last executing test programs: 21m17.595679477s ago: executing program 32 (id=430): setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x8, @local, 0xc}, {0xa, 0x4e24, 0x0, @empty}, 0x1}, 0x5c) fsmount(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x2020000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./bus\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d2204f459a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e806289fad8cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x1, 0x1530, &(0x7f0000002f80)="$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") r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r4) creat(&(0x7f0000000100)='./file0\x00', 0x7a) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0}) 14m55.039757896s ago: executing program 33 (id=1431): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4$bt_l2cap(r3, 0x0, 0x0, 0x80800) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./file2\x00', 0x100080d, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="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", @ANYRESOCT, @ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRES8, @ANYBLOB="3dea3f"], 0xff, 0x209, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x40) 8m51.990695441s ago: executing program 34 (id=2373): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000400000004000000210200", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r1}, 0x38) 7m16.54737573s ago: executing program 5 (id=2605): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000300)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x5, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x6c, r5, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1cf5, 0x35}}}}, [@NL80211_ATTR_BSS_SELECT={0x34, 0xe3, 0x0, 0x1, {0x30, 0x0, [@NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x3705}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x5, 0x3}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x1, 0x3}}]}}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random}, @NL80211_ATTR_USE_MFP={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xffffffffffffffff, r6) 7m13.414725959s ago: executing program 5 (id=2611): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20048045) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r1, 0x5408, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000080, 0x0, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000000)={0x0, 0x7, 0x1008, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) 7m11.829430759s ago: executing program 5 (id=2615): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0xdec, 0x4) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000080)=0x28) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_pidfd_open(r1, 0x0) r3 = epoll_create(0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000180)) gettid() r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x1, 0x9, 0xffff}, 0x20) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0x6) 7m11.47968542s ago: executing program 5 (id=2616): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6a2, &(0x7f0000000100)="$eJzs3c1vHGcdB/DvrNeuHargtEkboSKiRCpIFolf5IK5EBBCPlSoKgfOVuI0VjZOZbvIrRC4FMEJiUP/gILkGyck7kHhXG69+lgJiUvEIeJiNLOz9tq7ju3Eb4HPJxo/z8zzzDO//e0zM951Vhvg/9bsWJoPU2R27O3Vcn1jfaq1sT71Ut3cSlLWG0mzXaRYTIpHyc2yveha0lX2+HRh5t0vHm982V5r1kvVv/G0/fro03etXnIlyUBd9ho86CF2jHcrycs9XYYOOtaOjmXSrtUlnLrNHmuH2f0w5y1wxnTuTkX7vtljNDmXZLj+PSD11aFxchEej0Nd5QAAAOAF9fmD044AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXjz19/8X9dKoy1xJ0fn+/6HOtrr+Qnt42gEAAAAAAAAAwBH4xpM8yWrOd9Y3i+pv/lerlYv5z2bylXyQ5cxnKdezmrmsZCVLmUgy2jXQ0OrcysrSxNaepf57Tvbdc/KkHjEAAAAAAAAA/E/6dWa3//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABnQZEMtItqudipj6bRbFczVP5YS/7Rqb8gin4bH558HAAAAPBchp9hn68+yZOs5nxnfbOoXvO/Vr1eHs4HWcxKFrKSVuZzu34NXb7qb2ysT7U21qful0vvuD/416HCqEZM+72H/ke+XPUYyZ0sVFuu51YVzO00qj1Llzvx9I/r4zKm4vu1A0bWrNNaHuwPe72LcCQO+1bEaBlcspWR8Tq2MhsX2hkoqjdqkt2Z2PfZae4+UhoZ3DrSRBpb7/xcPIacn6vL8vH89lhzflhbmWikysRk1+x77emZSL751z//7G5r8d7dO8tjZ+ch7WNgj+2758RUVyZe75eJ7oHOdCaah+w/XmXi0tb6bH6cn2YsV/JOlrKQn2cuK5nPZt0+V8/n8ufo0+fMzR1r7+wXyVD9vLRTfZCYruRHVW0uV6t9z2chRR7kdubzVvVvMhP5TqYznZmuZ/jSnnFXj6066xu7z/rOM/23vsFf+1ZdGUnyu7rsycEue83Oo9K+9pd5vdCV1/asf7zV60LXeTDelaVXOtkZ7Dv4s1wbm1+rK+UxPqnLs2G0zkR5AnXuEp3oXm1nolndi3rn+R+rc2O5tXhv6e7c+3uMv7Zr/c26LKfV+tcPGmX/p+JolfPllQzXV5Kds6Nse3XrKnNhx111qP6LS7ut0dN2qWoris6Z+pOeM7Wcr+WZOlT/Dtc70mTV9nrftqmq7XJX247ft/Igrdw+gfwB8JxGc25o5J8jn498NvKbkbsjbw//8KXvvvTGUAb/Pvi95vjAm403ir/ks/xy+/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw7JY//OjeXKs1v9S/0ti7aZ/KfiPvqhT1F/o807HOYGU4yY4tg+WGIzvEJwfsPLI7jJ7K5q+SE89P50sE+/f5fVlp5iAD3tyvz8enPhPOemUg/SfAKV+YgGN3Y+X++zeWP/zo2wv3596bf29+cXB6emZ8ZvqtqRt3Flrz4+2fpx0lcBy2b/qnHQkAAAAAAAAAAABwUP0+GHD15f0+NHKgz3j4n4UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkZgdS/NhikyMXx8v1zfWp1rl0qlv92wmaTSS4hdJ8Si5mfaS0a7hivzpUTb7HOfThZl3v3i88eX2WM12/6RRl89hrV5yJclAXR7VeLeee7zi351HWCbsWidxcNr+GwAA///UmvRo") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) 7m10.730545164s ago: executing program 5 (id=2619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000980)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3000}, [@alu={0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2f22}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x78) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r3, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00), 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)={@map=r5, r4, 0x5}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x258, 0x268, 0x311, 0x0, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x20000000, 0xfffffffc}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c0) 7m10.382398645s ago: executing program 35 (id=2618): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008005}, 0x44) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_open_procfs(0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240), 0x4) 7m9.458493024s ago: executing program 5 (id=2624): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000102c0)=ANY=[], 0x1, 0x14ff, &(0x7f0000000580)="$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") openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) 7m9.430031385s ago: executing program 36 (id=2624): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f00000102c0)=ANY=[], 0x1, 0x14ff, &(0x7f0000000580)="$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") openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x800) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) 5m48.266786742s ago: executing program 9 (id=2805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) getrlimit(0x9, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000180)) shmctl$SHM_UNLOCK(0x0, 0xc) socket(0x10, 0x2, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a120, 0x60, {0x1}, 0xfffffffe, 0x100000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) 5m40.328796964s ago: executing program 9 (id=2819): ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) socket(0x2b, 0x1, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getpid() symlinkat(0x0, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$x25(0x9, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2505000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000001c0)) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000000c0)=0x7) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f0000000000)={0x3, 0x3}) fanotify_init(0x76, 0x80000) 5m33.663542035s ago: executing program 9 (id=2833): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000002", @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 5m32.306788307s ago: executing program 9 (id=2838): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m30.820943654s ago: executing program 9 (id=2840): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55c, &(0x7f00000006c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) setresgid(0xee00, 0x0, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00') r3 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r3, 0xc1004111, &(0x7f0000001580)={0x0, [0x0, 0x100], [{}, {}, {}, {0x1000000, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) fchown(r0, 0x0, 0x0) 5m25.826497672s ago: executing program 9 (id=2854): socket$inet6_tcp(0xa, 0x1, 0x0) setuid(0xee00) socketpair$unix(0x1, 0x2, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x800004, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x8000e3, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240), 0x0) 5m10.388831461s ago: executing program 37 (id=2854): socket$inet6_tcp(0xa, 0x1, 0x0) setuid(0xee00) socketpair$unix(0x1, 0x2, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x3, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80400000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8003, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x800004, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x8001, 0x6, 0x2, 0x9, 0xfffbffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x1, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x8, 0x7fff, 0x72c, 0x1c32, 0x3, 0x6, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0xf, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x1000001, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0x7, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x411, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x4d, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x8000e3, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x7, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x400, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x5d7, 0x7], [0x108e, 0xffff, 0x7, 0x3, 0x88, 0x2, 0x4000000, 0x4, 0x4c, 0x2, 0x763, 0xb, 0x402, 0x1, 0x9, 0x4001000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x2, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20006, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0x4, 0x4, 0x10, 0xe, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff9, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0xe, 0x2, 0xf, 0xf, 0x136, 0x7fffffff]}, 0x45c) ioctl$UI_DEV_CREATE(r1, 0x5501) readv(r1, &(0x7f0000001240), 0x0) 4m21.022668843s ago: executing program 8 (id=3000): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x37, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0303f0000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="d3e30f41ca0c976bbc37d3d04caa0597e41a60e4f5"], 0x1c}}, 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x4f) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) getsockopt$IP_VS_SO_GET_TIMEOUT(r7, 0x0, 0x486, &(0x7f0000000140), 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m18.297743139s ago: executing program 8 (id=3004): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(0xffffffffffffffff, r0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) 4m17.712894057s ago: executing program 8 (id=3007): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback, 0x34, 0x1, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = timerfd_create(0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x408100) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) open_by_handle_at(r1, &(0x7f0000000840)=@raw={0x45c, 0x1, {"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"}}, 0x400) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x24000, 0x148, 0x26}, 0x18) mkdirat(r6, &(0x7f00000000c0)='./file0\x00', 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r7}, 0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r7, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x88c0) close(0x4) 4m11.084118357s ago: executing program 8 (id=3015): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x563, &(0x7f0000000640)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x3, 0x721, &(0x7f0000001b80)="$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") umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) 4m9.298005784s ago: executing program 8 (id=3020): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKSECDISCARD(r1, 0x127d, 0x0) ptrace(0x10, r0) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) renameat2(0xffffffffffffffff, &(0x7f00000002c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0x0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x10040) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket(0x2b, 0x80801, 0x1) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x894b, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x101402, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/handlers\x00', 0x0, 0x0) pread64(r5, &(0x7f0000000600)=""/207, 0xcf, 0x0) ptrace$setregset(0x4205, r0, 0x1, 0x0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f00000001c0)={&(0x7f0000000000)="c945b9", 0x3}) 4m7.025084355s ago: executing program 8 (id=3026): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x8080, &(0x7f0000000580)=ANY=[], 0x1, 0x242, &(0x7f0000000300)="$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") semget(0x1, 0x0, 0x110) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 4m6.074782046s ago: executing program 38 (id=3026): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x8080, &(0x7f0000000580)=ANY=[], 0x1, 0x242, &(0x7f0000000300)="$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") semget(0x1, 0x0, 0x110) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 3m14.321905112s ago: executing program 4 (id=3152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x0, 0x0, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) getrlimit(0x9, &(0x7f0000000100)) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) shmat(0x0, &(0x7f0000f02000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ff3000/0x3000)=nil, 0x3000, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000180)) shmctl$SHM_UNLOCK(0x0, 0xc) socket(0x10, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a120, 0x60, {0x1}, 0xfffffffe, 0x100000}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) 3m11.271395429s ago: executing program 4 (id=3160): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0200000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r6 = fsmount(r0, 0x1, 0xe) fchdir(r6) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) pread64(r7, &(0x7f0000002240)=""/131, 0x83, 0xe5d7) 3m9.810605645s ago: executing program 4 (id=3164): r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r0, 0x34, 0x1, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, 0x0, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0]}, 0x40) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = timerfd_create(0x9, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x188}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr={0x0, 0x0, 0x0, 