last executing test programs: 2m56.342003595s ago: executing program 4 (id=3214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 2m56.075781976s ago: executing program 4 (id=3217): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x4844}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)=ANY=[@ANYBLOB='d\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b757000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x1, 0x106) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) 2m55.558700569s ago: executing program 4 (id=3218): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d00000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, 0x0, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xfffffffe}, 0x1c) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x9, 0x0, 0x0) 2m54.356783487s ago: executing program 4 (id=3220): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x31001, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2205080, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r2, @ANYRES16=r1, @ANYRESHEX=r3, @ANYBLOB="2c75699748", @ANYRES64=r1, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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") umount2(&(0x7f0000000040)='.\x00', 0x2) 2m54.061528668s ago: executing program 4 (id=3222): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00m\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) 2m53.367762472s ago: executing program 4 (id=3223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000640)={0x24, &(0x7f00000002c0)={0x20, 0xb, 0xba, {0xba, 0x31, "de4bf222bdaab6ea54d4c7618e5a82ec1bf507ff0df9cdf932d037723558d4d4162563b3f959ac286ca82a5ae95a82bd31be8052fb5cfdc174ee0d70bb86ede943f6a82f725f38c1ad84f82e8bcd78d81c3478d7131a06dcec7944633753726f956b62f4db1b70b3e3247c11e045eee8ced791043ae25675461749e2de7ef1d2592c4e8f9a87b4b3ae62aef3e876aef65bfd670661e7c2cb7f5f1d0fb2c0c303da8ae18f92fe8c292c73d15e04252a38321a6cfde09866ca"}}, 0x0, &(0x7f0000000580)={0x0, 0x22, 0xc, {[@global=@item_4={0x3, 0x1, 0x9, "ee9e0ee7"}, @global=@item_4={0x3, 0x1, 0x1, 'yzl\r'}, @local=@item_012={0x1, 0x2, 0x8, "d8"}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4d6, 0xff, 0x1, {0x22, 0x4fc}}}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m51.97699396s ago: executing program 32 (id=3223): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000640)={0x24, &(0x7f00000002c0)={0x20, 0xb, 0xba, {0xba, 0x31, "de4bf222bdaab6ea54d4c7618e5a82ec1bf507ff0df9cdf932d037723558d4d4162563b3f959ac286ca82a5ae95a82bd31be8052fb5cfdc174ee0d70bb86ede943f6a82f725f38c1ad84f82e8bcd78d81c3478d7131a06dcec7944633753726f956b62f4db1b70b3e3247c11e045eee8ced791043ae25675461749e2de7ef1d2592c4e8f9a87b4b3ae62aef3e876aef65bfd670661e7c2cb7f5f1d0fb2c0c303da8ae18f92fe8c292c73d15e04252a38321a6cfde09866ca"}}, 0x0, &(0x7f0000000580)={0x0, 0x22, 0xc, {[@global=@item_4={0x3, 0x1, 0x9, "ee9e0ee7"}, @global=@item_4={0x3, 0x1, 0x1, 'yzl\r'}, @local=@item_012={0x1, 0x2, 0x8, "d8"}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4d6, 0xff, 0x1, {0x22, 0x4fc}}}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m38.29567535s ago: executing program 2 (id=3257): syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0xff, 0x654, &(0x7f0000000a40)="$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") setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[], 0x835, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) 2m37.828731162s ago: executing program 2 (id=3260): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00'}, 0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r4, 0x0, '\x00', 0x0, r3, 0x0, 0x80, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2m32.167962305s ago: executing program 2 (id=3269): syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0xff, 0x654, &(0x7f0000000a40)="$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") setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[], 0x835, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) 2m31.699219988s ago: executing program 2 (id=3272): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) setresgid(0xee00, 0xee01, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x31001, 0x0) r0 = getpid() mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2205080, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={0x0, 0x138}, 0x1, 0xe}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r3, @ANYRES16=r2, @ANYRESHEX=r4, @ANYBLOB="2c75699748", @ANYRES64=r2, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSklPY/0vv+33e9+v9vr7v//b/u65v1u+69jV7zf2s9ax71lzz3PdzXfP80HNUvRb1azcjIvEvgb9+SRFCxAghhgkhbhBCBEKISvGV4q8cL6Ag5V97EvbnejT9WnfAriWef97G88/beP55G88/b+P55208/7yN55+38fwZy8u2zyl2I6+8u/j9/7yMX///F8ktP/mbjeVv7vU/SOH55208/7yN55+38fzzNp5/3sbz/9+v1n9xjOeft/H8GcvLrvX7z7yu7brWv3+MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxvKGc/4qLYT4t/217osxxhhjjDHGGGN/Hp//WnfAGGOMMcYYY4yx//dASKGEFoHIJ/KLGFFAxIrrRJy4XhQUN4iIuFHEi5tEIXGzKCyKiKKimEgQxUUJYQQKK0iEoqQoJaLiFlFa3CoSRRlRVpQTTpQXSeI2UUHcLiqKO0QlcaeoLO4SVURVUU1UF3eLGuIeUVPUErXFvaKOqCvqifriPtFA3C8aigdEI/GgaCweEk3Ew6KpeEQ0E4+K5uIx0UI8LlqKJ0Qr0Vq0EW1Fu/+r/FdEX/Gq6Cf6ixQxQAwUr4lBYrAYIoaKYeJ1MVy8IUaIN0WqGClGibfEaPG2GCPeEWPFODFevCsmiIlikpgspoipIk28J6aJ98V08YGYIWaKWWK2SBdzxFzxoZgn5osF4iOxUHwsFonFYolYKjLEJyJTLBNZ4lOxXHwmssUKsVKsEqvFGrFWrBPrxQaxUWwSm8UWsVVsE9vF52KH2Cl2id1ij9gr9okvxH7xpTggvhI54uv/Yf7Z/5DfCwQIkCBBg4Z8kA9iIAZiIRbiIA4KQkGIQATiIR4KQSEoDIWhKBSFBEiAElACEBAICEpCSYhCFEpDaUiERCgLZcGBgyRIggpwO1SEilAJKkFlqAxVoCpUhepQHWpADagJNaE21IY6UAfqQT24D+6D+6EhNIRG0AgaQ2NoAk2gKTSFZtAMmkNzaAEtoCW0hFbQCtpAG2gH7aA9tIcO0AE6QSfoDJ2hC3SBZEiGrtAVukE36A7doQf0gJ7QE3pBb+gNr8Ar8Cq8Cv2hjhwAA2EgDIJBMASGwlB4HYbDG/AGvAmpMBJGwVvwFrwNY+AMjIVxMB7GQw05ESbBZCA5FdIgDabBNJgO02EGzISZMBvSYQ7MhbkwD+bDfPgIFsLH8DEshsWwFDIgAzJhGWRBFiyHs5ANK2AlrILVsAZWwzpYD+tgI2yCjbAFtsA22Aafw+ewE3bCbtgNe2EvfAFfwJfwJaRCDuTAQTgIh+AQHIbDkAu5cASOwFE4CsfgGByH43ACTsIpOAmn4TScgbNwDs7BBbgAF+GlhO+a7y2zIVXIK7TUMp/MJ2NkjIyVsTJOxsmCsqCMyIiMl/GykCwkC8vCsqgsKhNkgiwhS0iUKEmGsqQsKaMyKkvL0jJRJsqysqx00skkmSQryAqyoqwoK8k7ZWV5l6wiq8qOrrqsLmvITq6mrCVry9qyjqwr68n6sr5sIBvIhrKhbCQbycaysWwiH5ZN5QAYAo/KK5NpIUdCSzkKWsnWso1sK9+GJ2V7OQY6yI6yk3xajoOx0EW2d8nyOdlVToJu8gU5GV6UPeRU6Clflr1kb9lHviL7yg6un+wvZ8AAOVDOhkFysBwih8p5UFdemVg9+aZMlSPlKPmWXApvyzHyHTlWjpPj5btygpwoJ8nJcoqcKtPke3KafF9Olx/IGXKmnCVny3Q5R86VH8p5cr5cID+SC+XHcpFcLJfIpTJDfiIz5TKZJT+Vy+VnMluukCvlKrlarpFr5Tq5Xm6QG+UmuVlukVvlNrldfi53yJ1yl9wt98i9cp/8Qu6XX8oD8iuZI7+WB+Vf5CH5jTwsv5W58jt5RH4vj8of5DH5ozwuf5In5El5Sv4sT8tf5Bl5Vp6T5+UF+au8KC/Jy9JLoUBJpZRWgcqn8qsYVUDFqutUnLpeFVQ3qIi6UcWrm1QhdbMqrIqooqqYSlDFVQllFCqrSIWqpCqlouoWVVrdqhJVGVVWlVNOlVdJ6jZVQd2uKqo7VCV1p6qs7lJVVFVVTVVXd6sa6h5VU9VStdW9qo6qq+qp+uo+1UDdrxqqB1Qj9aBqrB5STdTDqql6RDVTj6rm6jHVQj2uWqonVCvVWrVRbVU79aRqr55SHVRH1Uk9rTqrZ1QX9axKVs+prup51U29oLqrF1UP9ZLqqV5WvVRv1UddUpeVV/1Uf5WiBqiB6jU1SA1WQ9RQNUy9roarN9QI9aZKVSPVKPWWGq3eVmPUO2qsGqfGq3fVBDVRTVKT1RQ1VaWp99Q09b6arj5QM9RMNUvNVulqjhryt0oL/hv57/+T/BG/Pfs2tV19rnaonWqX2q32qL1qn9qn9qv96oA6oHJUjjqoDqpD6pA6rA6rXJWrjqgj6qg6qo6pY+q4Oq5OqJPqvPpZnVa/qDPqrDqrzqsL6oK6+LefgdCgpVZa60Dn0/l1jC6gY/V1Ok5frwvqG3RE36jj9U26kL5ZF9ZFdFFdTCfo4rqENhq11aRDXVKX0lF9iy6tb9WJuowuq8tpp8vrJH3bv5z/R/210+10e91ed9AddCfdSXfWnXUX3UUn62TdVXfV3XQ33V131z10D91T99S9dC/dR/fRfXVf3U/30yk6RQ/Ur+lBerAeoofqYfp1PVwP1yP0CJ2qU/UoPUqP1qP1GD1Gj9Vj9Xg9Xk/QE/QkPUlP0VN0mk7T0/Q0PV1P1zP0DD1Lz9LpOl3P1XP1PD1PL9AL9EK9UC/Si/QSvURn6AydqTN1ls7Sy/Vyna1X6BV6lV6l1+g1ep1epzfoDXqT3qS36C06W2/X2/UOvUPv0rv0Hr1H79P79H69Xx/QB3SOztEH9UF9SB/Sh/Vhnatz9RF9RB/VR/UxfUwf18f1CX1Cn9Kn9Gl9Wp/RZ/Q5fU5f0Bf0RX1RX9aXr1z2BTKQgQ50kC/IF8QEMUFsEBvEBXFBwaBgEAkiQXwQHxQKbg4KB0WCokGxICEoHpQITICBDSgIg5JBqSAa3BKUDm4NEoMyQdmgXOCC8kFScFtQIbg9qBjcEVQK7gwqB3cFVYKqQbWgenB3UCO4J6gZ1ApqB/cGdYK6Qb2gfnBf0CC4P2gYPBA0Ch4MGgcPBU2Ch4OmwSNBs+DRoHnwWNAieDxoGTwRtApaB22CtkG7P7W+92eKPOX6mf4mxQwwA81rZpAZbIaYoWaYed0MN2+YEeZNk2pGmlHmLTPavG3GmHfMWDPOjDfvmglmoplkJpspZqpJM++ZaeZ9M918YGaYmWaWmW3SzRwz13xo5pn5ZoH5yCw0H5tFZrFZYpaaDPOJyTTLTJb51Cw3n5lss8KsNKvMarPGrDXrzHqzwWw0m8xms8VsNdvMdvO52WF2ml1mt9lj9pp95guz33xpDpivTI752hw0fzGHzDfmsPnW5JrvzBHzvTlqfjDHzI/muPnJnDAnzSnzszltfjFnzFlzzpw3F8yv5qK5ZC4bf+Xi/srLO2rUmA/zYQzGYCzGYhzGYUEsiBGMYDzGYyEshIWxMBbFopiACVgCS+AVhIQlsSRGMYqlsTQmYiKWxbLo0GESJmEFrIAVsSJWwkpYGStjFayC1bAa3o134z14D9bCWngv3ot1sS7Wx/rYABtgQ2yIjbARNsbG2ASbYFNsis2wGTbH5tgCW2BLbImtsBW2wTbYDtthe2yPHbADdsJO2Bk7YxfsgsmYjF2xK3bDbtgdu2MP7IE9sSf2wl7YB/tgX+yL/bAfpmAKDsSBOAgH4RAcgsNwGA7H4TgCR2AqpuIoHIWjcTSOwTE4FsfheHwXJ+BEnISTcQpOxTRMw2k4DafjdJyBM3AWzsJ0TMe5OBfn4TxcgAtwIS7ERbgIl+ASzMAMzMRMzMIsXI7LMRuzcSWuxNW4GtfiWlyP63EjbsTNuBm34lbcjttxB+7AXbgL9+Ae3If7cD/uxwN4AHMwBw/iQTyEh/AwHsZczMUjeASP4lE8hsfwOB7HE3gCT+EpPI2n8QyewXN4Di/gr3gRL+Fl9BhjpYi119k4e70taG+wMbaA/fu4qC1mE2xxW8IaW9gW+YcYrbWJtowta8tZZ8vbJHvb7+IqtqqtZqvbu20Ne4+t+bu4gb3fNrQP2Eb2QVvf3vcPcWP7kG1iH7dN7RO2mW1tm9u2toV93La0T9hWtrVtY9vazvYZ28U+a5Ptc7arff53caZdZtfbDXaj3WT32y/tOXveHrU/2Av2V9vP9rfD7Ot2uH3DjrBv2lQ78nfxePuunWAn2kl2sp1ip/4unmVn23Q7x861H9p5dv7v4gz7iV1os+wiu9gusUt/i6/0lGU/tcvtZzbbrrAr7Sq72q6xa+26f+91ld1it9ptdp/9wu6wO+0uu9vusXt/i6+cxwH7lc2xX9sj9nt7yH5jD9tjNtd+91t85fyO2R/tcfuTPWFP2lP2Z3va/mLP2LO/nf+Vc//ZXrKXrbeCgCQp0hRQPspPMVSAYuk6iqPrqSDdQBG6keLpJipEN1NhKkJFqRglUHEqQYaQLBGFVJJKUZRuodJ0KyVSGSpL5chReUqi26gC3U4V6Q6qRHdSZbqLqlBVqkbV6W6qQfdQTapFteleqkN1qR7Vp/uoAd1PDekBakQPUmN6iJrQw9SUHqFm9Cg1p8eoBT1OLekJakWtqQ21pXb0JLWnp6gDdaRO9DR1pmeoCz1LyfQcdaXnqRu9QN3pRepBL1FPepl6UW/qQ69QX3qV+lF/SqEBNJBeo0E0mIbQUBpGr9NweoNG0JuUSiNpFL1Fo+ltGkPv0FgaR+PpXZpAE2kSTaYpNJXS6D2aRu/TdPqAZtBMmkWzKZ3m0Fz6kObRfFpAH9FC+pgW0WJaQkspgz6hTFpGWfQpLafPKJtW0EpaRatpDa2ldbSeNtBG2kSbaQttpW20nT6nHbSTdtFu2kN7aR99QfvpSzpAX1EOfU0H6S90iL6hw/Qt5dJ3dIS+p6P0Ax2jH+k4/UQn6CSdop/pNP1CZ+gsnaPzdIF+pYt0iS6TJxFCKEMV6jAI84X5w5iwQBgbXhfGhdeHBcMbwkh4Yxgf3hQWCm8OC4dFwqJhsTAhLB6WCE2IoQ0pDMOSYakwGt4Slg5vDRPDMmHZsFzowvJhUnhbWCG8PawY3hFWCu8MK4d3hVXCquHjD1YP7w5rhPeENcNaYe3w3rBOWDesF9YP7wsbhPeHDcMHwkbhg2HF8KGwSfhw2DR8JGwWPho2Dx8LW4SPhy3DJ8JWYeuwTdg2bBc+GbYPnwo7hB3DTuHTYefwmbBL+GyYHD4Xdg2f/8PjKeGAcGD4Wvha6P0Dakl0aTQj+kk0M7osmhX9NLo8+lk0O7oiujK6Kro6uia6Nrouuj66Iboxuim6ObolujW6Lep9/fzCgZNOOe0Cl8/ldzGugIt117k4d70r6G5wEXeji3c3uULuZlfYFXFFXTGX4Iq7Es44dNaRC11JV8pF3S2utLvVJboyrqwr55wr75JcW9fOtXPt3VOug+voOrmn3dPuGfeMe9Y9655zXd3zrpt7wXV3L7oe7iX3knvZ9XK9XR/3iuvrXnX9XH+X4lLcQDfQDXKD3BA3xA1zw9xwN9yNcCNcqkt1o9woN9qNdmPcGDfWjXXj3Xg3wU1wk9wkN8VNcWkuzU1z09x0N93NcDPcLDfLpbt0N9fNdfPcPLfALXALExe6RW6RW+KWuAyX4TJdpstyWW65W+6yXbZb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+F2uF1ul9vj9rh9bp/b7/a7A+6Ay3E57qA76A65Q+6w+9bluu/cEfe9O+p+cMfcj+64+8mdcCfdKfezO+1+cWfcWXfOnXcX3K/uorvkLjvv0iLvRaZF3o9Mj3wQmRGZGZkVmR1Jj8yJzI18GJkXmR9ZEPkosjDycWRRZHFkSWRpJCPySSQzsiySFfk0sjzyWSQ7siKyMrIqsjqyJuJ98R2hL+lL+ai/xZf2t/pEX8aX9eW88+V9kr/NV/C3+4r+Dl/J3+kr+7t8FV/VV/NP+Fa+tW/j2/p2/knf3j/lO/iOvpN/2nf2z/gu/lmf7J/zXf3zvpt/wXf3L/oe/iXf07/se/nevo9/xff1r/p+vr9P8QP8QP+aH+QH+yF+qB/mX/fD/Rt+hH/Tp/qRfpR/y4/2b/sx/h0/1o/z4/27foKf6Cf5yX6Kn+rT/Ht+mn/fT/cf+Bl+pp/lZ/t0P8fP9R/6eX6+X+A/8gv9x36RX+yX+KU+w3/iM/0yn+U/9cv9Zz7br/Ar/Sq/2q/xa/06v95v8Bv9Jr/Zb/Fb/Ta/3X/ud/idfpff7ff4vX6f/8Lv91/6A/4rn+O/9gf9X/wh/40/7L/1uf47f8R/74/6H/wx/6M/7n/yJ/xJf8r/7E/7X/wZf9af8+f9Bf+rv+gv+cv8P2uMMcYYY/8t6g+OD/gn35N/W1cMFEJcv7NY7n+subnwX/eDZULniBDiuf49H/23VadOSkrK3x6brURQarEQInI1P5+4Gq8QncQzIll0FBX+aX+DZe8L9Af1o3cKEft3OTHiany1/u3/Sf0nnx6fWTk8F/9f1F8sRGKpqzkFxNX4av2K/0n9Iu3/oP8C36QJ0eHvcuLE1fhq/STxlHheJP/DIxljjDHGGGOMsb8aLKt1/6P75yv35wn6ak5+cTX+o/tzxhhjjDHGGGOMXXsv9u7z7JPJyR2784Y3vOHNv2+u9V8mxhhjjDHG2J/t6kX/te6EMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhjLu/5/fJzYtT5HxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhj7Fr7PwEAAP//SOc8Mw==") syz_pidfd_open(r0, 0x0) open(0x0, 0x14507e, 0x0) io_setup(0xed, &(0x7f0000000600)) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m31.211278411s ago: executing program 2 (id=3274): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m26.275219399s ago: executing program 2 (id=3281): syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0xff, 0x654, &(0x7f0000000a40)="$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") setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[], 0x835, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) 2m25.887967222s ago: executing program 33 (id=3281): syz_mount_image$hfsplus(&(0x7f00000002c0), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0xff, 0x654, &(0x7f0000000a40)="$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") setxattr$trusted_overlay_upper(&(0x7f00000003c0)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000000)=ANY=[], 0x835, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) 1m36.34860575s ago: executing program 6 (id=3283): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) setresgid(0xee00, 0xee01, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x31001, 0x0) r0 = getpid() mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2205080, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={0x0, 0x138}, 0x1, 0xe}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r3, @ANYRES16=r2, @ANYRESHEX=r4, @ANYBLOB="2c75699748", @ANYRES64=r2, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x81, 0x14f5, &(0x7f0000001580)="$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") syz_pidfd_open(r0, 0x0) open(0x0, 0x14507e, 0x0) io_setup(0xed, &(0x7f0000000600)) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 1m34.526235441s ago: executing program 6 (id=3389): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[], 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r4, r6, 0x1, 0x0, @void}, 0x10) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r7, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e", 0xf}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d80)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r8}, @IFLA_HSR_SLAVE2={0x8, 0x2, r9}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20}, 0x4000) 1m33.693148015s ago: executing program 6 (id=3390): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m32.96881576s ago: executing program 34 (id=3390): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 46.34552668s ago: executing program 5 (id=3493): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0x84, 0x30, 0x1, 0x5000000, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x7, 0x8}, {}, 0x0, 0xffffffff}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x84}}, 0x0) 45.264618597s ago: executing program 5 (id=3495): r0 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) 43.892032995s ago: executing program 5 (id=3500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f0000000c00)={{0x7, 0x0, 0x400000, 0xfffffff8, 'syz1\x00', 0x1}, 0x0, [0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x204, 0x7ff, 0x2, 0x0, 0x40, 0x0, 0x0, 0x8, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x20000, 0xfffffffffffff4cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe9e, 0x20, 0x0, 0x6, 0x0, 0x8000000000000000, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x0, 0x6]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_FORWARD(r6, 0xc0844123, &(0x7f0000000080)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sysinfo(0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) 40.175639446s ago: executing program 5 (id=3508): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) setresgid(0xee00, 0xee01, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000004c0)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x31001, 0x0) r0 = getpid() mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x2205080, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={0x0, 0x138}, 0x1, 0xe}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r2 = syz_pidfd_open(r0, 0x0) open(0x0, 0x14507e, 0x0) setns(r2, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 39.035398403s ago: executing program 5 (id=3511): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) r8 = dup3(r6, r5, 0x80000) ioctl$NBD_DO_IT(r8, 0xab03) 38.595429736s ago: executing program 5 (id=3515): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24044010) sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}, {0x0}], 0x2}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x20, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4e, 0x4f}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc800}, 0x4040000) r4 = fsmount(r0, 0x0, 0x1) fchdir(r4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) name_to_handle_at(r5, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="080000007d8bf488ece80ee1a0a3a300"/25], 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000340)="0000d0d8e456cd3fac3ebaab802175a4c9fe777818eff7f8b3e1e97b6b3ac909e2da56f8dc87f2bbdfa8090075fc0427316010a5bb3dc516b5e9566a77731191a96ffc66408f14ee1863754f99075cff54f70464d8fc5c0b3f59077720092b492783bc3b9a2ce13b44000000000000a35cc272c81d0e331d9f75e99a2978a8be1b84303673af94b654bb46dbc4e2ee256dafb94f02e127dd9c4c93555d80f37fb000eae17b2e239417c4e220c005b15386c20db23de3523d7182ad01e8457c68952728f9bc7583b7ef9c29bf018a738cf002abfeaff6b631faba683d17ef0cc8169c42e18426127c61b7be5e05ea247f37b6ffece8f795a359c5bcd673cdaac181a33bf34f459cd70db60aa1cd892094b1ff0f6bc55e", 0x116}, {0x0}, {0x0}], 0x3) getpgrp(0xffffffffffffffff) 37.192255584s ago: executing program 35 (id=3515): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x24044010) sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)={0x18, 0x7a, 0x601, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}, {0x0}], 0x2}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x20, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4e, 0x4f}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0xc800}, 0x4040000) r4 = fsmount(r0, 0x0, 0x1) fchdir(r4) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) name_to_handle_at(r5, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="080000007d8bf488ece80ee1a0a3a300"/25], 0x0, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000340)="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", 0x116}, {0x0}, {0x0}], 0x3) getpgrp(0xffffffffffffffff) 8.164549042s ago: executing program 3 (id=3611): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001b40)}}], 0x48}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="5800000010000104f0ffffff000500000000fdff", @ANYRES32=r2, @ANYBLOB="00000000da44000024001a8020000a80140007"], 0x58}}, 0x0) 7.242099928s ago: executing program 3 (id=3615): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x8000f28, 0x8) splice(r3, 0x0, r0, 0x0, 0x80000003, 0x8) write(r1, 0x0, 0x0) 6.739387171s ago: executing program 0 (id=3620): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x5, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x80000}}}, 0x108) 6.430733732s ago: executing program 8 (id=3621): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) accept(r1, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000440)=0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@var={0x2, 0x0, 0x0, 0xe, 0x2}, @volatile={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x2e]}}, 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r7, r6, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) close(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x1000000, &(0x7f0000000080)=ANY=[]) 6.397200013s ago: executing program 0 (id=3622): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x0, 0x9403, 0x3002, 0x2b8, 0x2c0, 0x3d0, 0x3d8, 0x3d8, 0x3d0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x8, 0xfc, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz1\x00', 0x1}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @empty, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0x140b6964c6a3d8d0, 0x1ff0001ff, 0xffffff00, 0xff], 'gre0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x2e, 0x3, 0x2, 0x64}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0xfffffff4, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$bt_hci(r2, 0x0, 0x3, 0x0, &(0x7f0000000680)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'batadv0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xff0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 6.289815593s ago: executing program 1 (id=3623): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) accept(0xffffffffffffffff, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000440)=0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) close(0xffffffffffffffff) 6.208194274s ago: executing program 3 (id=3624): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) r8 = dup3(r6, r5, 0x80000) ioctl$NBD_DO_IT(r8, 0xab03) 6.048657975s ago: executing program 1 (id=3625): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf2555000000080001005c00000008000300", @ANYRES32=r3], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x4044840) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40895}, 0x404c840) 5.751294886s ago: executing program 0 (id=3626): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00m\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) 5.344194399s ago: executing program 8 (id=3627): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x2000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) 4.857459222s ago: executing program 3 (id=3629): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000640)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x455}}, &(0x7f0000000580)={0x0, 0x22, 0xc, {[@global=@item_4={0x3, 0x1, 0x9, "ee9e0ee7"}, @global=@item_4={0x3, 0x1, 0x1, 'yzl\r'}, @local=@item_012={0x1, 0x2, 0x8, "d8"}]}}, &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4d6, 0xff, 0x1, {0x22, 0x4fc}}}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.627970163s ago: executing program 8 (id=3631): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x20040080) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}]}, 0x3c}}, 0x20040054) 4.591296383s ago: executing program 1 (id=3632): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000180a050000000000000000fc010000000900010073797a30"], 0x54}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000007c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000400080005400000000d38001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008330001800a00010072616e67650000000400028008000340000001"], 0xc4}, 0x1, 0x0, 0x0, 0x4040070}, 0x44) 3.884180967s ago: executing program 7 (id=3633): syz_emit_ethernet(0x5e, &(0x7f0000000640)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "c33a10", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast1={0xff, 0x3}, @mcast1}}}}}}, 0x0) 3.851324858s ago: executing program 0 (id=3634): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x4}, 0x8) sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0x40000, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x81}, 0x1c) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000200)=0x8) 3.730621188s ago: executing program 1 (id=3635): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) accept(0xffffffffffffffff, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000440)=0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) close(0xffffffffffffffff) 3.612216119s ago: executing program 7 (id=3636): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x36d}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3.531726099s ago: executing program 1 (id=3637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f0000000c00)={{0x7, 0x0, 0x400000, 0xfffffff8, 'syz1\x00', 0x1}, 0x0, [0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x204, 0x7ff, 0x2, 0x0, 0x40, 0x0, 0x0, 0x8, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x20000, 0xfffffffffffff4cd, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe9e, 0x20, 0x0, 0x6, 0x0, 0x8000000000000000, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x4, 0x0, 0x6]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]}) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_FORWARD(r6, 0xc0844123, &(0x7f0000000080)=0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff01000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sysinfo(0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) 3.530224799s ago: executing program 8 (id=3638): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 3.39365514s ago: executing program 3 (id=3639): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0xc0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r6 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) r8 = dup3(r6, r5, 0x80000) ioctl$NBD_DO_IT(r8, 0xab03) 3.315278091s ago: executing program 7 (id=3640): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000ebff1100000008000300", @ANYRES32=r1, @ANYBLOB="0a00060008021100000100000c0081000500020080000000"], 0x34}, 0x1, 0x0, 0x0, 0x4045}, 0x0) 3.31435859s ago: executing program 8 (id=3641): socket$kcm(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{0x0}], 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8084) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000440)=[{0x3, 0x0, {0x0, 0xf1, 0x3}, {0x2, 0xff, 0x2}, 0xfe, 0x2}, {0x0, 0x3, {0x1, 0x1, 0x2}, {0x4, 0x0, 0x2}, 0x2, 0xfd}, {0x0, 0x2, {0x1, 0x0, 0x4}, {0x0, 0xf0, 0x1}, 0x0, 0xff}], 0x60) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r5, {0xfff8, 0x4}, {0x0, 0xe}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) 808.197465ms ago: executing program 7 (id=3642): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) 469.269497ms ago: executing program 7 (id=3643): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 459.597107ms ago: executing program 3 (id=3644): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1e, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00m\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x8) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) 450.645117ms ago: executing program 0 (id=3645): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7020000000008300000008000300", @ANYRES32=0x0, @ANYBLOB="20000e801c00008018f1028004000200040002cf477ec9"], 0x3c}, 0x1, 0x0, 0x0, 0x24048084}, 0x884) 304.053848ms ago: executing program 1 (id=3646): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x18e88, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @value, @void, @value=r1}, 0x50) 188.157849ms ago: executing program 8 (id=3647): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmmsg$unix(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080}}], 0x1, 0x2000c080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x3c, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 381.85µs ago: executing program 0 (id=3648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) accept(0xffffffffffffffff, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000440)=0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x8, 0x8, 0x90, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x18000}], 0x11}}], 0x2, 0x0) close(0xffffffffffffffff) 0s ago: executing program 7 (id=3649): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001580)=ANY=[@ANYBLOB="3c00000010003b150000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008001c00", @ANYRES32=r2], 0x3c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000002a80), 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)=ANY=[@ANYBLOB="b2f7000000000000"], 0x8) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x58}, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r5, 0x1, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x8d0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r6 = socket(0x23, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000ed0b00070000000000000000000800090000000000090006006e6f6e6500000000080008"], 0x58}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000001c0)='westwood\x00', 0x9) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r10) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000340)={r8, r8, 0x8, 0x1, &(0x7f0000000400)="e6", 0x9, 0x1, 0x7c0, 0x6e6, 0x8b, 0x2, 0x7, 'syz1\x00'}) kernel console output (not intermixed with test programs): to_team: link becomes ready [ 1379.591037][T14638] EXT4-fs (loop3): unmounting filesystem. [ 1379.608337][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1379.651254][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1379.714091][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1379.752130][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1379.796415][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1379.841303][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1379.883658][T15237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1380.424821][T15368] CIFS: iocharset name too long [ 1380.644700][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1380.652684][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1380.676868][T15237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1380.829660][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1380.854639][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1381.029176][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1381.064965][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1381.113440][T15237] device veth0_vlan entered promiscuous mode [ 1381.132082][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1381.182880][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1381.229204][T15378] loop0: detected capacity change from 0 to 4096 [ 1381.258507][T15237] device veth1_vlan entered promiscuous mode [ 1381.314886][T15378] __ntfs_error: 20 callbacks suppressed [ 1381.314901][T15378] ntfs: (device loop0): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1381.334074][T15378] ntfs: (device loop0): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1381.352602][T15378] ntfs: (device loop0): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1381.364876][T15378] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1381.379416][T15360] loop3: detected capacity change from 0 to 32768 [ 1381.387268][T15378] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1381.460517][T15378] ntfs: volume version 3.1. [ 1381.495570][T15360] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 1381.506024][T15378] ntfs: (device loop0): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1381.546324][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1381.569861][T15378] ntfs: (device loop0): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1381.594265][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1381.638489][T15378] ntfs: (device loop0): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1381.656126][T15378] ntfs: (device loop0): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1381.686231][T15237] device veth0_macvtap entered promiscuous mode [ 1381.689744][T15378] ntfs: (device loop0): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1381.726821][T15237] device veth1_macvtap entered promiscuous mode [ 1381.871355][T15237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1381.950394][T15237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1381.986015][T14638] ocfs2: Unmounting device (7,3) on (node local) [ 1382.002388][T15237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.026771][T15237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.071149][T15237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1382.109577][T15237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1382.135713][T15379] loop4: detected capacity change from 0 to 32768 [ 1382.185230][T15379] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.3156 (15379) [ 1382.221737][T15237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1382.258219][T13769] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1382.303221][T13769] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1382.312794][T15384] loop0: detected capacity change from 0 to 512 [ 1382.341665][T13769] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1382.359497][T15379] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1382.378907][T13769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1382.419828][T15384] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.3159: inode #1: comm syz.0.3159: iget: illegal inode # [ 1382.594121][T15379] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 1382.594572][T15237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1382.613986][T15379] BTRFS info (device loop4): using free space tree [ 1382.621340][T15384] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.3159: error while reading EA inode 1 err=-117 [ 1382.901340][T15392] loop3: detected capacity change from 0 to 4096 [ 1382.941362][T15384] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.3159: inode #1: comm syz.0.3159: iget: illegal inode # [ 1382.970675][T15392] ntfs: volume version 3.1. [ 1383.458150][T15384] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.3159: error while reading EA inode 1 err=-117 [ 1383.477939][T15237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.502705][T15384] EXT4-fs (loop0): 1 orphan inode deleted [ 1383.517720][T15237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1383.528448][T15237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.539379][T15237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1383.540130][T15384] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1383.592022][T15237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.604563][T15237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1383.623544][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1383.645696][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1383.747030][T15237] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.787170][T15237] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.805978][T15237] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.815607][T15237] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1383.900786][ T4263] EXT4-fs (loop0): unmounting filesystem. [ 1385.156734][ T5401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1385.218609][ T5401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1385.339401][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1385.577224][T15379] BTRFS error (device loop4): open_ctree failed: -12 [ 1385.703668][T13769] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1385.747193][T13769] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1385.779616][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1389.000230][T15444] loop1: detected capacity change from 0 to 256 [ 1389.173615][T10130] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1389.200341][T15444] loop1: detected capacity change from 0 to 256 [ 1389.267879][T15444] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1389.702542][T15450] bond0 speed is unknown, defaulting to 1000 [ 1389.774380][ T4264] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1389.907840][T14641] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1389.917267][ T4264] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1389.928160][T14641] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1389.937825][T14641] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1389.945265][T14641] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1390.013915][T15442] loop2: detected capacity change from 0 to 32768 [ 1390.138103][T15442] ERROR: (device loop2): dbAllocAG: unable to allocate blocks [ 1390.138103][T15442] [ 1390.150836][T15442] ERROR: (device loop2): remounting filesystem as read-only [ 1390.168795][T15452] bond0 speed is unknown, defaulting to 1000 [ 1390.177661][T15442] jfs_create: dtInsert returned -EIO [ 1390.184140][T15442] ERROR: (device loop2): jfs_create: [ 1390.184140][T15442] [ 1390.711469][T15452] chnl_net:caif_netlink_parms(): no params data found [ 1391.074410][T15452] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.132883][T15452] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.171813][T15452] device bridge_slave_0 entered promiscuous mode [ 1391.248894][T15452] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.281178][T15452] bridge0: port 2(bridge_slave_1) entered disabled state [ 1391.330719][T15452] device bridge_slave_1 entered promiscuous mode [ 1394.024186][T14641] Bluetooth: hci4: command 0x0409 tx timeout [ 1394.223185][T15452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1394.418202][T15452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1394.446099][T15498] loop4: detected capacity change from 0 to 256 [ 1394.503291][T15452] team0: Port device team_slave_0 added [ 1394.535236][T15499] Bluetooth: MGMT ver 1.22 [ 1395.326852][T15498] loop4: detected capacity change from 0 to 256 [ 1395.347056][T15498] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1395.419212][T15452] team0: Port device team_slave_1 added [ 1395.912908][T15452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1395.927932][T15452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.056501][T15452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.103006][T15452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.115816][T14641] Bluetooth: hci4: command 0x041b tx timeout [ 1396.160977][T15452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1396.193114][T15452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.344376][T15452] device hsr_slave_0 entered promiscuous mode [ 1396.391583][T15452] device hsr_slave_1 entered promiscuous mode [ 1396.437700][T15452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1396.457348][T15452] Cannot create hsr debugfs directory [ 1396.466789][T15504] loop3: detected capacity change from 0 to 32768 [ 1396.558428][T15504] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.3184 (15504) [ 1396.901505][T15504] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1396.922256][T15504] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1396.942535][T15504] BTRFS info (device loop3): using free space tree [ 1397.122781][T15452] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1397.134005][T15452] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1397.224977][T15504] BTRFS info (device loop3): enabling ssd optimizations [ 1397.236988][ T4264] Bluetooth: Wrong link type (-57) [ 1397.458169][T14638] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1398.304039][ T4264] Bluetooth: hci4: command 0x040f tx timeout [ 1398.629189][T15452] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1398.654412][T15452] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.399821][T15452] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1399.437617][T15452] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.736203][T15452] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1399.760264][T15452] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.148636][T15452] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1400.174954][T15452] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1400.200503][T15452] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1400.226595][T15452] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1400.349657][ T4264] Bluetooth: hci4: command 0x0419 tx timeout [ 1400.427187][T15452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1400.503974][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1400.519844][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1400.566343][T15452] 8021q: adding VLAN 0 to HW filter on device team0 [ 1400.602886][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1400.648590][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1400.678363][ T4396] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.685592][ T4396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1400.725801][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1400.805472][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1400.846841][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1400.895860][ T4396] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.903136][ T4396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1400.926484][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1402.261748][T15589] hub 9-0:1.0: USB hub found [ 1402.267776][T15589] hub 9-0:1.0: 1 port detected [ 1402.631228][T15452] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1402.697929][T15452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1402.857640][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1402.891547][T15593] CIFS: iocharset name too long [ 1402.898333][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1403.008020][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1403.075406][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1403.121496][T15592] loop3: detected capacity change from 0 to 4096 [ 1403.129220][T15601] loop4: detected capacity change from 0 to 128 [ 1403.186687][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1403.229596][T15592] __ntfs_error: 20 callbacks suppressed [ 1403.229611][T15592] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1403.267187][T15601] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1403.296814][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1403.309602][T15601] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1403.348103][T15592] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1403.396628][T15592] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1403.420516][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1403.437865][T15592] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1403.634961][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1403.673556][T15592] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1403.688278][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1403.729216][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1403.898251][T15592] ntfs: volume version 3.1. [ 1404.430949][T15050] EXT4-fs (loop4): unmounting filesystem. [ 1404.465316][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1404.494144][T15592] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1404.578028][T15592] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1404.609052][T15592] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1404.663932][T15592] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1404.707765][T15592] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1404.775862][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1404.792596][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1404.826018][T15452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1404.950428][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1404.975243][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1405.027732][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1405.050846][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1405.221715][T15452] device veth0_vlan entered promiscuous mode [ 1406.087721][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1406.096194][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1406.227023][T15452] device veth1_vlan entered promiscuous mode [ 1406.288609][ T4264] Bluetooth: Wrong link type (-57) [ 1406.393336][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1406.413025][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1406.451565][T15452] device veth0_macvtap entered promiscuous mode [ 1406.481219][T15452] device veth1_macvtap entered promiscuous mode [ 1406.506514][T15452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.549538][T15452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.581248][T15452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.613991][T15452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.637734][T15452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.666476][T15452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.699253][T15452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1406.731485][T15452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1406.764041][T15452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1406.794442][T15628] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3217'. [ 1406.812911][T13769] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1406.831812][T13769] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1406.871613][T13769] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1406.900403][T13769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1406.934973][T15452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1406.986814][T15452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.017993][T15452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.060046][T15452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.097386][T15452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.169832][T15452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.233432][T15452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1407.245338][T15452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1407.257203][T15452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1407.271843][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1407.403522][T15639] hub 9-0:1.0: USB hub found [ 1407.410375][T15639] hub 9-0:1.0: 1 port detected [ 1408.031891][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1408.091048][T15452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.154225][T15643] loop4: detected capacity change from 0 to 256 [ 1408.157708][T15452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.200919][T15643] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1408.213290][T15452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.237677][T15452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.598311][T12349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.648786][T12349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.664373][T12349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1408.781707][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1408.781725][ T27] audit: type=1326 audit(1741784660.628:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15645 comm="syz.1.3221" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc3eb38d169 code=0x0 [ 1409.026328][T12349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.053042][T12349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.123676][T12349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1409.473357][ T4391] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.738536][T15657] CIFS: iocharset name too long [ 1410.756886][ T4391] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.072400][ T4391] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.191541][T15667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3227'. [ 1411.308527][ T4391] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.556993][T15671] loop3: detected capacity change from 0 to 8192 [ 1412.741806][T15671] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1413.137974][T15671] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1413.444641][T15671] REISERFS (device loop3): using ordered data mode [ 1413.457734][T15671] reiserfs: using flush barriers [ 1413.581208][T14641] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1413.592103][T14641] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1413.601478][T14641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1413.619892][T14641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1413.628206][T15671] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1413.644741][T14641] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1413.652728][T15671] REISERFS (device loop3): checking transaction log (loop3) [ 1413.661526][T15671] REISERFS (device loop3): Using r5 hash to sort names [ 1413.668630][T14641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1413.681873][T15671] reiserfs: enabling write barrier flush mode [ 1413.727128][T15688] loop0: detected capacity change from 0 to 1024 [ 1413.739604][T15671] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1414.001887][T15682] bond0 speed is unknown, defaulting to 1000 [ 1414.377265][ T27] audit: type=1326 audit(1741784666.218:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15693 comm="syz.0.3234" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f35b0d8d169 code=0x0 [ 1414.399173][ C0] vkms_vblank_simulate: vblank timer overrun [ 1415.867891][ T4264] Bluetooth: hci0: command 0x0409 tx timeout [ 1415.943322][T15716] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3239'. [ 1417.171866][T15682] chnl_net:caif_netlink_parms(): no params data found [ 1417.537702][T13476] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 1417.712236][T15682] bridge0: port 1(bridge_slave_0) entered blocking state [ 1417.727753][T15682] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.748577][T15682] device bridge_slave_0 entered promiscuous mode [ 1417.756051][T13476] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.778435][T13476] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1417.830700][T13476] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1417.851573][T13476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.870607][T13476] usb 1-1: Product: syz [ 1417.877141][T13476] usb 1-1: Manufacturer: syz [ 1417.891273][T13476] usb 1-1: SerialNumber: syz [ 1417.908223][T15682] bridge0: port 2(bridge_slave_1) entered blocking state [ 1417.915367][T15682] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.950464][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 1417.981913][T15682] device bridge_slave_1 entered promiscuous mode [ 1418.142890][T13476] usb 1-1: 0:2 : does not exist [ 1418.160689][T13476] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 1418.212115][T13476] usb 1-1: USB disconnect, device number 31 [ 1418.228171][T15682] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1418.269711][T15682] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1418.503780][T10172] udevd[10172]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1418.556529][T15745] loop1: detected capacity change from 0 to 1024 [ 1418.814579][T15682] team0: Port device team_slave_0 added [ 1418.874750][T15682] team0: Port device team_slave_1 added [ 1418.946175][T15751] loop0: detected capacity change from 0 to 512 [ 1419.043347][T15751] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.3246: inode #1: comm syz.0.3246: iget: illegal inode # [ 1419.091051][T15751] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.3246: error while reading EA inode 1 err=-117 [ 1419.104210][T15751] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.3246: inode #1: comm syz.0.3246: iget: illegal inode # [ 1419.122140][T15751] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.3246: error while reading EA inode 1 err=-117 [ 1419.137635][T15751] EXT4-fs (loop0): 1 orphan inode deleted [ 1419.143641][T15751] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1419.397404][T15452] EXT4-fs (loop0): unmounting filesystem. [ 1420.057825][ T4264] Bluetooth: hci0: command 0x040f tx timeout [ 1420.176279][T15682] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1420.189318][T15682] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1420.231203][T15682] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1420.403534][ T4391] device hsr_slave_0 left promiscuous mode [ 1420.433705][ T4391] device hsr_slave_1 left promiscuous mode [ 1420.459394][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1420.490258][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1420.523435][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1420.540179][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1420.557688][ T4391] device bridge_slave_1 left promiscuous mode [ 1420.575451][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1420.613883][ T4391] device bridge_slave_0 left promiscuous mode [ 1420.641619][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.819121][ T4391] device veth1_macvtap left promiscuous mode [ 1420.838489][ T4391] device veth0_macvtap left promiscuous mode [ 1420.857811][ T4391] device veth1_vlan left promiscuous mode [ 1420.866815][ T4391] device veth0_vlan left promiscuous mode [ 1420.999719][T15768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1422.117718][T14641] Bluetooth: hci0: command 0x0419 tx timeout [ 1422.844200][ T4391] team0 (unregistering): Port device team_slave_1 removed [ 1422.924912][ T4391] team0 (unregistering): Port device team_slave_0 removed [ 1422.997958][ T4391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1423.072857][ T4391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1423.904890][ T4391] bond0 (unregistering): Released all slaves [ 1424.022081][T15682] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1424.030933][T15682] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1424.057354][T15682] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1424.398389][T15682] device hsr_slave_0 entered promiscuous mode [ 1424.414638][T15807] loop3: detected capacity change from 0 to 512 [ 1424.423680][T15682] device hsr_slave_1 entered promiscuous mode [ 1424.425043][T15803] loop2: detected capacity change from 0 to 1024 [ 1424.436519][T15682] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1424.466327][T15682] Cannot create hsr debugfs directory [ 1424.534151][T15807] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.3259: inode #1: comm syz.3.3259: iget: illegal inode # [ 1424.593662][T15807] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.3259: error while reading EA inode 1 err=-117 [ 1424.633134][T15807] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.3259: inode #1: comm syz.3.3259: iget: illegal inode # [ 1424.646999][T15807] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.3259: error while reading EA inode 1 err=-117 [ 1424.680442][T15807] EXT4-fs (loop3): 1 orphan inode deleted [ 1424.687954][T15807] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1424.895507][T14638] EXT4-fs (loop3): unmounting filesystem. [ 1425.956878][T15824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1427.170598][T15682] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1427.487513][T15682] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1427.784074][T15682] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1427.805922][T15682] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1428.258855][T15682] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1428.321831][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1428.338954][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1428.441051][T15682] 8021q: adding VLAN 0 to HW filter on device team0 [ 1428.778639][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.788440][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.026365][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1429.069473][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1429.142229][ T4405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.149475][ T4405] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1429.211241][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1429.222968][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1429.232547][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1429.241540][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1429.248734][ T4391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1429.523305][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1429.596272][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1429.856208][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1430.191879][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1430.305701][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1430.398880][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1430.447719][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1430.493363][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1430.523640][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1430.545753][T15864] loop2: detected capacity change from 0 to 1024 [ 1430.553182][T15865] loop0: detected capacity change from 0 to 512 [ 1430.575257][T15682] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1430.639756][T12349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1430.654033][T12349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1430.682597][T15865] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.3270: inode #1: comm syz.0.3270: iget: illegal inode # [ 1430.740424][T15865] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.3270: error while reading EA inode 1 err=-117 [ 1430.788135][T15865] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.3270: inode #1: comm syz.0.3270: iget: illegal inode # [ 1430.822303][T15865] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.3270: error while reading EA inode 1 err=-117 [ 1430.864988][T15865] EXT4-fs (loop0): 1 orphan inode deleted [ 1430.884528][T15865] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1430.986749][T15880] loop2: detected capacity change from 0 to 256 [ 1431.046711][T15880] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1431.072202][T15452] EXT4-fs (loop0): unmounting filesystem. [ 1432.347165][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1432.357260][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1432.412618][T15682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1433.200399][T15901] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 1434.272744][T15902] loop1: detected capacity change from 0 to 128 [ 1434.379603][T15902] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 1435.161022][T14872] sysv_free_block: trying to free block not in datazone [ 1435.478639][T14872] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1436.085705][T15911] loop0: detected capacity change from 0 to 1024 [ 1436.118872][T15911] EXT4-fs: Ignoring removed nobh option [ 1436.145548][T15911] EXT4-fs: Ignoring removed bh option [ 1436.174889][T15911] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1436.190831][T15237] syz-executor (15237) used greatest stack depth: 19128 bytes left [ 1436.299240][T15911] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1436.374384][T15920] loop1: detected capacity change from 0 to 512 [ 1436.487976][T15920] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3282: inode #1: comm syz.1.3282: iget: illegal inode # [ 1436.505411][ T4391] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1436.521053][T15920] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3282: error while reading EA inode 1 err=-117 [ 1436.568472][T15920] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3282: inode #1: comm syz.1.3282: iget: illegal inode # [ 1436.651078][T15920] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3282: error while reading EA inode 1 err=-117 [ 1436.750955][T15920] EXT4-fs (loop1): 1 orphan inode deleted [ 1436.758309][T15920] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1436.965112][T15452] EXT4-fs (loop0): unmounting filesystem. [ 1437.171400][ T4391] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1439.045661][T14872] EXT4-fs (loop1): unmounting filesystem. [ 1439.132492][T14641] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1439.146700][ T4266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1439.156558][T14641] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1439.166870][ T4266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1439.175553][T14641] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1439.228167][ T4266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1439.266737][ T6737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1439.484649][ T6737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1441.250018][ T4391] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1441.291937][T15961] loop0: detected capacity change from 0 to 64 [ 1441.307938][ T4264] Bluetooth: hci3: command 0x0409 tx timeout [ 1442.089585][ T6737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1442.110920][ T6737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1442.154087][ T6737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1442.173847][ T6737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1442.198475][T15934] bond0 speed is unknown, defaulting to 1000 [ 1442.309189][ T4391] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.379075][T15682] device veth0_vlan entered promiscuous mode [ 1442.454710][T15682] device veth1_vlan entered promiscuous mode [ 1442.687294][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1442.713741][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1442.757119][T15682] device veth0_macvtap entered promiscuous mode [ 1442.846937][T15682] device veth1_macvtap entered promiscuous mode [ 1442.898178][T15958] loop1: detected capacity change from 0 to 32768 [ 1442.918161][T15958] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.3289 (15958) [ 1442.942716][T15958] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1442.963461][T15958] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1442.997863][T15958] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1443.003171][T15682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1443.034721][T15958] BTRFS info (device loop1): use zstd compression, level 3 [ 1443.058834][T15958] BTRFS info (device loop1): using free space tree [ 1443.097602][T15682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.119451][T15682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1443.141134][T15682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.163242][T15682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1443.194395][T15682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.261929][T15682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1443.272963][T15682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.285716][T15682] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1443.314083][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1443.324118][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1443.344730][T15958] BTRFS info (device loop1): enabling ssd optimizations [ 1443.387691][ T4264] Bluetooth: hci3: command 0x041b tx timeout [ 1443.393384][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1443.491916][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1443.521852][T15682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1443.587611][T15682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.627727][T15682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1443.658710][T15682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.707602][T15682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1443.749153][T15682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.780219][T15682] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1443.810871][T15682] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1443.877711][T15682] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1444.103184][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1444.270888][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1444.292416][T15934] chnl_net:caif_netlink_parms(): no params data found [ 1444.315066][T15682] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.338659][T15682] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.375087][T15682] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.408224][T15682] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1444.508521][T14872] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1445.582833][ T4264] Bluetooth: hci3: command 0x040f tx timeout [ 1447.589329][T15934] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.627043][T15934] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.677038][T16042] loop0: detected capacity change from 0 to 256 [ 1447.684246][T15934] device bridge_slave_0 entered promiscuous mode [ 1447.722137][T15934] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.733040][T15336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1447.767881][T16042] FAT-fs (loop0): Unrecognized mount option "ìoûZǺ [ 1447.767881][T16042] e=1" or missing value [ 1447.785869][T15336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1447.815601][T15934] bridge0: port 2(bridge_slave_1) entered disabled state [ 1447.852781][T15934] device bridge_slave_1 entered promiscuous mode [ 1447.908949][T15677] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1447.923047][ T4266] Bluetooth: hci3: command 0x0419 tx timeout [ 1447.980634][T16042] loop0: detected capacity change from 0 to 128 [ 1448.133669][T16042] loop0: detected capacity change from 0 to 4096 [ 1448.144994][T15336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1448.156921][T15934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1448.169141][T16042] ntfs: (device loop0): parse_options(): Unrecognized mount option ¿JÂ^ìQÃìsÈ îá^ª¡#DTl¢ã|#ÔA³CÎÁ÷NR¼!ë:›˜Ó£û£uÐ@¼'oSR¹ôæt»€ÿê¯ö„>ñȧ§àÕ’‰:w®‘à%£X@çÿOÛ5qјnÖõ¢. [ 1448.169451][T16045] device vlan0 entered promiscuous mode [ 1448.192443][T16042] ntfs: (device loop0): parse_options(): Unrecognized mount option shortname. [ 1448.201878][T15336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1448.213160][T16042] ntfs: (device loop0): parse_options(): Unrecognized mount option uni_xlate. [ 1448.222578][T16042] ntfs: (device loop0): parse_options(): Unrecognized mount option rodir. [ 1448.231710][T16042] ntfs: (device loop0): parse_options(): Unrecognized mount option nnonumtail. [ 1448.257427][T16042] ntfs: (device loop0): parse_options(): Option iocharset is deprecated. Please use option nls= in the future. [ 1448.307477][T16042] ntfs: (device loop0): parse_options(): The iocharset option requires an argument. [ 1448.330318][T15934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1448.392145][T16051] loop1: detected capacity change from 0 to 512 [ 1448.429594][T16051] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3303: inode #1: comm syz.1.3303: iget: illegal inode # [ 1448.444959][T16051] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3303: error while reading EA inode 1 err=-117 [ 1448.464417][T16051] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: comm syz.1.3303: inode #1: comm syz.1.3303: iget: illegal inode # [ 1448.466068][T15336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1448.486455][T16051] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.3303: error while reading EA inode 1 err=-117 [ 1448.513651][T16051] EXT4-fs (loop1): 1 orphan inode deleted [ 1448.522323][T16051] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1448.692171][T15934] team0: Port device team_slave_0 added [ 1448.767973][T14872] EXT4-fs (loop1): unmounting filesystem. [ 1448.884183][T15934] team0: Port device team_slave_1 added [ 1451.719047][ T4264] Bluetooth: hci1: command 0x0406 tx timeout [ 1452.187473][T16089] loop5: detected capacity change from 0 to 4096 [ 1452.588172][T16089] ntfs: (device loop5): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1452.600070][T16089] ntfs: (device loop5): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1452.721333][T16089] ntfs: (device loop5): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1452.734623][T16089] ntfs: volume version 3.1. [ 1452.813991][T15934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1452.837714][T15934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1453.412085][T15934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1454.068434][T15934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1454.075993][T15934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1454.317661][T15934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1455.254176][T16108] loop5: detected capacity change from 0 to 512 [ 1455.339443][T16108] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.3314: inode #1: comm syz.5.3314: iget: illegal inode # [ 1455.368099][T16108] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.3314: error while reading EA inode 1 err=-117 [ 1455.417341][T16104] loop3: detected capacity change from 0 to 8192 [ 1455.433824][T16108] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.3314: inode #1: comm syz.5.3314: iget: illegal inode # [ 1455.459355][T16108] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.3314: error while reading EA inode 1 err=-117 [ 1455.475764][T16108] EXT4-fs (loop5): 1 orphan inode deleted [ 1455.498210][T16108] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1455.515992][T16104] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1455.537777][T16104] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1455.585135][T16104] REISERFS (device