode size 256) [ 302.251835][ T6628] EXT4-fs (loop7): Remounting filesystem read-only [ 303.289270][ T6650] netlink: 'syz.5.576': attribute type 9 has an invalid length. [ 303.297071][ T6650] netlink: 'syz.5.576': attribute type 6 has an invalid length. [ 303.525521][ T6651] loop7: detected capacity change from 0 to 256 [ 305.508723][ T6667] ubi0: attaching mtd0 [ 305.523418][ T6667] ubi0: scanning is finished [ 305.528430][ T6667] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 305.883684][ T6667] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 307.858544][ T26] audit: type=1800 audit(1794009158.299:19): pid=6681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.586" name="file2" dev="sda1" ino=2047 res=0 errno=0 [ 307.908867][ T6673] loop7: detected capacity change from 0 to 4096 [ 308.195703][ T6688] netlink: 'syz.3.587': attribute type 9 has an invalid length. [ 308.203675][ T6688] netlink: 'syz.3.587': attribute type 6 has an invalid length. [ 308.214312][ T6688] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 308.838713][ T6690] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 314.285113][ T6746] ip_tables: iptables: counters copy to user failed while replacing table [ 315.225301][ T6736] netlink: 12 bytes leftover after parsing attributes in process `syz.7.602'. [ 315.674386][ T6753] netlink: 28 bytes leftover after parsing attributes in process `syz.7.602'. [ 317.147276][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.162932][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.955009][ T6793] loop7: detected capacity change from 0 to 512 [ 320.245159][ T6800] loop6: detected capacity change from 0 to 2048 [ 320.331488][ T6800] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 320.529560][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.631534][ T6808] device netdevsim3 left promiscuous mode [ 320.642374][ T6808] device bond1 left promiscuous mode [ 321.508119][ T6813] loop7: detected capacity change from 0 to 512 [ 323.246966][ T6855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.618'. [ 323.367764][ T6853] sctp: failed to load transform for md5: -2 [ 325.299268][ T6877] loop6: detected capacity change from 0 to 128 [ 325.388072][ T6877] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 327.078217][ T6890] loop6: detected capacity change from 0 to 512 [ 327.297459][ T6890] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 327.967450][ T6890] EXT4-fs (loop6): 1 truncate cleaned up [ 327.983530][ T6890] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,jqfmt=vfsv1,. Quota mode: none. [ 328.749080][ T6902] EXT4-fs error (device loop6): __ext4_expand_extra_isize:5893: inode #12: comm syz.6.636: bad extra_isize 62 (inode size 256) [ 328.763270][ T6902] EXT4-fs (loop6): Remounting filesystem read-only [ 333.922391][ T6948] loop7: detected capacity change from 0 to 512 [ 333.991155][ T6948] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 334.042743][ T6948] EXT4-fs (loop7): 1 truncate cleaned up [ 334.076632][ T6948] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,auto_da_alloc,debug_want_extra_isize=0x0000000000000080,errors=remount-ro,jqfmt=vfsv1,. Quota mode: none. [ 336.714636][ T6978] loop7: detected capacity change from 0 to 1024 [ 337.115986][ T6975] netlink: 'syz.7.654': attribute type 9 has an invalid length. [ 337.123842][ T6975] netlink: 'syz.7.654': attribute type 6 has an invalid length. [ 337.133140][ T6975] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 337.905134][ T6992] xt_hashlimit: max too large, truncated to 1048576 [ 337.912204][ T6992] xt_hashlimit: overflow, try lower: 18446744073709551613/8 [ 339.908161][ T7003] 9pnet: Insufficient options for proto=fd [ 340.710842][ T7015] loop7: detected capacity change from 0 to 164 [ 340.743634][ T7019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.657'. [ 341.877894][ T7023] rock: directory entry would overflow storage [ 341.884520][ T7023] rock: sig=0x4f50, size=4, remaining=3 [ 341.890208][ T7023] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 342.176904][ T7027] loop6: detected capacity change from 0 to 2048 [ 342.275468][ T7027] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 342.326734][ T4267] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 342.787625][ T4267] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 342.805821][ T4267] usb 8-1: can't read configurations, error -61 [ 343.006584][ T4267] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 344.506467][ T4267] usb 8-1: device descriptor read/all, error -71 [ 344.516238][ T4267] usb usb8-port1: attempt power cycle [ 344.985524][ T7061] fuse: Bad value for 'fd' [ 347.300897][ T7059] netlink: 28 bytes leftover after parsing attributes in process `syz.3.678'. [ 349.921830][ T7099] loop7: detected capacity change from 0 to 128 [ 350.064666][ T7103] 9pnet: Insufficient options for proto=fd [ 351.607214][ T7115] 9pnet: Insufficient options for proto=fd [ 355.859064][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 355.866268][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): eql: link becomes ready [ 355.877073][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 355.884593][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): wpan0: link becomes ready [ 355.892281][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 355.899990][ T7155] IPv6: ADDRCONF(NETDEV_CHANGE): wpan1: link becomes ready [ 355.907560][ T7155] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 357.606558][ T7165] netlink: 28 bytes leftover after parsing attributes in process `syz.3.692'. [ 358.568493][ T7191] loop7: detected capacity change from 0 to 1024 [ 359.082527][ T7197] netlink: 'syz.7.710': attribute type 9 has an invalid length. [ 359.090336][ T7197] netlink: 'syz.7.710': attribute type 6 has an invalid length. [ 359.107207][ T7197] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 361.413556][ T7222] netlink: 28 bytes leftover after parsing attributes in process `syz.5.717'. [ 365.148728][ T7256] loop7: detected capacity change from 0 to 1024 [ 365.253688][ T7260] netlink: 28 bytes leftover after parsing attributes in process `syz.6.728'. [ 365.613853][ T7263] netlink: 'syz.7.726': attribute type 9 has an invalid length. [ 365.621638][ T7263] netlink: 'syz.7.726': attribute type 6 has an invalid length. [ 365.631009][ T7263] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 369.182665][ T7294] loop7: detected capacity change from 0 to 128 [ 370.314947][ T1348] Bluetooth: hci6: command 0x0406 tx timeout [ 371.298111][ T7308] netlink: 28 bytes leftover after parsing attributes in process `syz.3.742'. [ 377.268860][ T7346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.753'. [ 377.451894][ T7349] 9pnet: Insufficient options for proto=fd [ 378.306992][ T7365] ip_tables: iptables: counters copy to user failed while replacing table [ 378.537723][ T1435] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.547471][ T1435] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.328702][ T7391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'. [ 382.424699][ T7401] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 382.751977][ T7402] loop7: detected capacity change from 0 to 128 [ 384.283323][ T7415] 9pnet: Insufficient options for proto=fd [ 384.308470][ T7411] netlink: 'syz.5.762': attribute type 1 has an invalid length. [ 384.372848][ T7411] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.575662][ T7415] bond2: (slave veth0_to_bond): making interface the new active one [ 385.262839][ T7415] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 385.899177][ T4262] Bluetooth: hci7: command 0x0406 tx timeout [ 386.110400][ T6295] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 386.143984][ T7411] device bond2 entered promiscuous mode [ 386.161131][ T7411] device veth0_to_bond entered promiscuous mode [ 387.127155][ T27] INFO: task syz.4.396:5899 blocked for more than 144 seconds. [ 387.135309][ T27] Not tainted syzkaller #0 [ 387.212877][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.7.777'. [ 387.214437][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 387.282000][ T27] task:syz.4.396 state:D stack:26832 pid: 5899 ppid: 4190 flags:0x00004004 [ 387.312130][ T27] Call Trace: [ 387.323367][ T27] [ 387.336340][ T27] __schedule+0x11c3/0x4350 [ 387.340922][ T27] ? release_firmware_map_entry+0x190/0x190 [ 387.356421][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 387.362447][ T27] ? __lock_acquire+0x7d40/0x7d40 [ 387.376350][ T27] ? lock_chain_count+0x20/0x20 [ 387.381448][ T27] ? _raw_spin_lock_irq+0xb7/0xf0 [ 387.396693][ T27] ? _raw_spin_lock_irqsave+0x100/0x100 [ 387.402280][ T27] schedule+0x11b/0x1e0 [ 387.426383][ T27] schedule_preempt_disabled+0xf/0x20 [ 387.431804][ T27] rwsem_down_read_slowpath+0x53e/0x9b0 [ 387.446391][ T27] ? down_write_killable_nested+0x90/0x90 [ 387.452162][ T27] ? read_lock_is_recursive+0x10/0x10 [ 387.466446][ T27] ? __rwlock_init+0x140/0x140 [ 387.471257][ T27] ? do_quotactl+0x760/0x760 [ 387.475855][ T27] down_read+0x96/0x2e0 [ 387.499433][ T27] ? do_quotactl+0x760/0x760 [ 387.504070][ T27] iterate_supers+0xa4/0x1d0 [ 387.516356][ T27] __se_sys_quotactl+0x33b/0x6f0 [ 387.521334][ T27] ? __x64_sys_quotactl+0xa0/0xa0 [ 387.536388][ T27] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 387.542416][ T27] ? lock_chain_count+0x20/0x20 [ 387.556381][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 387.561622][ T27] do_syscall_64+0x4c/0xa0 [ 387.566055][ T27] ? clear_bhb_loop+0x30/0x80 [ 387.586369][ T27] ? clear_bhb_loop+0x30/0x80 [ 387.591099][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 387.616407][ T27] RIP: 0033:0x7ff646113b19 [ 387.620866][ T27] RSP: 002b:00007ff644349028 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 387.646362][ T27] RAX: ffffffffffffffda RBX: 00007ff64639a090 RCX: 00007ff646113b19 [ 387.654376][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102 [ 387.676369][ T27] RBP: 00007ff6461abb70 R08: 0000000000000000 R09: 0000000000000000 [ 387.684383][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.703935][ T27] R13: 00007ff64639a128 R14: 00007ff64639a090 R15: 00007ffcc06beb18 [ 387.723798][ T27] [ 387.820083][ T27] [ 387.820083][ T27] Showing all locks held in the system: [ 387.837149][ T27] 1 lock held by khungtaskd/27: [ 387.853497][ T27] #0: ffffffff8d11efa0 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 387.880650][ T27] 2 locks held by getty/3957: [ 387.885885][ T27] #0: ffff88807ed00098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 387.910849][ T27] #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x594/0x1a50 [ 387.921528][ T27] 1 lock held by syz-executor/4188: [ 387.927157][ T27] #0: ffff88805d8f20e0 (&type->s_umount_key#54){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 387.937552][ T27] 1 lock held by syz.4.396/5899: [ 387.942507][ T27] #0: ffff88805d8f20e0 (&type->s_umount_key#54){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 387.952727][ T27] 1 lock held by syz.0.439/6062: [ 387.957705][ T27] #0: ffff88805d8f20e0 (&type->s_umount_key#54){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 387.967957][ T27] 3 locks held by kworker/u4:15/6066: [ 387.973329][ T27] #0: ffff8880b8f3a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 387.983276][ T27] #1: ffff8880b8f27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x4c3/0x810 [ 387.994783][ T27] #2: ffff8880b8f27888 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: enqueue_task+0x23b/0x280 [ 388.006021][ T27] [ 388.010984][ T27] ============================================= [ 388.010984][ T27] [ 388.019910][ T27] NMI backtrace for cpu 1 [ 388.024259][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 388.031449][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 388.041496][ T27] Call Trace: [ 388.044759][ T27] [ 388.047675][ T27] dump_stack_lvl+0x188/0x250 [ 388.052492][ T27] ? show_regs_print_info+0x20/0x20 [ 388.057692][ T27] ? load_image+0x410/0x410 [ 388.062208][ T27] ? tick_nohz_tick_stopped+0x7b/0xb0 [ 388.067587][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 388.072689][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 388.077616][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 388.083766][ T27] ? _printk+0xda/0x130 [ 388.087989][ T27] ? load_image+0x410/0x410 [ 388.092505][ T27] ? load_image+0x410/0x410 [ 388.097005][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 