0x4}, @func={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x28) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x408100) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) open_by_handle_at(r2, &(0x7f0000000840)=@raw={0x45c, 0x1, {"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"}}, 0x400) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x24000, 0x148, 0x26}, 0x18) mkdirat(r7, &(0x7f00000000c0)='./file0\x00', 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r8}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd27, 0x2000, {0x0, 0x0, 0x74, r8, {0xfffd, 0xfff0}, {0xffe0, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x88c0) close(0x4) 3m7.990078753s ago: executing program 4 (id=3166): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x563, &(0x7f0000000640)="$eJzs3U9sFFUYAPBvZmmBUmkxxgAXm3CAxLhQagQ9Ad6MMf49mtCULWlYKGlrQpse4O7BAwevJl68ekE9NdF48ODBE3jybEJMo9TEmNTM7my7trtt07RM6fx+yey+N2/hvW8nH/Pe7r4QQGkNZQ9pxImIuJpEDLS1HYi8caj5uqXF+bG/F+fHklhe/uCPJJKIeLI4P9Z6fZI/H8krhyLilysRz1fW9zs9O3djtF6vTeX1szM3b5+dnp17ZeLm6PXa9dqtkeHzr786MjJy4eKOxfrR+yffqX781qOvJl/79/57R39K4lL0523tceyUoRhaeU/aZe/rhZ3urCCVPJ5OcbL3ta5fT0S8GANRybM+MxATnxY6OGBXLVciloGSSuQ/lFRrHpCtf1tHsTOSp+vx5eYCKIt7KT+aLQean43EocbaqO/PpG1l1FzvDu5A/1kfd05f+T47Ypc+h9jI3XsRcbzT9U8aYxtsfIqTxZ/+L/40Is7lz9n589vsf2hN/VmK/1Jb/Fe22X/R8QNQTguXmzfy9fe/dGX+Ex3mP/0d7l3bUfT9rzX/W1o3/1uNv9Jl/vfuFvv49ccHP3dra5//ZUfWf2su+DQ8vhdxsmP8yUr8SYf4s3nP1S328fU3pw52ays6/uUvIk5H5/hbko2/nzw7PlGvnWs+duzjt+NvPujWf9HxZ9e/r0v8G13/7NztLfZxse/M593aNo8//b03+bBR6s3P3BmdmZkajuhN3l5/fpOFSOs1rb8ji//MqY3zv1P8h7O1wxbjfzL53T/bj393ZfFf2+b1/2yLfXz75Q8Pu7UVHT8AAAAAAADsJ2njtxxJWl0pp2m12tzD+0L0pfXJ6ZmXxyc/uXWt+ZuPwehJW990DzTrSVYfzn8P26qfX1MfiYhjEXG/crhRr45N1q8VHTwAAAAAAAAAAAAAAAAAAADsEUfW7P//q9Lc/w+UxIGiBwAURv5Decl/KC/5D+Ul/6G85D+Ul/yH8pL/UF7yH8pL/kN5yX8AAAAA2JeOvbTwKImIu28cbhyZ3rytp9CRAbstLXoAQGEqRQ8AKIyv/qG8rPGBZJP2Q90aFjb7kwAAAAAAAAAAAADATjl9wv5/KCv7/6G87P+H8rL/H8rLGh+w/x8AAAAAAAAAAAAA9r7+xpGk1XwvcH+kabUa8VxEDEZPMj5Rr52LiKMR8bDSczCrDxc9aAAAAAAAAAAAAAAAAAAAANhnpmfnbozW67UpBQUFhZVC0f8yAQAAAAAAAAAAAAAAAABA+axu+i16JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQnNX//3/3CkXHCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8m/4LAAD//2EREuQ=") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x3, 0x721, &(0x7f0000001b80)="$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") umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) 3m7.053286753s ago: executing program 4 (id=3171): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) fchdir(r3) symlinkat(&(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') 3m2.07871757s ago: executing program 4 (id=3183): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20048045) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r1, 0x5408, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000080, 0x0, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000000)={0x0, 0x7, 0x1008, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) 3m1.892425256s ago: executing program 39 (id=3183): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0x0, &(0x7f0000000440)='net/rt6_stats\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20048045) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r1, 0x5408, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffc}}, 0x44) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x4000080, 0x0, 0x0) close(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0xffffffffffffffff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r4, 0xc0305602, &(0x7f0000000000)={0x0, 0x7, 0x1008, 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) 2m24.841965008s ago: executing program 1 (id=3262): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, &(0x7f0000000500)="00e76113b5", 0x5, 0xfffffffffffffffb) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/88, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000005c0)) r2 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0)={0x0, 0x40}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000280)={0x2, 0x3}, 0x2) 2m22.974807337s ago: executing program 1 (id=3264): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, r1, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x19}, @void, @val={0xc, 0x99, {0x80000000, 0x4f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000840}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r2], 0x20}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000001f80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x40000000) 2m21.693824398s ago: executing program 1 (id=3268): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x840000000002, 0x3, 0x100) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4044010) 2m20.640754171s ago: executing program 1 (id=3271): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x563, &(0x7f0000000640)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x3, 0x721, &(0x7f0000001b80)="$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") umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) 2m16.494597652s ago: executing program 1 (id=3277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x28, r1, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x19}, @void, @val={0xc, 0x99, {0x80000000, 0x4f}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x24000840}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r2], 0x20}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@loopback, @in6=@dev}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000001f80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001f40)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.state\x00', 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x40000000) 2m12.310317014s ago: executing program 1 (id=3289): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prlimit64(0x0, 0xf, 0x0, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000080)={0x8, 0x94, 0x7}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xc2) fsync(r2) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) fchdir(r0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = socket(0x2, 0x80805, 0x0) accept4$inet(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f0000000040)={0x3, "2920c910fc68102cd22371bf8d81bad1d068831d3b27f21a926fe5f9a3289ae1", 0x2, 0x1000, 0x44d, 0x4, 0x2, 0x3, 0x3, 0x7}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) 2m11.458816961s ago: executing program 40 (id=3289): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) prlimit64(0x0, 0xf, 0x0, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000080)={0x8, 0x94, 0x7}) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xc2) fsync(r2) ioctl$USBDEVFS_GET_CAPABILITIES(r2, 0x8004551a, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) fchdir(r0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) r5 = socket(0x2, 0x80805, 0x0) accept4$inet(r5, 0x0, 0x0, 0x0) recvmmsg$unix(r4, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) r6 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f0000000040)={0x3, "2920c910fc68102cd22371bf8d81bad1d068831d3b27f21a926fe5f9a3289ae1", 0x2, 0x1000, 0x44d, 0x4, 0x2, 0x3, 0x3, 0x7}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r5) 30.34311103s ago: executing program 6 (id=3598): ioctl$XFS_IOC_FREE_EOFBLOCKS(0xffffffffffffffff, 0x8080583a, &(0x7f0000000080)={0xfffffa48, 0x5, 0xeb, 0x4, 0x4, 0x0, 0x3}) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x4, 0x4, 0x10, 0x7f, @vifc_lcl_addr=@multicast2, @multicast2}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 29.294794943s ago: executing program 6 (id=3601): r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000100c0)={'binder0\x00'}) 29.184874037s ago: executing program 6 (id=3603): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4, 0x10000, @empty}, 0x1c) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) r1 = fsopen(&(0x7f0000000080)='qnx4\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20080, 0x0) writev(r2, 0x0, 0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 28.241915386s ago: executing program 6 (id=3606): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x189) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x80004, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 27.005142956s ago: executing program 6 (id=3611): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x300f401, 0x0, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800004, &(0x7f0000000000)={[{@debug}, {@delalloc}, {@nodioread_nolock}, {@test_dummy_encryption}, {@i_version}, {@oldalloc}, {@data_err_abort}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 26.274620379s ago: executing program 6 (id=3615): syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b01"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xc, 0x40, 0x1, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0x2caf, 0x2, 0x1, {0x22, 0x131}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x0, 0x1}}}}}]}}]}}, 0x0) 25.984614848s ago: executing program 41 (id=3615): syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b01"], 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xc, 0x40, 0x1, "", [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x2, 0xff, {0x9, 0x21, 0x2caf, 0x2, 0x1, {0x22, 0x131}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x8, 0x0, 0x1}}}}}]}}]}}, 0x0) 9.958641425s ago: executing program 2 (id=3678): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000540)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$overlay(0x0, &(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) 8.506618671s ago: executing program 2 (id=3684): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0xffffffffffffff48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl(r0, 0x8b1a, &(0x7f0000000040)) 7.683389607s ago: executing program 2 (id=3686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x3c}}, 0x0) 7.206389512s ago: executing program 2 (id=3690): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000009060102000000000000000000000000090002007379"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) gettid() openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0xffffff37, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) 5.231382105s ago: executing program 0 (id=3693): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f01f000008001240000700000d000300686173683a6e65740000000005"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4044010) 4.038750543s ago: executing program 0 (id=3695): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000600)={0x2, 0x12, 0xfe, 0x8, 0x2, 0x0, 0x70bd26, 0x25dfdbff}, 0x10}}, 0x20040084) 3.951269385s ago: executing program 0 (id=3696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40488c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x7fffa, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x1, 0x9, 0x1, 0x8}, 0xb, 0x0, 0x401, 0x5, 0x9, 0x7, 0x2, 0x1d, 0x7, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x1008, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031620d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.846562138s ago: executing program 7 (id=3698): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) 3.210627129s ago: executing program 2 (id=3699): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x81, 0x2, 0x80, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x22}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000300)={r1, 0x0, 0x9, 0x8, 0x7, 0x9}, 0x14) 3.094696902s ago: executing program 2 (id=3701): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioprio_get$pid(0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x28, 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, 0x0) 3.031149994s ago: executing program 7 (id=3703): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000e80)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r3, @ANYBLOB="010800040000000000000b01000008000300", @ANYRES32=r5, @ANYBLOB="28005080140001004abee33957edf8aaae14574df40000000500020007000000080003000bac0f"], 0x44}}, 0x0) 2.403379944s ago: executing program 3 (id=3704): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f01f000008001240000700000d000300686173683a6e657400000000050005000a00"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4044010) 2.178761581s ago: executing program 3 (id=3705): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) 2.081861484s ago: executing program 7 (id=3706): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000980)=ANY=[@ANYBLOB="230000003702000002000000000006000000000001000000", @ANYBLOB="0500237b407b"], 0x23) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x8080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, 0x0, &(0x7f0000000140)) 2.030824476s ago: executing program 0 (id=3707): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x203, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 1.963511138s ago: executing program 3 (id=3708): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r1, 0x2, 0x4c, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 1.945605538s ago: executing program 0 (id=3709): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000009060102000000000000000000000000090002007379"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) gettid() openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x5, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0xffffff37, 0xc934, 0x0, 0x10001, 0x40003, 0x0, 0x42b, 0x8001}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x4004010) 1.215858612s ago: executing program 3 (id=3710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000300)=r3) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360"], 0xffdd) 1.183303633s ago: executing program 7 (id=3711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x4c, r1, 0x101, 0x70bd2a, 0x80000, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='v'}, @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "1ec14026da"}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x4804) 331.47284ms ago: executing program 7 (id=3712): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xfe}}, @ip_ttl={{0x14, 0x0, 0x2, 0x20a2}}], 0x30}, 0x1) 330.82703ms ago: executing program 0 (id=3713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, 0x0, 0x4000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x18, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 118.765056ms ago: executing program 3 (id=3714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000001400078005001500f01f000008001240000700000d000300686173683a6e657400000000050005000a00"], 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4044010) 65.473238ms ago: executing program 7 (id=3715): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x1, 0xffffffffffffffff, 0xfff}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc) 0s ago: executing program 3 (id=3716): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4c3, &(0x7f0000000ac0)="$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") chdir(&(0x7f0000001180)='./bus\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x908432, 0x0, 0xfe, 0x0, &(0x7f00000002c0)) rename(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000400)='./file1\x00') kernel console output (not intermixed with test programs): netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.719170][T17229] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.761270][T17229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.769388][T17229] device bridge_slave_0 entered promiscuous mode [ 1251.833115][T17229] bridge0: port 2(bridge_slave_1) entered blocking state [ 1251.850818][T17229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.858910][T17229] device bridge_slave_1 entered promiscuous mode [ 1251.935352][ T4277] bond0: (slave netdevsim0): Releasing backup interface [ 1252.986826][T14465] Bluetooth: hci5: command 0x040f tx timeout [ 1253.115274][ T4277] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1253.150740][ T4277] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.222577][T17229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1253.259692][T17229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1253.580826][T17229] team0: Port device team_slave_0 added [ 1253.612340][T17229] team0: Port device team_slave_1 added [ 1253.740807][T17229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1253.747786][T17229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1255.008606][T14465] Bluetooth: hci5: command 0x0419 tx timeout [ 1255.161323][T17229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1255.223516][T17229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1255.240975][T17229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1255.369793][T17329] loop8: detected capacity change from 0 to 1024 [ 1255.487202][T17229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1255.582276][T17329] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1256.588603][T17332] netlink: 'syz.0.3014': attribute type 1 has an invalid length. [ 1256.735965][T17345] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #12: block 80: comm syz.8.3015: lblock 0 mapped to illegal pblock 80 (length 1) [ 1256.761525][T17348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3018'. [ 1256.959612][T17329] EXT4-fs (loop8): re-mounted. Opts: (null). Quota mode: writeback. [ 1257.002211][T17229] device hsr_slave_0 entered promiscuous mode [ 1257.051926][T15237] EXT4-fs error (device loop8): ext4_map_blocks:631: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 1257.071398][T17229] device hsr_slave_1 entered promiscuous mode [ 1257.092008][T17229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1257.099694][T17229] Cannot create hsr debugfs directory [ 1257.131158][T15237] EXT4-fs warning (device loop8): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 1257.191855][T17359] loop3: detected capacity change from 0 to 1024 [ 1257.279716][T17359] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 1257.310765][T17359] EXT4-fs (loop3): Ignoring removed bh option [ 1257.316905][T17359] EXT4-fs (loop3): Project quota feature not enabled. Cannot enable project quota enforcement. [ 1257.422344][T17362] loop0: detected capacity change from 0 to 8 [ 1259.265689][T17373] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3024'. [ 1261.325212][T17395] netlink: 'syz.0.3031': attribute type 1 has an invalid length. [ 1261.790008][T17398] bond4: (slave geneve2): Error -99 calling set_mac_address [ 1262.970893][T17229] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1263.141719][T17229] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1263.210908][T17229] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1263.278583][T17229] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1264.159137][ T5046] Bluetooth: hci0: command 0x0409 tx timeout [ 1264.438185][ T4277] device hsr_slave_0 left promiscuous mode [ 1264.447534][ T4277] device hsr_slave_1 left promiscuous mode [ 1264.478465][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1264.497559][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1264.514995][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1264.538327][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1264.646907][ T4277] device bridge_slave_1 left promiscuous mode [ 1264.665203][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.766702][ T4277] device bridge_slave_0 left promiscuous mode [ 1264.931952][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.746415][ T4277] device veth1_macvtap left promiscuous mode [ 1265.764253][ T4277] device veth0_macvtap left promiscuous mode [ 1265.811687][ T4277] device veth1_vlan left promiscuous mode [ 1265.819901][ T4277] device veth0_vlan left promiscuous mode [ 1266.200762][T15572] Bluetooth: hci0: command 0x041b tx timeout [ 1266.236203][T17452] loop0: detected capacity change from 0 to 512 [ 1266.412502][T17452] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 1266.541718][ T4277] bond1 (unregistering): Released all slaves [ 1266.713587][T17452] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 1266.806400][T17452] ext4 filesystem being mounted at /591/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1268.013316][ T25] audit: type=1800 audit(1778898855.983:16): pid=17452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3039" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 1268.193536][ T4277] team0 (unregistering): Port device team_slave_1 removed [ 1268.346483][T15572] Bluetooth: hci0: command 0x040f tx timeout [ 1268.367505][ T4277] team0 (unregistering): Port device team_slave_0 removed [ 1268.386040][ T4277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1269.190932][ T4277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.026586][ T4277] bond0 (unregistering): Released all slaves [ 1270.262648][T17402] chnl_net:caif_netlink_parms(): no params data found [ 1270.334348][T17229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1270.498898][ T5046] Bluetooth: hci0: command 0x0419 tx timeout [ 1270.585308][T17498] netlink: 'syz.6.3042': attribute type 1 has an invalid length. [ 1272.022449][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1272.041161][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1272.068633][T17229] 8021q: adding VLAN 0 to HW filter on device team0 [ 1272.118920][T17402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.151307][T17402] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.262560][T17402] device bridge_slave_0 entered promiscuous mode [ 1272.336842][T17402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.370759][T17402] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.378923][T17402] device bridge_slave_1 entered promiscuous mode [ 1272.421638][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1272.441739][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1272.478383][ T8320] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.485620][ T8320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1272.494092][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1272.503063][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1272.519894][ T8320] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.527170][ T8320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1272.547857][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1272.577396][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1272.647408][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1272.673755][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1272.711001][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1272.732315][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1272.749110][T17402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1273.856456][T17402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1273.930126][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1273.970439][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1274.023734][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1274.049110][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1274.087680][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1274.102848][ T4548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1274.184313][T17229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1274.605079][T17402] team0: Port device team_slave_0 added [ 1274.798970][T17402] team0: Port device team_slave_1 added [ 1275.102149][T17402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1275.109152][T17402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1275.250765][T17402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1275.287862][T17402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1275.318337][T17402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1275.380532][T17402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.422463][T17229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1275.451519][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1275.494716][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1275.616906][T17402] device hsr_slave_0 entered promiscuous mode [ 1275.636756][T17402] device hsr_slave_1 entered promiscuous mode [ 1275.660556][T17402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1275.668186][T17402] Cannot create hsr debugfs directory [ 1275.969900][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1276.000115][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1276.052915][T17580] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3053'. [ 1276.171708][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1276.188461][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1276.208465][T17229] device veth0_vlan entered promiscuous mode [ 1276.219540][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1276.251102][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1276.888433][T17229] device veth1_vlan entered promiscuous mode [ 1277.046884][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1277.063882][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1277.089772][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1278.279017][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1278.453458][T17229] device veth0_macvtap entered promiscuous mode [ 1278.480371][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1278.527884][T17229] device veth1_macvtap entered promiscuous mode [ 1278.641813][T17229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1278.714244][T17229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.787048][T17229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1278.843395][T17229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.887782][T17229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1278.936367][T17229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1278.979773][T17229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.027383][T17229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1279.075738][T17229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1279.405182][T17229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.182238][T17229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1280.352469][T17633] loop6: detected capacity change from 0 to 512 [ 1280.376635][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1280.397125][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1280.432574][T17630] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3066'. [ 1280.498668][T17633] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1280.616106][T17633] ext4 filesystem being mounted at /326/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1281.056753][T17229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1281.107947][T17229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1281.197652][T17229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1282.593719][T17229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.684300][T17229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.695113][T17229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.705207][T17229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.715962][T17229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.726173][T17229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.737214][T17229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.748742][T17229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1283.763561][T17229] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.808353][T17229] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.822444][T17229] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.838399][T17229] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.873993][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1283.888454][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1284.145061][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1284.180740][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.205962][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1284.299507][T17664] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1284.476289][T17402] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1284.946473][T17402] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1285.987110][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.309910][T17402] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1286.352217][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.428009][T17402] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1286.848586][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1286.954344][T17677] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3077'. [ 1287.370473][ T4277] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.393731][T17690] loop3: detected capacity change from 0 to 256 [ 1287.590991][T17692] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3079'. [ 1287.612903][T17693] loop6: detected capacity change from 0 to 4096 [ 1287.614239][ T4277] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.765439][T17693] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1287.775638][T17693] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1287.829842][T17693] EXT4-fs (loop6): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 1287.876458][ T4277] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1287.947903][T17402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1287.955180][T17705] loop0: detected capacity change from 0 to 16 [ 1288.004201][ T4277] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.037355][T14046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1288.051529][T14046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1288.076385][T17705] erofs: (device loop0): mounted with root inode @ nid 36. [ 1288.086913][T17402] 