loop3): using ordered data mode [ 1455.611145][T16104] reiserfs: using flush barriers [ 1455.618357][T16104] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1455.636492][T16104] REISERFS (device loop3): checking transaction log (loop3) [ 1455.646657][T16104] REISERFS (device loop3): Using r5 hash to sort names [ 1455.695105][T16104] reiserfs: enabling write barrier flush mode [ 1455.720845][T15682] EXT4-fs (loop5): unmounting filesystem. [ 1455.727976][T16104] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1455.896482][T15934] device hsr_slave_0 entered promiscuous mode [ 1455.912529][T15934] device hsr_slave_1 entered promiscuous mode [ 1455.927994][T15934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1455.954346][T15934] Cannot create hsr debugfs directory [ 1455.980168][ T4391] device hsr_slave_0 left promiscuous mode [ 1455.990810][ T4391] device hsr_slave_1 left promiscuous mode [ 1456.015263][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1456.023133][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1456.033834][ T4391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1456.077760][ T4391] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1456.109647][ T4391] device bridge_slave_1 left promiscuous mode [ 1456.115959][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1456.157253][ T4391] device bridge_slave_0 left promiscuous mode [ 1456.188632][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.482337][ T4391] device veth1_macvtap left promiscuous mode [ 1457.502648][ T4391] device veth0_macvtap left promiscuous mode [ 1457.531492][ T4391] device veth1_vlan left promiscuous mode [ 1457.561086][ T4391] device veth0_vlan left promiscuous mode [ 1461.398540][T16159] loop0: detected capacity change from 0 to 512 [ 1461.466094][T16159] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.3327: inode #1: comm syz.0.3327: iget: illegal inode # [ 1461.514644][T16159] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.3327: error while reading EA inode 1 err=-117 [ 1461.561399][T16159] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.3327: inode #1: comm syz.0.3327: iget: illegal inode # [ 1461.598984][T16159] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.3327: error while reading EA inode 1 err=-117 [ 1461.630689][T16159] EXT4-fs (loop0): 1 orphan inode deleted [ 1461.636508][T16159] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1461.781821][T15452] EXT4-fs (loop0): unmounting filesystem. [ 1462.315893][ T4391] team0 (unregistering): Port device team_slave_1 removed [ 1462.400214][ T4391] team0 (unregistering): Port device team_slave_0 removed [ 1462.474859][ T4391] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1462.561192][ T4391] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1463.455390][ T4391] bond0 (unregistering): Released all slaves [ 1463.622698][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1463.660997][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1463.812442][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1463.828330][T16163] device bridge_slave_0 left promiscuous mode [ 1463.834638][T16163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.131575][T16169] loop1: detected capacity change from 0 to 4096 [ 1464.178643][T16169] __ntfs_error: 11 callbacks suppressed [ 1464.178685][T16169] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1464.196273][T16169] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1464.212363][T16169] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1464.223944][T16169] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1464.237791][T16169] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1464.266927][T16169] ntfs: volume version 3.1. [ 1464.288734][T16169] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1464.301208][T16169] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1464.317772][T16169] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1464.329071][T16169] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1464.341070][T16169] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1464.504622][T16163] device bridge_slave_1 left promiscuous mode [ 1464.612888][T16163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.698798][T16163] bond0: (slave bond_slave_0): Releasing backup interface [ 1464.733691][ T4264] Bluetooth: Wrong link type (-57) [ 1464.800497][T16163] bond0: (slave bond_slave_1): Releasing backup interface [ 1464.940404][T16163] team0: Port device team_slave_0 removed [ 1464.975635][T16163] team0: Port device team_slave_1 removed [ 1465.000606][T16163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1465.013750][T16163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1465.449510][T16163] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1465.587915][T16163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1467.125528][T16196] loop5: detected capacity change from 0 to 512 [ 1467.213473][T16196] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.3337: inode #1: comm syz.5.3337: iget: illegal inode # [ 1467.260546][T16196] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.3337: error while reading EA inode 1 err=-117 [ 1467.324577][T16196] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.3337: inode #1: comm syz.5.3337: iget: illegal inode # [ 1467.361423][T16196] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.3337: error while reading EA inode 1 err=-117 [ 1467.671784][T16196] EXT4-fs (loop5): 1 orphan inode deleted [ 1467.678591][T16196] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1468.125106][T15682] EXT4-fs (loop5): unmounting filesystem. [ 1468.274248][T15934] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1468.546370][T15934] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1469.401949][T15934] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1469.414115][T15934] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1469.449608][T16226] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1469.490885][T16226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1469.508140][T16226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1469.547464][T16226] device bridge_slave_0 left promiscuous mode [ 1469.576493][T16226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1469.601506][T16226] device bridge_slave_1 left promiscuous mode [ 1469.617931][T16226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1469.640046][T16226] bond0: (slave bond_slave_0): Releasing backup interface [ 1469.668202][T16226] device bond_slave_0 left promiscuous mode [ 1469.695077][T16226] bond0: (slave bond_slave_1): Releasing backup interface [ 1469.709116][T16226] device bond_slave_1 left promiscuous mode [ 1469.817235][T16226] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1469.838404][T16226] team0: Port device team_slave_0 removed [ 1469.867616][T16226] team0: Failed to send options change via netlink (err -105) [ 1469.875536][T16226] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1469.898613][T16226] team0: Port device team_slave_1 removed [ 1469.905092][T16226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1469.913042][T16226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1469.922223][T16226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1469.930566][T16226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1470.922196][T15934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1471.858194][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1471.876346][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1471.912809][T15934] 8021q: adding VLAN 0 to HW filter on device team0 [ 1471.939519][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1471.960021][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1471.978486][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1471.985649][ T4391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1472.614569][T16266] loop1: detected capacity change from 0 to 256 [ 1472.654718][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1472.687490][T16266] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x618b78ac, utbl_chksum : 0xe619d30d) [ 1472.809037][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1473.032547][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1473.042510][T16271] CIFS: iocharset name too long [ 1473.562295][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.569625][ T4391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1473.814654][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1473.883175][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1473.893408][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1473.907433][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1473.919730][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1473.960141][ T6737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1474.074514][ T6737] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1474.119622][ T6737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1474.165133][ T6737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1474.249090][ T6737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1474.291546][ T6737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1474.352459][T15934] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1475.329981][ T6737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1475.350461][ T6737] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1475.414654][T15934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1475.992898][T16294] loop1: detected capacity change from 0 to 32768 [ 1477.161505][T16294] XFS (loop1): Mounting V5 Filesystem [ 1477.502904][T16294] XFS (loop1): log mount failed [ 1478.202511][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1478.227387][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1479.058782][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1479.078142][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1479.350309][T15934] device veth0_vlan entered promiscuous mode [ 1479.380389][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1479.428812][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1479.475828][T15934] device veth1_vlan entered promiscuous mode [ 1479.654461][T11777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1479.704186][T11777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1479.751875][T15934] device veth0_macvtap entered promiscuous mode [ 1479.790464][T15934] device veth1_macvtap entered promiscuous mode [ 1479.860680][T15934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1480.060913][T15934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.727775][T15934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1481.808903][T15934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1481.850229][T15934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1481.875094][T15934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1481.901737][T15934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.148088][T15934] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1482.199972][T15934] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1482.242699][T15934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1482.778387][T16375] loop1: detected capacity change from 0 to 1764 [ 1482.936587][T11777] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1482.959627][T11777] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1483.015130][T11777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1483.046688][T11777] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1483.098874][T11777] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1483.138314][T11777] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1483.184925][T15934] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.225564][T15934] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.267769][T15934] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1483.326120][T15934] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.285479][ T4396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1484.411976][ T4396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1484.496519][ T6737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1484.832977][T16395] loop1: detected capacity change from 0 to 64 [ 1485.383167][ T8570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1485.573452][ T8570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1485.600805][T16154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1486.794036][T16412] loop6: detected capacity change from 0 to 256 [ 1486.979155][T16412] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 1488.842444][T16426] block nbd3: shutting down sockets [ 1488.855414][T16416] loop0: detected capacity change from 0 to 1024 [ 1489.124251][T16437] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1489.170168][T16437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1489.208649][T16437] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1489.290121][T16437] device bridge_slave_0 left promiscuous mode [ 1489.296437][T16437] bridge0: port 1(bridge_slave_0) entered disabled state [ 1489.400752][T16437] device bridge_slave_1 left promiscuous mode [ 1489.407086][T16437] bridge0: port 2(bridge_slave_1) entered disabled state [ 1489.490012][T16437] bond0: (slave bond_slave_1): Releasing backup interface [ 1489.522860][T16437] device bond_slave_1 left promiscuous mode [ 1489.664252][T16437] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 1489.706229][T16437] team0: Port device team_slave_0 removed [ 1489.796854][T16437] team0: Failed to send options change via netlink (err -105) [ 1489.816722][T16437] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 1489.868637][T16437] team0: Port device team_slave_1 removed [ 1489.888803][T16437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1489.896307][T16437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1489.951374][T16437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1489.971840][T16437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1490.204367][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1490.210996][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.761369][ T7392] hfsplus: b-tree write err: -5, ino 4 [ 1490.995158][T12969] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.147452][ T4264] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1491.161074][T16435] bond0 speed is unknown, defaulting to 1000 [ 1491.181906][ T4264] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1491.192112][ T4264] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1491.206634][ T4264] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1491.218761][ T4264] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1491.226185][ T4264] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1491.282760][T12969] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1491.301824][T16454] loop0: detected capacity change from 0 to 4096 [ 1491.312205][T16458] sp0: Synchronizing with TNC [ 1491.340254][T16455] bond0 speed is unknown, defaulting to 1000 [ 1491.374509][T16457] [U] è [ 1491.668701][T12969] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.378746][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 1492.678128][T12969] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1493.316603][ T4266] Bluetooth: hci3: command 0x0409 tx timeout [ 1493.464645][T16455] chnl_net:caif_netlink_parms(): no params data found [ 1493.477138][T16489] loop1: detected capacity change from 0 to 1024 [ 1493.789536][T12349] hfsplus: b-tree write err: -5, ino 4 [ 1494.789092][T16499] loop1: detected capacity change from 0 to 8192 [ 1494.874803][ T4266] block nbd3: Receive control failed (result -32) [ 1494.892657][T16476] block nbd3: shutting down sockets [ 1494.960410][T16499] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1495.000865][T16499] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1495.027924][T16499] REISERFS (device loop1): using ordered data mode [ 1495.034504][T16499] reiserfs: using flush barriers [ 1495.197112][T16499] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1495.287228][ C1] vkms_vblank_simulate: vblank timer overrun [ 1495.399852][ T4266] Bluetooth: hci3: command 0x041b tx timeout [ 1495.456675][T16499] REISERFS (device loop1): checking transaction log (loop1) [ 1495.617973][T16499] REISERFS (device loop1): Using r5 hash to sort names [ 1495.642018][T16455] bridge0: port 1(bridge_slave_0) entered blocking state [ 1495.678629][T16455] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.727562][T16499] reiserfs: enabling write barrier flush mode [ 1495.794418][T16455] device bridge_slave_0 entered promiscuous mode [ 1495.816065][T16499] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1495.881652][T16455] bridge0: port 2(bridge_slave_1) entered blocking state [ 1495.929002][T16455] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.947116][T16455] device bridge_slave_1 entered promiscuous mode [ 1497.504918][ T4266] Bluetooth: hci3: command 