388.103074][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 388.109047][ T27] watchdog+0xe1b/0xe60 [ 388.113221][ T27] kthread+0x42e/0x520 [ 388.117300][ T27] ? hungtask_pm_notify+0x40/0x40 [ 388.122333][ T27] ? kthread_blkcg+0xd0/0xd0 [ 388.126934][ T27] ret_from_fork+0x1f/0x30 [ 388.131369][ T27] [ 388.135704][ T27] Sending NMI from CPU 1 to CPUs 0: [ 388.141695][ C0] NMI backtrace for cpu 0 [ 388.141706][ C0] CPU: 0 PID: 6066 Comm: kworker/u4:15 Not tainted syzkaller #0 [ 388.141723][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 388.141732][ C0] Workqueue: bat_events batadv_nc_worker [ 388.141752][ C0] RIP: 0010:lockdep_hardirqs_on_prepare+0x305/0x7c0 [ 388.141773][ C0] Code: 61 00 48 8d b3 e8 0a 00 00 48 ba 00 00 00 00 00 fc ff df e9 66 ff ff ff 4c 8d bb d0 0a 00 00 4c 89 f8 48 c1 e8 03 0f b6 04 10 <84> c0 0f 85 79 03 00 00 41 83 3f 00 0f 84 25 01 00 00 41 0f b6 04 [ 388.141785][ C0] RSP: 0018:ffffc900032ff9e0 EFLAGS: 00000806 [ 388.141796][ C0] RAX: 0000000000000000 RBX: ffff8880219b3b80 RCX: ffffffff815db004 [ 388.141807][ C0] RDX: dffffc0000000000 RSI: ffff8880219b4668 RDI: ffffffff910471b0 [ 388.141817][ C0] RBP: ffffc900032ffaa0 R08: ffffffff910471b7 R09: 1ffffffff2208e36 [ 388.141827][ C0] R10: dffffc0000000000 R11: fffffbfff2208e37 R12: ffff8880219b46e0 [ 388.141837][ C0] R13: 0000000000000002 R14: 1ffff110043368cd R15: ffff8880219b4650 [ 388.141847][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 388.141859][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 388.141870][ C0] CR2: 00007f1e64f9f2f8 CR3: 000000002c417000 CR4: 00000000003506f0 [ 388.141882][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 388.141891][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 388.141899][ C0] Call Trace: [ 388.141904][ C0] [ 388.141911][ C0] ? lock_chain_count+0x20/0x20 [ 388.141927][ C0] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 388.141942][ C0] ? __local_bh_enable_ip+0xd7/0x1c0 [ 388.141957][ C0] ? batadv_nc_purge_paths+0x305/0x3a0 [ 388.141971][ C0] trace_hardirqs_on+0x67/0x80 [ 388.141985][ C0] __local_bh_enable_ip+0x136/0x1c0 [ 388.141998][ C0] ? _local_bh_enable+0xa0/0xa0 [ 388.142011][ C0] ? do_raw_spin_unlock+0x11d/0x230 [ 388.142024][ C0] ? batadv_nc_purge_paths+0x305/0x3a0 [ 388.142036][ C0] ? batadv_nc_purge_paths+0x3a0/0x3a0 [ 388.142049][ C0] batadv_nc_purge_paths+0x305/0x3a0 [ 388.142062][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 388.142079][ C0] batadv_nc_worker+0x2e1/0x5c0 [ 388.142096][ C0] process_one_work+0x867/0xff0 [ 388.142115][ C0] ? worker_detach_from_pool+0x240/0x240 [ 388.142129][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 388.142145][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 388.142158][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 388.142179][ C0] ? wq_worker_running+0x97/0x170 [ 388.142193][ C0] worker_thread+0xad7/0x12a0 [ 388.142211][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 388.142228][ C0] kthread+0x42e/0x520 [ 388.142240][ C0] ? rcu_lock_release+0x20/0x20 [ 388.142253][ C0] ? kthread_blkcg+0xd0/0xd0 [ 388.142265][ C0] ret_from_fork+0x1f/0x30 [ 388.142284][ C0] [ 388.144599][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 388.426201][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 388.433380][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 388.443437][ T27] Call Trace: [ 388.446703][ T27] [ 388.449616][ T27] dump_stack_lvl+0x188/0x250 [ 388.454362][ T27] ? show_regs_print_info+0x20/0x20 [ 388.459545][ T27] ? load_image+0x410/0x410 [ 388.464037][ T27] panic+0x2f8/0x850 [ 388.467908][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 388.473517][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 388.477996][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 388.483521][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 388.489674][ T27] watchdog+0xe5a/0xe60 [ 388.493825][ T27] kthread+0x42e/0x520 [ 388.497875][ T27] ? hungtask_pm_notify+0x40/0x40 [ 388.502876][ T27] ? kthread_blkcg+0xd0/0xd0 [ 388.507445][ T27] ret_from_fork+0x1f/0x30 [ 388.511847][ T27] [ 388.515094][ T27] Kernel Offset: disabled [ 388.519486][ T27] Rebooting in 86400 seconds..