8021q: adding VLAN 0 to HW filter on device team0 [ 1288.111875][T17705] erofs: (device loop0): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 9 of nid 36 [ 1288.206726][T14046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1288.217629][T14046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1288.227178][T14046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.234312][T14046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1288.636496][T14046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1290.105373][T14046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1290.270178][T14046] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1290.560806][T14046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.567964][T14046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.660357][T14046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1290.720649][T17720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3089'. [ 1290.828267][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1290.861592][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1290.892535][T17737] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3094'. [ 1292.602595][T17741] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3095'. [ 1292.669772][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1292.694229][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1292.703292][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1292.712086][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1293.528554][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1293.591704][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1293.614674][T17402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1293.638443][T17752] loop6: detected capacity change from 0 to 16 [ 1293.661757][T17402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1293.916176][T14046] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1293.931286][T14046] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1294.117495][T17752] erofs: (device loop6): mounted with root inode @ nid 36. [ 1294.205945][T17752] erofs: (device loop6): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 9 of nid 36 [ 1295.342406][T17772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3105'. [ 1295.389231][T17770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3102'. [ 1296.293182][T17785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3108'. [ 1296.409109][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1296.507061][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1296.529783][T17402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1296.594791][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1296.618653][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1296.672693][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1296.692661][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1296.716304][T17402] device veth0_vlan entered promiscuous mode [ 1296.736088][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1296.757884][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1296.790056][T17402] device veth1_vlan entered promiscuous mode [ 1296.926948][T17799] loop3: detected capacity change from 0 to 256 [ 1296.937765][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1296.959645][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1296.983980][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1297.032604][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1297.103704][T17402] device veth0_macvtap entered promiscuous mode [ 1297.131046][T17402] device veth1_macvtap entered promiscuous mode [ 1297.218799][T17402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.281326][T17402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.302889][T17402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.314562][T17402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.340605][T17402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.352028][T17402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.367385][T17801] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3114'. [ 1297.376594][T17402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.395329][T17402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.437216][T17402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.459757][T17402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.482696][T17402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1297.497781][T17402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1297.957867][T17402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1297.999117][T14046] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1298.065634][T14046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1298.119206][T17402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.155634][T17402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.186648][T17402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.204952][T17402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.220595][T17402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.232053][T17402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.266635][T17402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.297271][T17402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.329193][T17402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.348825][T17402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.388714][T17402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1298.417444][T17402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1298.465304][T17402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1298.865803][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1298.906341][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1298.989620][T17402] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.036824][T17402] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.047943][T17402] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.118546][T17402] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1299.484317][T17835] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3121'. [ 1299.561731][ T8320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1299.569579][ T8320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1299.760124][ T4277] device hsr_slave_0 left promiscuous mode [ 1299.766958][ T4277] device hsr_slave_1 left promiscuous mode [ 1299.808310][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1299.816344][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1299.826460][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1299.834619][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1299.868084][ T4277] device bridge_slave_1 left promiscuous mode [ 1299.879420][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.913455][ T4277] device bridge_slave_0 left promiscuous mode [ 1300.008050][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.293434][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.299823][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.307407][ T4277] device veth1_macvtap left promiscuous mode [ 1300.887791][ T4277] device veth0_macvtap left promiscuous mode [ 1300.894068][ T4277] device veth1_vlan left promiscuous mode [ 1300.900039][ T4277] device veth0_vlan left promiscuous mode [ 1301.510084][T17847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3127'. [ 1302.378268][ T4277] team0 (unregistering): Port device team_slave_1 removed [ 1302.405995][ T4277] team0 (unregistering): Port device team_slave_0 removed [ 1302.434214][ T4277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.471557][ T4277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.647605][ T4277] bond0 (unregistering): Released all slaves [ 1302.711921][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1302.758589][ T4331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1302.773985][ T4331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1302.821197][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1303.514031][T17875] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3132'. [ 1304.902516][T17897] netlink: 'syz.4.3137': attribute type 1 has an invalid length. [ 1306.409530][T17908] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3139'. [ 1308.624618][T15572] Bluetooth: hci1: command 0x0409 tx timeout [ 1308.745712][T17946] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1309.406590][T17909] chnl_net:caif_netlink_parms(): no params data found [ 1309.907832][T17909] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.982924][T17909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.015131][T17909] device bridge_slave_0 entered promiscuous mode [ 1310.237759][T17909] bridge0: port 2(bridge_slave_1) entered blocking state [ 1310.257491][T17909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1310.307778][T17909] device bridge_slave_1 entered promiscuous mode [ 1310.690693][T14473] Bluetooth: hci1: command 0x041b tx timeout [ 1310.693116][T17909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1311.136775][T17978] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3150'. [ 1311.549018][T17977] Can't find ip_set type hash:ne [ 1311.600071][T17971] netlink: 'syz.6.3149': attribute type 1 has an invalid length. [ 1312.090066][T17909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1312.118165][T17993] loop6: detected capacity change from 0 to 512 [ 1312.226626][T17993] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 1312.406791][T17909] team0: Port device team_slave_0 added [ 1312.419805][T17993] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 1313.155976][T14465] Bluetooth: hci1: command 0x040f tx timeout [ 1313.180683][T17993] ext4 filesystem being mounted at /347/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1313.213851][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3154'. [ 1313.279052][T17909] team0: Port device team_slave_1 added [ 1313.314933][ T25] audit: type=1800 audit(1778898901.283:17): pid=17993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3153" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 1313.333108][T17909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1313.342519][T17909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1313.540672][T17909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1313.795777][T17909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1313.829123][T17909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1313.933169][T17909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1313.982374][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3155'. [ 1314.232845][T17909] device hsr_slave_0 entered promiscuous mode [ 1314.257104][T17909] device hsr_slave_1 entered promiscuous mode [ 1314.322254][T17909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1314.351075][T17909] Cannot create hsr debugfs directory [ 1314.452578][T18024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3157'. [ 1315.250919][T14473] Bluetooth: hci1: command 0x0419 tx timeout [ 1315.356514][T17909] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1317.454939][T17909] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1317.694231][T18058] loop3: detected capacity change from 0 to 512 [ 1317.758005][T18059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3164'. [ 1318.347052][T18044] netlink: 'syz.6.3162': attribute type 1 has an invalid length. [ 1318.403889][T18061] loop4: detected capacity change from 0 to 1024 [ 1318.504427][T18058] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 1318.622187][T18061] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1318.656839][T17909] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1318.704320][T17909] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1318.734998][T18058] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 1318.752031][T18058] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1318.786401][ T25] audit: type=1800 audit(1778898906.753:18): pid=18058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3165" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1318.850283][T18072] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #12: block 80: comm syz.4.3166: lblock 0 mapped to illegal pblock 80 (length 1) [ 1318.995002][T18076] loop6: detected capacity change from 0 to 16 [ 1319.062149][T18076] erofs: (device loop6): mounted with root inode @ nid 36. [ 1319.112860][T17909] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1319.131764][T18076] erofs: (device loop6): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 9 of nid 36 [ 1319.169100][T17909] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1319.217148][T18080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3168'. [ 1319.319097][T17229] EXT4-fs error (device loop4): ext4_map_blocks:631: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 1319.800143][T17229] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 1319.848697][T17229] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 5 in block_group 0 [ 1319.931866][T17909] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1319.939841][T17229] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1320.881800][T17909] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.893061][T17229] EXT4-fs error (device loop4): ext4_dirty_inode:6077: inode #2: comm syz-executor: mark_inode_dirty error [ 1321.079699][T18100] loop3: detected capacity change from 0 to 256 [ 1321.108434][ T4245] EXT4-fs error (device loop4): __ext4_get_inode_loc:4334: comm kworker/u4:5: Invalid inode table block 5 in block_group 0 [ 1322.341315][T18118] loop6: detected capacity change from 0 to 512 [ 1322.365047][T17909] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1322.399438][T18118] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 1322.546452][T18118] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 1322.610602][T14480] Bluetooth: hci2: command 0x0406 tx timeout [ 1322.625899][T17909] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1322.637700][T18118] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1322.650944][T17909] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1322.845104][T17909] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1323.076307][T18133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3179'. [ 1323.378386][T17909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1323.532985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1323.575722][T18141] loop6: detected capacity change from 0 to 16 [ 1323.602519][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1323.758080][T17909] 8021q: adding VLAN 0 to HW filter on device team0 [ 1323.924705][T18141] erofs: (device loop6): mounted with root inode @ nid 36. [ 1324.008024][T18144] loop3: detected capacity