0x040f tx timeout [ 1498.360656][T16455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1498.398994][T16455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1498.419185][T16530] loop0: detected capacity change from 0 to 1024 [ 1498.445109][T16530] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1498.774487][T16455] team0: Port device team_slave_0 added [ 1498.860662][T16455] team0: Port device team_slave_1 added [ 1499.052177][T16537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3415'. [ 1499.557915][ T4264] Bluetooth: hci3: command 0x0419 tx timeout [ 1499.866276][T16548] CIFS: iocharset name too long [ 1499.876155][T16545] block nbd3: shutting down sockets [ 1501.375755][T16561] loop5: detected capacity change from 0 to 64 [ 1501.408088][T16455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1501.415093][T16455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1502.497151][T16455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1502.700871][T16455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1502.746159][T16455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1502.772167][ C1] vkms_vblank_simulate: vblank timer overrun [ 1502.914553][T16455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1503.245708][T16582] loop5: detected capacity change from 0 to 256 [ 1503.258234][T16455] device hsr_slave_0 entered promiscuous mode [ 1503.291285][T16455] device hsr_slave_1 entered promiscuous mode [ 1503.352873][T16455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1503.369246][T16582] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x0a42a509, utbl_chksum : 0xe619d30d) [ 1503.397270][T16455] Cannot create hsr debugfs directory [ 1503.449264][T16582] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 1504.286993][ C1] vkms_vblank_simulate: vblank timer overrun [ 1505.059192][T16602] block nbd3: shutting down sockets [ 1505.841108][T12969] device hsr_slave_0 left promiscuous mode [ 1506.071349][T12969] device hsr_slave_1 left promiscuous mode [ 1506.082531][T12969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1506.340207][T12969] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1506.977115][T16624] loop3: detected capacity change from 0 to 512 [ 1507.389880][T12969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1507.397649][T12969] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1507.433269][T12969] device bridge_slave_1 left promiscuous mode [ 1507.480021][T16624] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1507.517774][T12969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.540235][T14638] EXT4-fs (loop3): unmounting filesystem. [ 1507.618187][T12969] device bridge_slave_0 left promiscuous mode [ 1507.624517][T12969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.759280][T12969] device veth1_macvtap left promiscuous mode [ 1507.775719][T12969] device veth0_macvtap left promiscuous mode [ 1507.796042][T12969] device veth1_vlan left promiscuous mode [ 1507.827005][T12969] device veth0_vlan left promiscuous mode [ 1507.893261][T16638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3437'. [ 1508.074122][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1508.074217][ T27] audit: type=1326 audit(1741784759.878:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1508.102995][ C1] vkms_vblank_simulate: vblank timer overrun [ 1508.701220][ T27] audit: type=1326 audit(1741784759.878:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1508.723954][ T27] audit: type=1326 audit(1741784759.878:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72cc78bad0 code=0x7ffc0000 [ 1508.746497][ T27] audit: type=1326 audit(1741784759.878:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1508.769202][ T27] audit: type=1326 audit(1741784759.878:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1508.792082][ T27] audit: type=1326 audit(1741784759.888:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1508.814718][ T27] audit: type=1326 audit(1741784759.888:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1508.837279][ T27] audit: type=1326 audit(1741784759.888:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1508.859989][ T27] audit: type=1326 audit(1741784759.888:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1508.882869][ T27] audit: type=1326 audit(1741784759.888:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16635 comm="syz.3.3438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1509.039158][T16631] loop5: detected capacity change from 0 to 32768 [ 1509.154519][T16631] XFS (loop5): DAX unsupported by block device. Turning off DAX. [ 1509.167905][T16631] XFS (loop5): Mounting V5 Filesystem [ 1509.222541][T16631] XFS (loop5): Ending clean mount [ 1509.261520][T16631] XFS (loop5): Quotacheck needed: Please wait. [ 1509.472196][T16631] XFS (loop5): Quotacheck: Done. [ 1509.565414][T15682] XFS (loop5): Unmounting Filesystem [ 1509.888083][ C1] vkms_vblank_simulate: vblank timer overrun [ 1510.159349][T12969] team0 (unregistering): Port device team_slave_1 removed [ 1510.271488][T12969] team0 (unregistering): Port device team_slave_0 removed [ 1510.352738][T12969] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1510.428844][T12969] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1511.622381][T12969] bond0 (unregistering): Released all slaves [ 1512.101049][T16455] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1512.113391][T16659] loop1: detected capacity change from 0 to 1024 [ 1512.173417][T16455] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1512.238804][T16665] loop5: detected capacity change from 0 to 512 [ 1512.316770][T16659] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1512.342511][T16659] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1512.365180][T16455] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1512.398094][T16659] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.3440: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 1512.438546][T16455] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1512.468322][T16659] EXT4-fs error (device loop1): ext4_quota_enable:6989: comm syz.1.3440: Bad quota inode: 3, type: 0 [ 1512.500809][T16665] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.3441: casefold flag without casefold feature [ 1512.540873][T16659] EXT4-fs warning (device loop1): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1512.561251][T16665] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.3441: couldn't read orphan inode 15 (err -117) [ 1512.611123][T16665] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1512.617889][T16659] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 1512.626862][T16659] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1512.768003][ T4266] Bluetooth: hci4: command 0x0406 tx timeout [ 1513.489772][T15682] EXT4-fs (loop5): unmounting filesystem. [ 1513.581487][T16455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1513.620164][T14872] EXT4-fs (loop1): unmounting filesystem. [ 1513.676419][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1513.706142][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1513.752009][T16455] 8021q: adding VLAN 0 to HW filter on device team0 [ 1514.165733][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1514.346141][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1514.758447][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1514.765571][ T7392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1514.774645][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1514.783639][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1514.795208][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state [ 1514.802435][ T7392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1514.810615][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1514.828519][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1515.361763][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1515.434354][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1515.481914][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1515.578688][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1515.752383][T15677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1516.279275][T15677] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1516.460188][T15677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1516.478673][T15677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1516.498383][T15677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1516.619844][T15677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1517.192067][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 1517.192146][ T27] audit: type=1326 audit(1741784768.988:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16715 comm="syz.1.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3eb38d169 code=0x7ffc0000 [ 1517.955496][ T27] audit: type=1326 audit(1741784768.988:1476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16715 comm="syz.1.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3eb38d169 code=0x7ffc0000 [ 1518.062529][ T27] audit: type=1326 audit(1741784768.998:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16715 comm="syz.1.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3eb38bad0 code=0x7ffc0000 [ 1518.178419][ T27] audit: type=1326 audit(1741784768.998:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16715 comm="syz.1.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3eb38d169 code=0x7ffc0000 [ 1518.265260][ T27] audit: type=1326 audit(1741784768.998:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16715 comm="syz.1.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3eb38d169 code=0x7ffc0000 [ 1518.490336][ T27] audit: type=1326 audit(1741784768.998:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16715 comm="syz.1.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3eb38d169 code=0x7ffc0000 [ 1519.061025][ T27] audit: type=1326 audit(1741784768.998:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16715 comm="syz.1.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3eb38d169 code=0x7ffc0000 [ 1519.217092][ T27] audit: type=1326 audit(1741784768.998:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16715 comm="syz.1.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3eb38d169 code=0x7ffc0000 [ 1519.239599][ C0] vkms_vblank_simulate: vblank timer overrun [ 1519.245921][ T27] audit: type=1326 audit(1741784768.998:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16715 comm="syz.1.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3eb38d169 code=0x7ffc0000 [ 1519.274754][ T27] audit: type=1326 audit(1741784769.008:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16715 comm="syz.1.3451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3eb38d169 code=0x7ffc0000 [ 1519.347853][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1519.355464][ T5401] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1519.395539][T16455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1519.486308][T16739] loop3: detected capacity change from 0 to 8192 [ 1519.667202][T16750] fuse: Unknown parameter '0x0000000000000004' [ 1519.679837][T16750] loop5: detected capacity change from 0 to 128 [ 1519.771676][T16750] VFS: Found a Xenix FS (block size = 512) on device loop5 [ 1519.887352][T16739] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1520.428084][T16739] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 1520.500581][T16739] REISERFS (device loop3): using ordered data mode [ 1520.531343][T15682] sysv_free_block: trying to free block not in datazone [ 1520.540340][T15682] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1520.567623][T16739] reiserfs: using flush barriers [ 1520.587647][T16739] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1520.631239][T16739] REISERFS (device loop3): checking transaction log (loop3) [ 1520.659036][T16739] REISERFS (device loop3): Using r5 hash to sort names [ 1520.674167][T16739] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 1520.814884][T16761] CIFS: iocharset name too long [ 1521.246218][T16774] loop0: detected capacity change from 0 to 128 [ 1521.313047][T15677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1521.340505][T15677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1521.602649][T15677] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1521.623242][T15677] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1521.636057][T16778] loop3: detected capacity change from 0 to 4096 [ 1521.673033][T15677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1521.958490][T16787] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1522.744760][T16788] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1522.787325][T15677] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1522.823540][T16455] device veth0_vlan entered promiscuous mode [ 1522.845191][T16778] NILFS error (device loop3): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 1522.892080][T16455] device veth1_vlan entered promiscuous mode [ 1522.976187][T16778] Remounting filesystem read-only [ 1523.035568][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1523.062282][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1523.105374][T16455] device veth0_macvtap entered promiscuous mode [ 1523.141123][T16455] device veth1_macvtap entered promiscuous mode [ 1523.258680][T16455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1523.310289][T16455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1523.520690][T16455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1523.897895][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 1523.898145][ T27] audit: type=1326 audit(1741784775.458:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.0.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b0d8d169 code=0x7ffc0000 [ 1524.357172][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1524.372379][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1524.477262][ T27] audit: type=1326 audit(1741784775.458:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.0.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b0d8d169 code=0x7ffc0000 [ 1524.498561][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1524.556121][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1524.578457][T16455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1524.752318][ T27] audit: type=1326 audit(1741784775.458:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.0.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35b0d8bad0 code=0x7ffc0000 [ 1524.788844][T16455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.801165][T16455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1524.809748][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1524.817778][ T27] audit: type=1326 audit(1741784775.468:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.0.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b0d8d169 code=0x7ffc0000 [ 1524.817822][ T27] audit: type=1326 audit(1741784775.468:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.0.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b0d8d169 code=0x7ffc0000 [ 1524.817857][ T27] audit: type=1326 audit(1741784775.468:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.0.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f35b0d8d169 code=0x7ffc0000 [ 1524.817893][ T27] audit: type=1326 audit(1741784775.468:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.0.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b0d8d169 code=0x7ffc0000 [ 1524.817929][ T27] audit: type=1326 audit(1741784775.468:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.0.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b0d8d169 code=0x7ffc0000 [ 1524.817965][ T27] audit: type=1326 audit(1741784775.468:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.0.