change from 0 to 256 [ 1324.010877][T18141] erofs: (device loop6): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 9 of nid 36 [ 1324.033920][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1324.043030][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1324.051805][T14260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.058917][T14260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1324.067481][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1324.098226][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1324.125894][T18144] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xecc0b056, utbl_chksum : 0xe619d30d) [ 1324.173407][T14260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.180561][T14260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.225684][T18144] attempt to access beyond end of device [ 1324.225684][T18144] loop3: rw=2049, want=34225520826, limit=256 [ 1324.292636][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1324.301366][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1324.327050][T18144] Buffer I/O error on dev loop3, logical block 34225520825, lost async page write [ 1324.357219][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1324.374118][T18144] attempt to access beyond end of device [ 1324.374118][T18144] loop3: rw=2049, want=34225520827, limit=256 [ 1324.404405][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1324.451027][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1324.459844][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1324.469023][T18144] Buffer I/O error on dev loop3, logical block 34225520826, lost async page write [ 1324.488282][T18144] attempt to access beyond end of device [ 1324.488282][T18144] loop3: rw=2049, want=34225520828, limit=256 [ 1324.507762][T18144] Buffer I/O error on dev loop3, logical block 34225520827, lost async page write [ 1324.617481][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1324.626392][T14260] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1326.356449][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1326.398708][T18175] loop6: detected capacity change from 0 to 512 [ 1326.439720][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1326.520692][T18175] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 1326.537046][T17909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1326.602161][T17909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1326.743286][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1326.966363][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1327.021155][T18175] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 1327.350730][T18175] ext4 filesystem being mounted at /360/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1327.646677][T18200] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1327.655808][T18200] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1327.665327][T18200] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1327.674636][T18200] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1327.898866][T18200] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.907860][T18200] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.916741][T18200] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1327.925641][T18200] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.464488][ T4277] device hsr_slave_0 left promiscuous mode [ 1328.481025][ T4277] device hsr_slave_1 left promiscuous mode [ 1328.487512][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1328.502182][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1328.510240][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1328.518149][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1328.531580][ T4277] device bridge_slave_1 left promiscuous mode [ 1328.545531][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.566631][ T4277] device bridge_slave_0 left promiscuous mode [ 1328.578894][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.597842][ T4277] device veth1_macvtap left promiscuous mode [ 1328.610397][ T4277] device veth0_macvtap left promiscuous mode [ 1328.624037][ T4277] device veth1_vlan left promiscuous mode [ 1328.629919][ T4277] device veth0_vlan left promiscuous mode [ 1329.131467][ T4232] Bluetooth: hci4: command 0x0409 tx timeout [ 1329.861608][T18235] loop1: detected capacity change from 0 to 512 [ 1330.067028][T18235] EXT4-fs warning (device loop1): ext4_xattr_inode_get:506: inode #11: comm syz.1.3196: EA inode hash validation failed [ 1330.091759][ T4277] bond4 (unregistering): Released all slaves [ 1330.104107][ T4277] bond3 (unregistering): Released all slaves [ 1330.112532][T18240] loop6: detected capacity change from 0 to 1024 [ 1330.124033][ T4277] bond2 (unregistering): Released all slaves [ 1330.136130][ T4277] bond1 (unregistering): Released all slaves [ 1330.160861][T18235] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.3196: corrupted inode contents [ 1330.209274][T18235] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #15: comm syz.1.3196: mark_inode_dirty error [ 1330.231046][T18235] EXT4-fs error (device loop1): ext4_do_update_inode:5229: inode #15: comm syz.1.3196: corrupted inode contents [ 1330.288168][T18240] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1330.314483][T18235] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2952: inode #15: comm syz.1.3196: mark_inode_dirty error [ 1330.440334][T18235] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2955: inode #15: comm syz.1.3196: mark inode dirty (error -117) [ 1330.468837][T18246] EXT4-fs error (device loop6): ext4_map_blocks:631: inode #12: block 80: comm syz.6.3197: lblock 0 mapped to illegal pblock 80 (length 1) [ 1330.491685][T18235] EXT4-fs warning (device loop1): ext4_evict_inode:304: xattr delete (err -117) [ 1330.530662][T18235] EXT4-fs (loop1): 1 orphan inode deleted [ 1330.536462][T18235] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 1330.622862][ T4277] team0 (unregistering): Port device team_slave_1 removed [ 1330.744624][ T4277] team0 (unregistering): Port device team_slave_0 removed [ 1330.792704][ T4277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1330.847861][ T4277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1331.255679][ T4263] Bluetooth: hci4: command 0x041b tx timeout [ 1331.758276][ T4277] bond0 (unregistering): Released all slaves [ 1332.251155][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1332.258640][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1332.321363][T17909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1332.510164][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1332.542737][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1332.764618][T18180] chnl_net:caif_netlink_parms(): no params data found [ 1333.320827][ T21] Bluetooth: hci4: command 0x040f tx timeout [ 1333.847630][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1333.861458][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1333.942762][T17909] device veth0_vlan entered promiscuous mode [ 1333.965340][T17909] device veth1_vlan entered promiscuous mode [ 1334.051769][T17909] device veth0_macvtap entered promiscuous mode [ 1335.052788][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1335.110139][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1335.161332][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1335.211444][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1335.228941][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1335.248104][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1335.286426][T18180] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.294012][T18180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.339227][T18180] device bridge_slave_0 entered promiscuous mode [ 1335.351101][T17909] device veth1_macvtap entered promiscuous mode [ 1335.358899][T18180] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.390565][T18180] bridge0: port 2(bridge_slave_1) entered disabled state [ 1335.401092][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 1335.429167][T18180] device bridge_slave_1 entered promiscuous mode [ 1335.463124][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1335.571497][T17909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1335.598221][T17909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.628294][T17909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1335.663841][T17909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.688385][T17909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1335.712619][T18312] loop1: detected capacity change from 0 to 16 [ 1335.712887][T17909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.729317][T17909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1335.740200][T17909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.751343][T17909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1335.765108][T17909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.786265][T17909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1335.808008][T17909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1335.822791][T18312] erofs: (device loop1): mounted with root inode @ nid 36. [ 1335.840579][T17909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.869579][T17909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1335.918050][T17909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1335.945767][T17909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1335.974258][T17909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.022828][T17909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.041483][T17909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.061994][T17909] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1336.079347][T17909] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1336.108537][T17909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1336.157642][T18180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1337.201234][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1337.214330][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1337.223452][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1337.232500][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1337.251185][T18180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1337.538134][T17909] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.627513][T17909] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.636334][T17909] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1337.647057][T17909] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.344439][T18180] team0: Port device team_slave_0 added [ 1338.411312][T18180] team0: Port device team_slave_1 added [ 1339.230713][T18180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.280658][T18180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.372486][T18180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.448380][T18180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.480567][T18180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1339.570107][T18180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.639270][T18367] loop6: detected capacity change from 0 to 16 [ 1339.722201][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1339.725837][T18367] erofs: (device loop6): mounted with root inode @ nid 36. [ 1339.730043][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1339.787148][T18180] device hsr_slave_0 entered promiscuous mode [ 1339.843658][T18180] device hsr_slave_1 entered promiscuous mode [ 1339.866303][T18180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1339.920923][T18180] Cannot create hsr debugfs directory [ 1339.947285][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1340.033874][T17900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1340.074591][T17900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1341.130446][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1342.952406][T18180] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1342.991351][T18180] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.233275][T18180] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1343.278068][T18180] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.419720][T18180] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1343.523996][T18180] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1343.619273][T18422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3225'. [ 1344.062567][T18433] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1345.528548][T18180] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1345.540618][T18180] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.138502][T18440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3227'. [ 1347.922920][T18180] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1348.021130][T18465] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3236'. [ 1348.052911][T18180] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1348.082546][T18180] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1348.112745][T18180] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1348.528167][T18475] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1351.271675][T18180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.333192][T18180] 8021q: adding VLAN 0 to HW filter on device team0 [ 1351.381766][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1351.418460][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1351.480632][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1351.550842][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1351.600948][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.608071][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1351.803414][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1352.119855][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1352.438890][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1352.459917][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.467051][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1352.792966][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1352.875062][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1353.007223][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1353.018986][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1353.033196][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1353.041999][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1353.061340][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1353.127187][T18180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1353.198529][T18520] loop3: detected capacity change from 0 to 512 [ 1353.214529][T18180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1353.421532][T18520] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1353.521212][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1353.593008][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1353.614133][T18520] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1353.905099][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1353.913732][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1353.926251][T18521] netlink: 'syz.1.3247': attribute type 1 has an invalid length. [ 1354.169432][T18534] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1354.613160][T18529] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3241'. [ 1354.710070][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1355.693495][ T4277] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.215601][ T4277] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.228913][T18552] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3249'. [ 1356.815403][ T4277] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.897013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1356.918516][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1357.717441][ T4277] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.432347][T18180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1359.889859][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1359.900917][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1359.922346][T18572] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3256'. [ 1359.960222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1359.988810][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1360.014055][T18180] device veth0_vlan entered promiscuous mode [ 1360.050357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1360.088571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1360.127466][T18180] device veth1_vlan entered promiscuous mode [ 1360.960270][T18588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3259'. [ 1360.969319][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1360.991276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1361.375615][T18180] device veth0_macvtap entered promiscuous mode [ 1361.390842][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1361.484812][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.491170][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.031354][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1362.145312][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1363.307625][T18595] netlink: 'syz.0.3260': attribute type 1 has an invalid length. [ 1363.365655][T18180] device veth1_macvtap entered promiscuous mode [ 1363.604109][T18621] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3265'. [ 1364.356589][T18620] Can't find ip_set type hash:ne [ 1364.379336][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.453185][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.464318][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.475119][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.541196][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.668433][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1364.774980][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1364.785677][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.632574][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.668737][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.730816][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1365.741775][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1365.758867][T18642] loop1: detected capacity change from 0 to 1024 [ 1365.769617][T18180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1365.972404][T14046] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1366.029991][T14046] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1366.048423][T18642] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1366.117546][T18655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3269'. [ 1366.276791][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1366.360633][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1366.516294][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1366.840485][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1367.117618][T18668] netlink: 'syz.3.3275': attribute type 1 has an invalid length. [ 1368.677040][T18660] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #2: block 16: comm syz.1.3271: lblock 0 mapped to illegal pblock 16 (length 1) [ 1369.148146][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1369.754784][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.804895][T17402] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 1369.852188][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1369.923265][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.933317][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1369.943889][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.956411][T18180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1369.967137][T17402] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 1369.967207][T17402] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm syz-executor: Invalid inode table block 5 in block_group 0 [ 1369.967860][T17402] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 1369.981506][T18180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1370.021794][T18180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1370.089989][T17402] EXT4-fs error (device loop1): ext4_dirty_inode:6077: inode #2: comm syz-executor: mark_inode_dirty error [ 1370.227288][T18683] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3278'. [ 1370.922638][T18681] Can't find ip_set type hash:ne [ 1371.000560][T18653] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1371.031936][T18674] netlink: 'syz.3.3276': attribute type 1 has an invalid length. [ 1371.085255][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1371.105004][ T4280] EXT4-fs error (device loop1): __ext4_get_inode_loc:4334: comm kworker/u4:9: Invalid inode table block 5 in block_group 0 [ 1371.121480][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1371.159604][T18180] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.220542][T18180] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.257560][T18180] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1371.336625][T18180] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.247868][T18730] netlink: 'syz.3.3285': attribute type 1 has an invalid length. [ 1373.905844][T18725] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3284'. [ 1374.064549][T18739] misc userio: Invalid payload size [ 1374.071355][T18739] misc userio: No port type given on /dev/userio [ 1374.080568][T18739] misc userio: The device must be registered before sending interrupts [ 1374.274708][T18740] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3286'. [ 1374.536608][T14355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.598996][T14355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1374.735980][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1374.927365][T14260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1374.946968][T14260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.023646][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1377.895103][T15572] Bluetooth: hci0: command 0x0409 tx timeout [ 1378.301824][T18789] loop2: detected capacity change from 0 to 8 [ 1378.594368][T18795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3297'. [ 1378.979058][T18804] misc userio: Invalid payload size [ 1378.988376][T18804] misc userio: No port type given on /dev/userio [ 1379.088594][T18805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3301'. [ 1379.284461][ T4277] device hsr_slave_0 left promiscuous mode [ 1379.291826][ T4277] device hsr_slave_1 left promiscuous mode [ 1379.306279][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1379.321340][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1379.350253][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1379.385272][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1379.964453][T15572] Bluetooth: hci0: command 0x041b tx timeout [ 1380.091734][ T4277] device bridge_slave_1 left promiscuous mode [ 1380.102708][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1380.155413][ T4277] device bridge_slave_0 left promiscuous mode [ 1380.166825][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.742364][ T4277] device veth1_macvtap left promiscuous mode [ 1381.117912][ T4277] device veth0_macvtap left promiscuous mode [ 1381.138116][ T4277] device veth1_vlan left promiscuous mode [ 1381.153375][ T4277] device veth0_vlan left promiscuous mode [ 1381.449713][T18861] loop6: detected capacity change from 0 to 8 [ 1382.050762][ T21] Bluetooth: hci0: command 0x040f tx timeout [ 1383.129243][ T4277] team0 (unregistering): Port device team_slave_1 removed [ 1383.196496][ T4277] team0 (unregistering): Port device team_slave_0 removed [ 1383.241608][ T4277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1383.307199][ T4277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1383.541515][ T4277] bond0 (unregistering): Released all slaves [ 1383.644387][T18865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3311'. [ 1384.170746][ T21] Bluetooth: hci0: command 0x0419 tx timeout [ 1384.200907][T18900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3317'. [ 1384.683460][T18754] chnl_net:caif_netlink_parms(): no params data found [ 1384.951367][T18754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.000602][T18754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.009585][T18754] device bridge_slave_0 entered promiscuous mode [ 1385.092811][T18754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.135566][T18754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.143543][T18920] loop6: detected capacity change from 0 to 512 [ 1385.162194][T18754] device bridge_slave_1 entered promiscuous mode [ 1385.211965][T18920] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1385.247390][T18891] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1385.277156][T18754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.504107][T18754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.514415][T18932] loop2: detected capacity change from 0 to 256 [ 1385.532928][T18929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3321'. [ 1386.052035][T18932] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xecc0b056, utbl_chksum : 0xe619d30d) [ 1386.160336][T18932] attempt to access beyond end of device [ 1386.160336][T18932] loop2: rw=2049, want=34225520826, limit=256 [ 1386.178315][T18932] Buffer I/O error on dev loop2, logical block 34225520825, lost async page write [ 1386.192706][T18932] attempt to access beyond end of device [ 1386.192706][T18932] loop2: rw=2049, want=34225520827, limit=256 [ 1386.210968][T18932] Buffer I/O error on dev loop2, logical block 34225520826, lost async page write [ 1386.268578][T18754] team0: Port device team_slave_0 added [ 1386.280589][T18932] attempt to access beyond end of device [ 1386.280589][T18932] loop2: rw=2049, want=34225520828, limit=256 [ 1386.438850][T18754] team0: Port device team_slave_1 added [ 1387.759536][T18932] Buffer I/O error on dev loop2, logical block 34225520827, lost async page write [ 1388.353293][T18754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1388.438022][T18754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1389.423296][T18754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1389.635722][T18754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1389.745930][T18754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.825950][T18754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1391.571133][T18983] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3330'. [ 1391.834326][T18754] device hsr_slave_0 entered promiscuous mode [ 1391.845294][T18994] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1391.865664][T18754] device hsr_slave_1 entered promiscuous mode [ 1391.920722][T18754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1391.932755][T18754] Cannot create hsr debugfs directory [ 1392.733279][T19016] misc userio: Invalid payload size [ 1392.739916][T19016] misc userio: The device must be registered before sending interrupts [ 1394.719699][T19034] loop6: detected capacity change from 0 to 512 [ 1395.694642][T19034] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1395.908126][T19047] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3346'. [ 1396.157155][T19058] misc userio: Invalid payload size [ 1396.163634][T19058] misc userio: The device must be registered before sending interrupts [ 1397.113591][T19065] loop6: detected capacity change from 0 to 4096 [ 1397.183743][T19065] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1397.191322][T19065] EXT4-fs (loop6): Ignoring removed bh option [ 1397.197408][T19065] EXT4-fs (loop6): Quota format mount options ignored when QUOTA feature is enabled [ 1397.332115][T19065] EXT4-fs (loop6): mounted filesystem without journal. Opts: resuid=0x0000000000000000,errors=remount-ro,nombcache,test_dummy_encryption,bsdgroups,bh,delalloc,jqfmt=vfsv0,. Quota mode: writeback. [ 1399.261936][T18754] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1399.290334][T18754] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1399.331921][T18754] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1399.342393][T18754] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1399.474690][T18754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1399.501048][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1399.523636][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1399.542284][T18754] 8021q: adding VLAN 0 to HW filter on device team0 [ 1399.560006][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1399.571881][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1399.592398][ T4389] bridge0: port 1(bridge_slave_0) entered blocking state [ 1399.599513][ T4389] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1399.638316][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1399.650638][ T5046] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1399.657394][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1399.680088][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1399.698787][ T4389] bridge0: port 2(bridge_slave_1) entered blocking state [ 1399.705942][ T4389] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1399.734235][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1399.776729][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1399.870743][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1399.891618][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1399.953030][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1400.163067][ T5046] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1400.307671][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1400.369374][T17900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1400.390738][ T5046] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 1400.408445][ T5046] usb 1-1: config 63 contains an unexpected descriptor of type 0x1, skipping [ 1400.458123][ T5046] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1400.528595][ T5046] usb 1-1: config 63 has no interface number 0 [ 1400.566497][ T5046] usb 1-1: config 63 interface 66 has no altsetting 0 [ 1400.790731][ T5046] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 1400.799819][ T5046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.869961][T18754] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1400.899087][ T5046] usb 1-1: Product: syz [ 1400.914083][ T5046] usb 1-1: Manufacturer: syz [ 1400.918725][ T5046] usb 1-1: SerialNumber: syz [ 1400.939037][T18754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1401.023151][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1401.049806][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1401.080354][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1401.306653][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1401.501172][ T5046] usb 1-1: Found UVC 0.07 device syz (174f:8acf) [ 1401.516372][ T5046] usb 1-1: No valid video chain found. [ 1401.562540][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1401.771664][ T5046] usb 1-1: USB disconnect, device number 8 [ 1401.923535][T19131] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3358'. [ 1401.947301][T19130] loop0: detected capacity change from 0 to 1024 [ 1402.047321][T19130] EXT4-fs (loop0): Ignoring removed bh option [ 1402.074898][T19130] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1402.119446][T19130] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 1402.119446][T19130] [ 1402.655015][T19143] misc userio: Invalid payload size [ 1402.661618][T19143] misc userio: The device must be registered before sending interrupts [ 1404.503476][ T4277] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1404.598635][T19159] netlink: 'syz.2.3365': attribute type 12 has an invalid length. [ 1404.712229][T14355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1404.732589][T14355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1405.183101][ T4277] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.280807][T18754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1405.291232][T19181] loop0: detected capacity change from 0 to 512 [ 1405.346337][T19181] EXT4-fs (loop0): Ignoring removed orlov option [ 1405.384263][ T4277] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.508072][T19191] loop2: detected capacity change from 0 to 8 [ 1405.588536][T19181] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,orlov,,errors=continue. Quota mode: writeback. [ 1405.687340][T19200] loop6: detected capacity change from 0 to 16 [ 1405.765403][T19200] erofs: (device loop6): mounted with root inode @ nid 36. [ 1405.864253][T19200] attempt to access beyond end of device [ 1405.864253][T19200] loop6: rw=524288, want=34359738392, limit=16 [ 1405.887583][ T4277] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.909422][T19200] attempt to access beyond end of device [ 1405.909422][T19200] loop6: rw=0, want=34359738368, limit=16 [ 1405.926772][ T25] audit: type=1800 audit(1778898993.893:19): pid=19200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.3372" name="file1" dev="loop6" ino=86 res=0 errno=0 [ 1405.929634][T19200] attempt to access beyond end of device [ 1405.929634][T19200] loop6: rw=0, want=34359738368, limit=16 [ 1406.147559][T19209] misc userio: Invalid payload size [ 1407.233641][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1407.245023][T19223] loop3: detected capacity change from 0 to 512 [ 1407.251267][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1407.926827][T18754] device veth0_vlan entered promiscuous mode [ 1407.939813][T18754] device veth1_vlan entered promiscuous mode [ 1408.111340][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1408.117424][T19223] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 1408.175903][T19236] loop6: detected capacity change from 0 to 8 [ 1408.196090][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1408.199077][T19223] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 1408.263879][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1408.326985][T18754] device veth0_macvtap entered promiscuous mode [ 1408.336925][T18754] device veth1_macvtap entered promiscuous mode [ 1408.349163][T19223] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1408.390912][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1408.995888][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1409.142606][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1409.250909][T19254] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3384'. [ 1409.260098][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1409.306341][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1409.422608][T19258] misc userio: Invalid payload size [ 1410.249884][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1410.286140][T18754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.339329][T18754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.349393][T18754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.371785][T18754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.395930][T18754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.417050][T18754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.440026][T18754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.453704][T18754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.467799][T18754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.559038][T18754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.571612][T18754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1410.582191][T18754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1410.594530][T18754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1410.603444][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1411.286240][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1411.388837][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1412.449799][T18754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.498601][T18754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.509127][T18754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.521943][T18754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.532037][T18754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.542567][T18754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1412.550008][T19289] loop6: detected capacity change from 0 to 8 [ 1412.634913][T18754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1412.722935][T19297] misc userio: Invalid payload size [ 1413.533563][T18754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.543667][T18754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.556715][T18754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.567121][T18754] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1413.765210][T18754] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1413.827676][T18754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1413.857479][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1413.888888][T19301] loop0: detected capacity change from 0 to 512 [ 1413.901688][ T9559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1413.913850][T18754] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.923580][T18754] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.943027][T18754] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1413.983356][T18754] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1414.084315][T19307] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3398'. [ 1414.221904][T19301] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 1414.281518][T19301] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1414.324890][ T4280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1414.410596][ T4280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1414.562123][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1414.977244][T19324] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3401'. [ 1414.992218][ T21] Process accounting resumed [ 1415.106259][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1415.162776][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1415.173576][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1418.252104][T19360] loop0: detected capacity change from 0 to 8 [ 1418.400491][T19364] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3409'. [ 1418.430022][T19366] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3410'. [ 1418.465726][T19369] loop6: detected capacity change from 0 to 512 [ 1418.771567][T19377] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3412'. [ 1420.410574][ T4277] device hsr_slave_0 left promiscuous mode [ 1420.418361][T19369] EXT4-fs warning (device loop6): ext4_xattr_inode_get:506: inode #11: comm syz.6.3411: EA inode hash validation failed [ 1420.436057][ T4277] device hsr_slave_1 left promiscuous mode [ 1420.886931][T19369] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.3411: corrupted inode contents [ 1420.944278][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1421.075530][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1421.298736][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1421.330650][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1421.360708][T19369] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #15: comm syz.6.3411: mark_inode_dirty error [ 1421.419617][ T4277] device bridge_slave_1 left promiscuous mode [ 1421.710828][T19369] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.3411: corrupted inode contents [ 1421.722964][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.732144][ T4277] device bridge_slave_0 left promiscuous mode [ 1421.738351][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.766543][T19369] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2952: inode #15: comm syz.6.3411: mark_inode_dirty error [ 1421.791749][T19398] loop7: detected capacity change from 0 to 1024 [ 1421.806707][T19369] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2955: inode #15: comm syz.6.3411: mark inode dirty (error -117) [ 1421.826127][ T4277] device veth1_macvtap left promiscuous mode [ 1421.847638][ T4277] device veth0_macvtap left promiscuous mode [ 1421.869796][ T4277] device veth1_vlan left promiscuous mode [ 1421.884276][ T4277] device veth0_vlan left promiscuous mode [ 1421.896226][T19369] EXT4-fs warning (device loop6): ext4_evict_inode:304: xattr delete (err -117) [ 1422.010257][T19369] EXT4-fs (loop6): 1 orphan inode deleted [ 1422.029165][T19369] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 1422.934016][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.935477][T19411] loop6: detected capacity change from 0 to 512 [ 1422.940394][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.019924][ T25] audit: type=1800 audit(1778899010.973:20): pid=19398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.3419" name="file1" dev="loop7" ino=18 res=0 errno=0 [ 1423.063333][T19398] hfsplus: can't free extent [ 1423.422747][ T4389] hfsplus: b-tree write err: -5, ino 8 [ 1423.472988][T19411] EXT4-fs warning (device loop6): ext4_xattr_inode_get:506: inode #11: comm syz.6.3421: EA inode hash validation failed [ 1423.776954][T19411] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.3421: corrupted inode contents [ 1423.977099][T19411] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #15: comm syz.6.3421: mark_inode_dirty error [ 1425.089324][T19411] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.3421: corrupted inode contents [ 1425.103730][T19435] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3423'. [ 1425.135428][T19411] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2952: inode #15: comm syz.6.3421: mark_inode_dirty error [ 1425.175099][T19411] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2955: inode #15: comm syz.6.3421: mark inode dirty (error -117) [ 1425.191019][T19411] EXT4-fs warning (device loop6): ext4_evict_inode:304: xattr delete (err -117) [ 1425.200283][T19411] EXT4-fs (loop6): 1 orphan inode deleted [ 1425.219157][T19411] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 1425.406286][ T4277] team0 (unregistering): Port device team_slave_1 removed [ 1425.431749][ T4277] team0 (unregistering): Port device team_slave_0 removed [ 1425.688223][ T4277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1425.749182][ T4277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1425.954437][ T4277] bond0 (unregistering): Released all slaves [ 1426.067957][T19392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3418'. [ 1427.363370][T19467] loop2: detected capacity change from 0 to 2048 [ 1427.455520][T19467] Alternate GPT is invalid, using primary GPT. [ 1427.520807][T19467] loop2: p1 p2 p3 [ 1427.529392][T19476] loop7: detected capacity change from 0 to 4096 [ 1427.627330][T19476] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1427.678114][T19476] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1427.818261][ T4616] udevd[4616]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1427.840788][ T6387] udevd[6387]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1427.866992][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1427.895942][T19476] EXT4-fs (loop7): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 1427.972523][ T4616] udevd[4616]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 1427.982869][ T4177] udevd[4177]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 1428.828620][ T4179] udevd[4179]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 1429.378865][T19501] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3437'. [ 1430.162054][T14469] Bluetooth: hci1: command 0x0406 tx timeout [ 1430.988586][T19510] loop6: detected capacity change from 0 to 256 [ 1431.141703][T19515] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3440'. [ 1431.182419][T19510] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xecc0b056, utbl_chksum : 0xe619d30d) [ 1433.002692][T19541] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3447'. [ 1433.866270][T19563] capability: warning: `syz.6.3451' uses deprecated v2 capabilities in a way that may be insecure [ 1435.238618][T19580] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3443'. [ 1435.271357][T19582] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1435.289206][T19589] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3455'. [ 1435.505028][T19593] netlink: 'syz.0.3449': attribute type 72 has