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f35b0d8d169 code=0x7ffc0000 [ 1524.818003][ T27] audit: type=1326 audit(1741784775.468:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16796 comm="syz.0.3470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35b0d8d169 code=0x7ffc0000 [ 1525.951884][T16824] fuse: Unknown parameter '0x0000000000000004' [ 1525.988381][T16824] loop3: detected capacity change from 0 to 128 [ 1526.075293][T16824] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 1526.841192][T14638] sysv_free_block: trying to free block not in datazone [ 1526.867996][T14638] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1527.046336][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1527.141851][T16455] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.253622][T16455] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.114149][T16455] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.267819][T16455] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.601267][T16838] loop0: detected capacity change from 0 to 512 [ 1528.649233][T16838] EXT4-fs: Ignoring removed mblk_io_submit option [ 1528.655907][T16838] EXT4-fs: Ignoring removed oldalloc option [ 1528.710743][T16838] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1528.732566][T16838] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1528.831885][T16838] EXT4-fs (loop0): 1 truncate cleaned up [ 1528.847671][T16838] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1528.904529][T16847] loop1: detected capacity change from 0 to 64 [ 1529.022353][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1529.118128][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1530.726764][T16838] fscrypt (loop0): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1531.005661][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1531.043669][T16643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.070213][T16643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.192723][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1531.204870][T15452] EXT4-fs (loop0): unmounting filesystem. [ 1532.770610][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 1532.770812][ T27] audit: type=1326 audit(1741784783.638:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1532.880387][ T27] audit: type=1326 audit(1741784783.638:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1533.426462][T16876] block nbd1: shutting down sockets [ 1533.511364][T16867] CIFS: iocharset name too long [ 1533.634664][ T27] audit: type=1326 audit(1741784783.658:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72cc78bad0 code=0x7ffc0000 [ 1533.706443][T16885] netlink: 'syz.5.3488': attribute type 8 has an invalid length. [ 1533.724737][ T27] audit: type=1326 audit(1741784783.658:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1533.889676][ T27] audit: type=1326 audit(1741784783.658:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1534.336727][ T27] audit: type=1326 audit(1741784783.678:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1534.595595][T16883] loop1: detected capacity change from 0 to 8192 [ 1534.656881][T16883] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1534.807846][T16883] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1535.023643][T16883] REISERFS (device loop1): using ordered data mode [ 1535.071785][T16883] reiserfs: using flush barriers [ 1536.005790][T16883] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1536.092995][ T27] audit: type=1326 audit(1741784783.688:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1536.139026][T16883] REISERFS (device loop1): checking transaction log (loop1) [ 1536.185880][T16883] REISERFS (device loop1): Using r5 hash to sort names [ 1536.196786][ T27] audit: type=1326 audit(1741784783.698:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1536.238714][T16883] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1536.347642][ T27] audit: type=1326 audit(1741784783.708:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1536.414238][T16910] loop0: detected capacity change from 0 to 1024 [ 1536.458865][T16910] EXT4-fs: Ignoring removed nobh option [ 1536.637815][T16910] EXT4-fs: Ignoring removed bh option [ 1536.734483][T16910] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1536.924209][ T27] audit: type=1326 audit(1741784783.728:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16864 comm="syz.3.3484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1537.115583][T16910] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1537.388828][T16910] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3841: comm syz.0.3492: Allocating blocks 497-513 which overlap fs metadata [ 1537.466191][T16910] EXT4-fs (loop0): pa ffff888073714ee0: logic 256, phys. 385, len 8 [ 1537.475377][T16910] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 1 [ 1537.624095][T16898] loop7: detected capacity change from 0 to 32768 [ 1537.691091][T16898] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.3491 (16898) [ 1537.759868][T15452] EXT4-fs (loop0): unmounting filesystem. [ 1538.520126][ T4264] Bluetooth: hci0: command 0x0406 tx timeout [ 1538.830036][T16938] block nbd0: shutting down sockets [ 1539.334304][T16948] loop1: detected capacity change from 0 to 128 [ 1539.863957][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 1539.864025][ T27] audit: type=1326 audit(1741784791.668:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16945 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea678d169 code=0x7ffc0000 [ 1540.199882][ T27] audit: type=1326 audit(1741784791.668:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16945 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea678d169 code=0x7ffc0000 [ 1540.480930][ T27] audit: type=1326 audit(1741784791.668:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16945 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ea678bad0 code=0x7ffc0000 [ 1540.597922][T16948] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 1540.630385][ T27] audit: type=1326 audit(1741784791.668:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16945 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea678d169 code=0x7ffc0000 [ 1540.938147][T14872] sysv_free_block: trying to free block not in datazone [ 1540.977604][T14872] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1540.998736][ T27] audit: type=1326 audit(1741784791.668:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16945 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea678d169 code=0x7ffc0000 [ 1541.133703][ T27] audit: type=1326 audit(1741784791.668:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16945 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1ea678d169 code=0x7ffc0000 [ 1541.204313][ T27] audit: type=1326 audit(1741784791.678:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16945 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea678d169 code=0x7ffc0000 [ 1541.361531][ T27] audit: type=1326 audit(1741784791.678:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16945 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea678d169 code=0x7ffc0000 [ 1541.744212][T16974] loop1: detected capacity change from 0 to 2048 [ 1541.794071][T16974] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1542.298925][T16975] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1542.399567][ T27] audit: type=1326 audit(1741784791.678:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16945 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1ea678d169 code=0x7ffc0000 [ 1542.505136][ T27] audit: type=1326 audit(1741784791.678:1585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16945 comm="syz.5.3500" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ea678d169 code=0x7ffc0000 [ 1542.733858][T16984] sctp: [Deprecated]: syz.0.3506 (pid 16984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1542.733858][T16984] Use struct sctp_sack_info instead [ 1543.617863][T13375] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1543.809487][T13375] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.867829][T13375] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1543.920303][T13375] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1543.968819][T13375] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.976908][T13375] usb 4-1: Product: syz [ 1544.044216][T13375] usb 4-1: Manufacturer: syz [ 1544.080644][T13375] usb 4-1: SerialNumber: syz [ 1544.757177][T16154] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.010465][T13375] usb 4-1: 0:2 : does not exist [ 1545.015543][T13375] usb 4-1: unit 12 not found! [ 1545.094778][T13375] usb 4-1: USB disconnect, device number 24 [ 1545.231349][T16154] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.334854][T10172] udevd[10172]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1545.699824][T16154] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.815908][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 1545.817391][ T27] audit: type=1326 audit(1741784797.628:1612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.7.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3c98d169 code=0x7ffc0000 [ 1545.937172][ T27] audit: type=1326 audit(1741784797.628:1613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.7.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3c98d169 code=0x7ffc0000 [ 1546.509550][ T27] audit: type=1326 audit(1741784797.628:1614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.7.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d3c98bad0 code=0x7ffc0000 [ 1546.628180][ T27] audit: type=1326 audit(1741784797.628:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.7.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3c98d169 code=0x7ffc0000 [ 1546.738041][ T27] audit: type=1326 audit(1741784797.628:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.7.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3c98d169 code=0x7ffc0000 [ 1546.792040][ T27] audit: type=1326 audit(1741784797.628:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.7.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1d3c98d169 code=0x7ffc0000 [ 1546.819923][T16154] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.897536][ T27] audit: type=1326 audit(1741784797.628:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.7.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3c98d169 code=0x7ffc0000 [ 1547.070714][ T27] audit: type=1326 audit(1741784797.628:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.7.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3c98d169 code=0x7ffc0000 [ 1547.199485][ T27] audit: type=1326 audit(1741784797.628:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.7.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d3c98d169 code=0x7ffc0000 [ 1547.975458][ T27] audit: type=1326 audit(1741784797.638:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17012 comm="syz.7.3518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d3c98d169 code=0x7ffc0000 [ 1548.083287][ T4266] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1548.099300][ T4266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1548.118225][ T4266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1548.126392][ T4266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1548.137428][ T4266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1548.147620][ T4266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1548.273720][T17033] bond0 speed is unknown, defaulting to 1000 [ 1548.310818][T17035] bond0 speed is unknown, defaulting to 1000 [ 1549.280704][T17048] block nbd3: shutting down sockets [ 1550.234175][ T4266] Bluetooth: hci0: command 0x0409 tx timeout [ 1550.807939][T15558] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 1551.009466][T15558] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.037665][T15558] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1551.070371][T15558] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1551.098240][T15558] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.106303][T15558] usb 2-1: Product: syz [ 1551.133891][T17035] chnl_net:caif_netlink_parms(): no params data found [ 1551.141718][T15558] usb 2-1: Manufacturer: syz [ 1551.146359][T15558] usb 2-1: SerialNumber: syz [ 1551.392462][T15558] usb 2-1: 0:2 : does not exist [ 1551.397434][T15558] usb 2-1: unit 6 not found! [ 1551.434088][T15558] usb 2-1: USB disconnect, device number 30 [ 1551.640118][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.647875][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.835221][T10172] udevd[10172]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1552.308349][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 1552.322337][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 1552.328990][ T27] audit: type=1326 audit(1741784803.808:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1552.617682][ T27] audit: type=1326 audit(1741784803.808:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1552.663316][ T27] audit: type=1326 audit(1741784803.808:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72cc78bad0 code=0x7ffc0000 [ 1552.703020][ T27] audit: type=1326 audit(1741784803.818:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1552.747934][T17035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1552.761405][ T27] audit: type=1326 audit(1741784803.818:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1552.765455][T17035] bridge0: port 1(bridge_slave_0) entered disabled state [ 1552.848631][T17035] device bridge_slave_0 entered promiscuous mode [ 1552.883174][T17035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1552.931666][T17035] bridge0: port 2(bridge_slave_1) entered disabled state [ 1552.941746][ T27] audit: type=1326 audit(1741784803.828:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1552.985947][T17035] device bridge_slave_1 entered promiscuous mode [ 1552.996918][ T27] audit: type=1326 audit(1741784803.828:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1553.053908][ T27] audit: type=1326 audit(1741784803.828:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1553.485088][ T27] audit: type=1326 audit(1741784803.828:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1553.820848][ T27] audit: type=1326 audit(1741784803.838:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.3.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72cc78d169 code=0x7ffc0000 [ 1554.127395][T17114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3538'. [ 1554.347700][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 1554.550810][T17035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1554.791401][T17035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1555.430109][T16154] device hsr_slave_0 left promiscuous mode [ 1555.439474][T16154] device hsr_slave_1 left promiscuous mode [ 1555.460376][T16154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1555.482630][T16154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1555.498579][T16154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1555.524970][T17111] block nbd3: shutting down sockets [ 1555.539700][T16154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1555.558405][T16154] device bridge_slave_1 left promiscuous mode [ 1555.581111][T16154] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.609753][T16154] device bridge_slave_0 left promiscuous mode [ 1555.620017][T16154] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.748203][T16154] device veth1_macvtap left promiscuous mode [ 1555.764648][T16154] device veth0_macvtap left promiscuous mode [ 1555.787673][T16154] device veth1_vlan left promiscuous mode [ 1555.797020][T16154] device veth0_vlan left promiscuous mode [ 1556.427721][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 1557.857171][T16154] team0 (unregistering): Port device team_slave_1 removed [ 1557.945146][T16154] team0 (unregistering): Port device team_slave_0 removed [ 1558.022598][T16154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1558.117781][T16154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1559.033565][T16154] bond0 (unregistering): Released all slaves [ 1559.149776][T17035] team0: Port device team_slave_0 added [ 1559.159716][T17035] team0: Port device team_slave_1 added [ 1559.536759][T17140] bond0 (unregistering): Released all slaves [ 1559.693909][T17035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1559.724951][T17035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.807140][T17035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1559.822578][T17035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1559.831243][T17035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.874498][T17035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1560.665357][T17035] device hsr_slave_0 entered promiscuous mode [ 1560.923007][T17035] device hsr_slave_1 entered promiscuous mode [ 1561.108053][T17035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1561.115708][T17035] Cannot create hsr debugfs directory [ 1561.722603][T13375] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1561.983196][ T4266] block nbd3: Receive control failed (result -32) [ 1562.000248][T17194] block nbd3: shutting down sockets [ 1562.075748][T17035] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1562.115584][T17035] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1562.150743][T17035] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1562.191728][T17035] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1562.479091][T17035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1562.557674][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1562.567356][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1562.611913][T17035] 8021q: adding VLAN 0 to HW filter on device team0 [ 1562.652980][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1562.728773][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1562.769097][ T4309] bridge0: port 1(bridge_slave_0) entered blocking state [ 1562.776244][ T4309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1562.797010][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1562.852031][T17227] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3569'. [ 1562.931096][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1562.958438][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1562.983156][ T4309] bridge0: port 2(bridge_slave_1) entered blocking state [ 1562.990422][ T4309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1563.031255][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1563.073389][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1563.119795][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1563.146790][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1563.177834][T12969] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1563.227901][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1563.249769][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1563.292559][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1563.311974][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1563.364478][T17035] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1563.398745][T17035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1563.448904][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1563.480986][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1563.524701][T17242] ieee802154 phy0 wpan0: encryption failed: -22 [ 1564.723276][T17270] loop3: detected capacity change from 0 to 4096 [ 1564.919145][T17270] __ntfs_error: 48 callbacks suppressed [ 1564.919170][T17270] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1564.936627][T17270] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1564.950059][T17270] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1564.961573][T17270] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1564.974671][T17270] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1564.987159][T17270] ntfs: volume version 3.1. [ 1564.994409][T17270] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1565.007254][T17270] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1565.021548][T17270] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1565.032681][T17270] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1565.044078][T17270] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1565.160320][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1565.184311][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1565.270955][T17273] netlink: 'syz.1.3580': attribute type 10 has an invalid length. [ 1565.379179][T17273] device netdevsim0 entered promiscuous mode [ 1565.386144][T17273] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1565.397706][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1565.493142][T17035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1566.293471][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1566.310034][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1566.377179][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1566.394361][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1566.434844][T17035] device veth0_vlan entered promiscuous mode [ 1566.450048][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1566.468483][ T4309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1566.513529][T17310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1566.529095][T17310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1566.536751][T17310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1566.550304][T17310] device bridge_slave_0 left promiscuous mode [ 1566.556639][T17310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.570915][T17310] device bridge_slave_1 left promiscuous mode [ 1566.577375][T17310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.613161][T17310] bond0: (slave bond_slave_0): Releasing backup interface [ 1566.743388][T17310] bond0: (slave bond_slave_1): Releasing backup interface [ 1567.122470][T17310] team0: Port device team_slave_0 removed [ 1567.194859][T17310] team0: Port device team_slave_1 removed [ 1567.240321][T17310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1567.268075][T17310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1567.311237][T17310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1567.358150][T17310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.356108][T17330] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3593'. [ 1568.493495][T17332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3593'. [ 1568.551964][T17035] device veth1_vlan entered promiscuous mode [ 1568.591900][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1568.641698][T17321] bridge0: port 1(vlan2) entered blocking state [ 1568.652741][T17321] bridge0: port 1(vlan2) entered disabled state [ 1568.685404][T17321] device macsec0 entered promiscuous mode [ 1568.704770][T17321] bridge0: port 1(vlan2) entered blocking state [ 1568.711228][T17321] bridge0: port 1(vlan2) entered forwarding state [ 1568.730876][T17330] netlink: 'syz.1.3593': attribute type 1 has an invalid length. [ 1568.795580][T17331] bond1: (slave gretap1): making interface the new active one [ 1568.819686][T17331] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1572.610771][T17337] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.627720][T17337] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.648074][T17337] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1572.660381][T17337] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.017759][T17364] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3600'. [ 1573.028646][T13934] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 1573.060530][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1573.132478][T13934] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1573.172925][T17035] device veth0_macvtap entered promiscuous mode [ 1573.232211][T17035] device veth1_macvtap entered promiscuous mode [ 1573.267324][T17375] netlink: 'syz.7.3604': attribute type 1 has an invalid length. [ 1573.304137][T17035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1573.342492][T16976] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1573.360639][T16976] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1573.378772][T16976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1573.394104][T16976] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1573.432822][T17035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1573.452244][T16976] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1573.484401][T16976] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1573.513063][T17035] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.533914][T17035] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.556876][T17035] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1573.577351][T17035] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1574.166847][T17398] loop1: detected capacity change from 0 to 4096 [ 1574.190676][T17398] __ntfs_error: 6 callbacks suppressed [ 1574.190696][T17398] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1574.208398][T17398] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1574.221831][T17398] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1574.233337][T17398] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1574.246413][T17398] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1574.260407][T17398] ntfs: volume version 3.1. [ 1574.266981][T17398] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1574.279634][T17398] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1574.293787][T17398] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1574.305290][T17398] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1574.317516][T17398] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1574.586489][T17407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3611'. [ 1574.609791][T17407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3611'. [ 1574.629679][T17407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3611'. [ 1574.647687][T17407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3611'. [ 1574.785370][T16154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1574.806720][T16154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1574.870163][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1574.961019][T16976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1575.004103][T16976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1575.091111][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1575.787310][T17443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3619'. [ 1575.817411][T17443] device syz_tun entered promiscuous mode [ 1575.869395][T17443] device syz_tun left promiscuous mode [ 1576.768501][T17467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3625'. [ 1576.779362][T17467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3625'. [ 1577.408943][T17468] block nbd3: shutting down sockets [ 1578.989823][T17509] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3638'. [ 1579.319466][T17515] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3641'. [ 1579.365085][ C0] vcan0: j1939_session_tx_dat: 0xffff888054f6d400: queue data error: -100 [ 1579.815803][ T27] kauditd_printk_skb: 6 callbacks suppressed [ 1579.816096][ T27] audit: type=1326 audit(1741784831.608:1699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.1.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3eb38d169 code=0x7ffc0000 [ 1581.747640][ T27] audit: type=1326 audit(1741784831.608:1700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.1.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3eb38d169 code=0x7ffc0000 [ 1581.847948][ T27] audit: type=1326 audit(1741784831.608:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.1.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3eb38bad0 code=0x7ffc0000 [ 1581.874017][ T4266] block nbd3: Receive control failed (result -32) [ 1581.875576][T17527] block nbd3: shutting down sockets [ 1581.891064][ T27] audit: type=1326 audit(1741784831.608:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.1.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3eb38d169 code=0x7ffc0000 [ 1581.914007][ T27] audit: type=1326 audit(1741784831.608:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.1.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3eb38d169 code=0x7ffc0000 [ 1581.957907][ T27] audit: type=1326 audit(1741784831.608:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.1.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc3eb38d169 code=0x7ffc0000 [ 1582.028115][ T27] audit: type=1326 audit(1741784831.608:1705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.1.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3eb38d169 code=0x7ffc0000 [ 1582.101257][ T27] audit: type=1326 audit(1741784831.608:1706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.1.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3eb38d169 code=0x7ffc0000 [ 1582.165267][ T27] audit: type=1326 audit(1741784831.608:1707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.1.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc3eb38d169 code=0x7ffc0000 [ 1582.216132][ T27] audit: type=1326 audit(1741784831.608:1708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17511 comm="syz.1.3637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3eb38d169 code=0x7ffc0000 [ 1583.761185][T17548] bond0 speed is unknown, defaulting to 1000 [ 1584.400097][T17035] general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] PREEMPT SMP KASAN [ 1584.411878][T17035] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 1584.420326][T17035] CPU: 1 PID: 17035 Comm: syz-executor Not tainted 6.1.130-syzkaller #0 [ 1584.428683][T17035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1584.438768][T17035] RIP: 0010:klist_remove+0x1e2/0x460 [ 1584.444098][T17035] Code: 80 3c 04 00 74 08 4c 89 ff e8 9a d5 3b f7 4d 8b 2f 49 83 e5 fe 49 8d 7d 58 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 73 d5 3b f7 4d 8b 75 58 4c 89 ef e8 77 a2 15 [ 1584.463732][T17035] RSP: 0018:ffffc90003da7800 EFLAGS: 00010202 [ 1584.469822][T17035] RAX: 000000000000000b RBX: ffffffff8e896088 RCX: dffffc0000000000 [ 1584.477806][T17035] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 1584.485776][T17035] RBP: ffffc90003da78e8 R08: dffffc0000000000 R09: fffffbfff1d12c05 [ 1584.493765][T17035] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100afd140c [ 1584.501772][T17035] R13: 0000000000000000 R14: ffff888079758000 R15: ffff888057e8a060 [ 1584.509777][T17035] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1584.518739][T17035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1584.525353][T17035] CR2: 00007fb6fc627ba8 CR3: 0000000030755000 CR4: 00000000003506e0 [ 1584.533363][T17035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1584.541366][T17035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1584.549375][T17035] Call Trace: [ 1584.552678][T17035] [ 1584.555635][T17035] ? __die_body+0x5e/0xa0 [ 1584.560004][T17035] ? die_addr+0x95/0xc0 [ 1584.564204][T17035] ? exc_general_protection+0x3ae/0x590 [ 1584.569800][T17035] ? do_raw_spin_lock+0x14a/0x370 [ 1584.574858][T17035] ? asm_exc_general_protection+0x22/0x30 [ 1584.580623][T17035] ? klist_remove+0x1e2/0x460 [ 1584.585341][T17035] ? klist_del+0x100/0x100 [ 1584.589800][T17035] ? kobject_put+0x460/0x460 [ 1584.594432][T17035] ? get_device_parent+0x295/0x400 [ 1584.599589][T17035] device_move+0x1b0/0x700 [ 1584.604047][T17035] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 1584.609974][T17035] hci_conn_del_sysfs+0xa8/0x150 [ 1584.614947][T17035] hci_conn_cleanup+0x5a0/0x740 [ 1584.619848][T17035] hci_conn_del+0x417/0x6c0 [ 1584.624399][T17035] ? hci_conn_hash_flush+0x1fd/0x3f0 [ 1584.629724][T17035] hci_conn_hash_flush+0x300/0x3f0 [ 1584.634874][T17035] ? hci_conn_switch_role+0x210/0x210 [ 1584.640279][T17035] ? drain_workqueue+0x2c9/0x390 [ 1584.645248][T17035] ? hci_discovery_set_state+0x5c/0x1a0 [ 1584.650837][T17035] hci_dev_close_sync+0x9a9/0xfc0 [ 1584.655900][T17035] hci_unregister_dev+0x207/0x500 [ 1584.660970][T17035] vhci_release+0x7f/0xd0 [ 1584.665342][T17035] ? vhci_open+0x360/0x360 [ 1584.669795][T17035] __fput+0x3f6/0x8d0 [ 1584.673821][T17035] task_work_run+0x246/0x300 [ 1584.678453][T17035] ? kasan_quarantine_put+0xd4/0x220 [ 1584.683776][T17035] ? task_work_cancel+0x2e0/0x2e0 [ 1584.688845][T17035] ? kmem_cache_free+0x292/0x510 [ 1584.693822][T17035] ? do_exit+0xa69/0x26a0 [ 1584.698196][T17035] do_exit+0xa6e/0x26a0 [ 1584.702401][T17035] ? put_task_struct+0x80/0x80 [ 1584.707211][T17035] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1584.713237][T17035] ? print_irqtrace_events+0x210/0x210 [ 1584.718752][T17035] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1584.723983][T17035] ? lockdep_hardirqs_on+0x94/0x130 [ 1584.729224][T17035] do_group_exit+0x202/0x2b0 [ 1584.733861][T17035] __x64_sys_exit_group+0x3b/0x40 [ 1584.738937][T17035] do_syscall_64+0x3b/0xb0 [ 1584.743381][T17035] ? clear_bhb_loop+0x45/0xa0 [ 1584.748099][T17035] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1584.754019][T17035] RIP: 0033:0x7f6f8e98d169 [ 1584.758473][T17035] Code: Unable to access opcode bytes at 0x7f6f8e98d13f. [ 1584.765486][T17035] RSP: 002b:00007ffedf171f08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 1584.773915][T17035] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f6f8e98d169 [ 1584.781928][T17035] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 1584.789932][T17035] RBP: 00007f6f8ea0f84b R08: 00007ffedf16fca6 R09: 00000000000927c0 [ 1584.797919][T17035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000020 [ 1584.805912][T17035] R13: 00000000000927c0 R14: 000000000018258f R15: 00007ffedf1720c0 [ 1584.813896][T17035] [ 1584.816918][T17035] Modules linked in: [ 1584.822434][T17035] ---[ end trace 0000000000000000 ]--- [ 1584.828462][T17035] RIP: 0010:klist_remove+0x1e2/0x460 [ 1584.833805][T17035] Code: 80 3c 04 00 74 08 4c 89 ff e8 9a d5 3b f7 4d 8b 2f 49 83 e5 fe 49 8d 7d 58 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 05 e8 73 d5 3b f7 4d 8b 75 58 4c 89 ef e8 77 a2 15 [ 1584.859856][T17035] RSP: 0018:ffffc90003da7800 EFLAGS: 00010202 [ 1584.866018][T17035] RAX: 000000000000000b RBX: ffffffff8e896088 RCX: dffffc0000000000 [ 1584.874092][T17035] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 1584.882259][T17035] RBP: ffffc90003da78e8 R08: dffffc0000000000 R09: fffffbfff1d12c05 [ 1584.890452][T17035] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1100afd140c [ 1584.898535][T17035] R13: 0000000000000000 R14: ffff888079758000 R15: ffff888057e8a060 [ 1584.906530][T17035] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1584.916426][T17035] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1584.924613][T17035] CR2: 00007fb6fc627ba8 CR3: 000000007f428000 CR4: 00000000003506e0 [ 1584.932820][T17035] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1584.941016][T17035] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1584.949062][T17035] Kernel panic - not syncing: Fatal exception [ 1584.955453][T17035] Kernel Offset: disabled [ 1584.959784][T17035] Rebooting in 86400 seconds..