an invalid length. [ 1435.513058][T19593] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3449'. [ 1437.120941][T19608] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1437.594909][T19620] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3462'. [ 1440.385419][T19662] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3468'. [ 1440.931602][T19673] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3470'. [ 1441.490300][T19687] loop6: detected capacity change from 0 to 512 [ 1441.678642][T19689] loop2: detected capacity change from 0 to 1024 [ 1442.234791][T19687] EXT4-fs warning (device loop6): ext4_xattr_inode_get:506: inode #11: comm syz.6.3473: EA inode hash validation failed [ 1442.258985][T19687] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.3473: corrupted inode contents [ 1442.311816][T19687] EXT4-fs error (device loop6): ext4_dirty_inode:6077: inode #15: comm syz.6.3473: mark_inode_dirty error [ 1442.410552][T19687] EXT4-fs error (device loop6): ext4_do_update_inode:5229: inode #15: comm syz.6.3473: corrupted inode contents [ 1442.481855][T19687] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2952: inode #15: comm syz.6.3473: mark_inode_dirty error [ 1442.716228][T19703] loop3: detected capacity change from 0 to 164 [ 1442.785974][T19705] netlink: 'syz.7.3477': attribute type 72 has an invalid length. [ 1442.793898][T19705] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3477'. [ 1443.239040][T19687] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2955: inode #15: comm syz.6.3473: mark inode dirty (error -117) [ 1443.697415][T19687] EXT4-fs warning (device loop6): ext4_evict_inode:304: xattr delete (err -117) [ 1443.830735][T19687] EXT4-fs (loop6): 1 orphan inode deleted [ 1443.836591][T19687] EXT4-fs (loop6): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 1444.038917][T19715] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3479'. [ 1444.432223][T19719] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3481'. [ 1444.703892][T19732] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3482'. [ 1445.323091][T19754] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3489'. [ 1446.235980][T19760] loop7: detected capacity change from 0 to 2048 [ 1446.296837][T19762] device syzkaller0 entered promiscuous mode [ 1446.311370][T19760] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1446.561285][T19770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3494'. [ 1446.585749][T19784] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3495'. [ 1447.273251][T19803] loop0: detected capacity change from 0 to 512 [ 1447.280016][T19799] loop7: detected capacity change from 0 to 1024 [ 1447.547850][T19808] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3501'. [ 1448.153107][T19803] EXT4-fs (loop0): Test dummy encryption mode enabled [ 1448.241573][T19803] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1448.305329][T19803] EXT4-fs (loop0): SIPHASH is not a valid default hash value [ 1448.325862][T19799] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1448.355629][T19816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3503'. [ 1449.303208][T19824] loop2: detected capacity change from 0 to 128 [ 1449.373857][T19824] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 1449.398822][T19824] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1449.941936][T19841] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3507'. [ 1450.133828][T19844] loop7: detected capacity change from 0 to 512 [ 1450.275933][T19844] EXT4-fs warning (device loop7): ext4_xattr_inode_get:506: inode #11: comm syz.7.3509: EA inode hash validation failed [ 1450.388514][T19844] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.3509: corrupted inode contents [ 1450.415230][T19861] loop6: detected capacity change from 0 to 256 [ 1450.460988][T19851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3508'. [ 1450.480916][T19844] EXT4-fs error (device loop7): ext4_dirty_inode:6077: inode #15: comm syz.7.3509: mark_inode_dirty error [ 1450.538003][T19844] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.3509: corrupted inode contents [ 1450.559889][T19861] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1450.600547][T14467] Bluetooth: hci4: command 0x0406 tx timeout [ 1450.605094][T19844] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2952: inode #15: comm syz.7.3509: mark_inode_dirty error [ 1450.776668][T19873] loop3: detected capacity change from 0 to 512 [ 1450.790818][T19844] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2955: inode #15: comm syz.7.3509: mark inode dirty (error -117) [ 1450.793220][T19861] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1450.884182][T19874] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3513'. [ 1450.903136][T19844] EXT4-fs warning (device loop7): ext4_evict_inode:304: xattr delete (err -117) [ 1450.956913][T19861] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1451.019561][T19873] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1451.122844][T19844] EXT4-fs (loop7): 1 orphan inode deleted [ 1451.380609][T19844] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 1451.418292][T19873] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1452.050577][T19873] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1452.523909][T19895] netlink: 'syz.7.3517': attribute type 12 has an invalid length. [ 1452.812561][T19909] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3521'. [ 1454.251508][T19919] loop7: detected capacity change from 0 to 128 [ 1454.351538][T19919] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1454.363483][T19919] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1454.473772][T19919] fscrypt (loop7, inode 12): Unsupported encryption flags (0x3d) [ 1455.435539][T19932] loop7: detected capacity change from 0 to 512 [ 1455.514380][T19936] loop0: detected capacity change from 0 to 512 [ 1455.560039][T19936] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1455.623653][T19932] EXT4-fs warning (device loop7): ext4_xattr_inode_get:506: inode #11: comm syz.7.3527: EA inode hash validation failed [ 1455.671071][T19932] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.3527: corrupted inode contents [ 1455.692954][T19936] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1455.708472][T19932] EXT4-fs error (device loop7): ext4_dirty_inode:6077: inode #15: comm syz.7.3527: mark_inode_dirty error [ 1455.726184][T19932] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.3527: corrupted inode contents [ 1455.907378][T19932] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2952: inode #15: comm syz.7.3527: mark_inode_dirty error [ 1455.949422][T19932] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2955: inode #15: comm syz.7.3527: mark inode dirty (error -117) [ 1455.971995][T19936] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1456.013674][T19932] EXT4-fs warning (device loop7): ext4_evict_inode:304: xattr delete (err -117) [ 1456.060601][T19932] EXT4-fs (loop7): 1 orphan inode deleted [ 1456.066471][T19932] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 1456.803799][T19956] netlink: 'syz.6.3530': attribute type 12 has an invalid length. [ 1457.078774][T19966] loop0: detected capacity change from 0 to 512 [ 1457.094915][T19968] loop6: detected capacity change from 0 to 1024 [ 1457.173431][T19968] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 1457.205702][T19968] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1457.219211][T19968] EXT4-fs error (device loop6): ext4_get_journal_inode:5187: inode #32: comm syz.6.3533: iget: special inode unallocated [ 1457.250679][T19968] EXT4-fs (loop6): no journal found [ 1457.261631][T19968] EXT4-fs (loop6): can't get journal size [ 1457.265082][T19966] EXT4-fs error (device loop0): ext4_orphan_get:1406: inode #15: comm syz.0.3532: iget: bad i_size value: 38620345925642 [ 1457.278223][T19968] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,discard,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 1457.315396][T19966] EXT4-fs error (device loop0): ext4_orphan_get:1411: comm syz.0.3532: couldn't read orphan inode 15 (err -117) [ 1457.411409][T19966] EXT4-fs (loop0): mounted filesystem without journal. Opts: nombcache,delalloc,data_err=ignore,nojournal_checksum,noauto_da_alloc,bsdgroups,,errors=continue. Quota mode: writeback. [ 1457.844981][T19989] loop0: detected capacity change from 0 to 512 [ 1458.323706][T19989] EXT4-fs warning (device loop0): ext4_xattr_inode_get:506: inode #11: comm syz.0.3536: EA inode hash validation failed [ 1458.472920][T19989] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.3536: corrupted inode contents [ 1458.566865][T19989] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #15: comm syz.0.3536: mark_inode_dirty error [ 1458.604095][T19995] loop3: detected capacity change from 0 to 256 [ 1458.648898][T19989] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.3536: corrupted inode contents [ 1458.690878][T19989] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2952: inode #15: comm syz.0.3536: mark_inode_dirty error [ 1458.709582][T19995] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1458.771990][T19995] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 1458.775062][T19989] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2955: inode #15: comm syz.0.3536: mark inode dirty (error -117) [ 1458.875664][T19998] loop2: detected capacity change from 0 to 1024 [ 1458.920888][T19989] EXT4-fs warning (device loop0): ext4_evict_inode:304: xattr delete (err -117) [ 1458.965789][T19995] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1458.984117][T19989] EXT4-fs (loop0): 1 orphan inode deleted [ 1458.991084][T19998] EXT4-fs (loop2): inline encryption not supported [ 1458.997656][T19998] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1459.000537][T19989] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 1459.037189][T19998] EXT4-fs (loop2): bad geometry: bigalloc file system with non-zero first_data_block [ 1459.037189][T19998] [ 1459.375138][T20016] loop3: detected capacity change from 0 to 512 [ 1459.619635][T20016] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1460.140101][T20016] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1460.433146][T20026] netlink: 'syz.0.3543': attribute type 12 has an invalid length. [ 1460.521289][T20016] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1461.111936][T20061] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1462.084786][T20074] loop3: detected capacity change from 0 to 1024 [ 1462.184849][T20077] loop2: detected capacity change from 0 to 128 [ 1462.258301][T20081] loop7: detected capacity change from 0 to 512 [ 1462.307901][T20077] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1462.341378][T20074] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 1462.412566][T20081] EXT4-fs warning (device loop7): ext4_xattr_inode_get:506: inode #11: comm syz.7.3554: EA inode hash validation failed [ 1462.449010][T20081] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.3554: corrupted inode contents [ 1462.461586][ T144] hfsplus: b-tree write err: -5, ino 25 [ 1462.467460][ T144] hfsplus: b-tree write err: -5, ino 4 [ 1462.488735][T20077] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1462.531236][ T144] hfsplus: b-tree write err: -5, ino 2 [ 1462.542174][T20081] EXT4-fs error (device loop7): ext4_dirty_inode:6077: inode #15: comm syz.7.3554: mark_inode_dirty error [ 1462.581418][T20081] EXT4-fs error (device loop7): ext4_do_update_inode:5229: inode #15: comm syz.7.3554: corrupted inode contents [ 1462.613266][T20081] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2952: inode #15: comm syz.7.3554: mark_inode_dirty error [ 1462.665094][T20097] loop6: detected capacity change from 0 to 512 [ 1462.682732][T20081] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2955: inode #15: comm syz.7.3554: mark inode dirty (error -117) [ 1462.794619][T20097] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1462.830268][T20081] EXT4-fs warning (device loop7): ext4_evict_inode:304: xattr delete (err -117) [ 1462.864777][T20081] EXT4-fs (loop7): 1 orphan inode deleted [ 1462.892316][T20081] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 1462.923279][T20097] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1463.582955][T20097] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1465.234546][T20127] loop2: detected capacity change from 0 to 512 [ 1465.378549][T20127] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 1465.420802][T20127] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1466.087668][T20127] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.3562: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=554825211, rec_len=29131, size=2048 fake=0 [ 1466.533311][T20127] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.3562: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=554825211, rec_len=29131, size=2048 fake=0 [ 1467.106917][T20174] loop0: detected capacity change from 0 to 512 [ 1467.293894][T20174] EXT4-fs warning (device loop0): ext4_xattr_inode_get:506: inode #11: comm syz.0.3571: EA inode hash validation failed [ 1467.425657][T20174] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.3571: corrupted inode contents [ 1467.597050][T20174] EXT4-fs error (device loop0): ext4_dirty_inode:6077: inode #15: comm syz.0.3571: mark_inode_dirty error [ 1467.653759][T19993] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 5152: padding at end of block bitmap is not set [ 1467.700674][T20174] EXT4-fs error (device loop0): ext4_do_update_inode:5229: inode #15: comm syz.0.3571: corrupted inode contents [ 1467.756839][T20174] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2952: inode #15: comm syz.0.3571: mark_inode_dirty error [ 1467.984356][T20174] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2955: inode #15: comm syz.0.3571: mark inode dirty (error -117) [ 1468.018961][T20204] loop2: detected capacity change from 0 to 512 [ 1468.027631][T20174] EXT4-fs warning (device loop0): ext4_evict_inode:304: xattr delete (err -117) [ 1468.059805][T20174] EXT4-fs (loop0): 1 orphan inode deleted [ 1468.239872][T20174] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,journal_dev=0x00000000000000fd,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 1468.273139][T20204] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 1468.474947][T20204] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1469.821544][T20204] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1469.858635][T20220] loop6: detected capacity change from 0 to 128 [ 1469.949766][T20220] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1469.971145][T20222] loop0: detected capacity change from 0 to 1024 [ 1470.039867][T20220] ext4 filesystem being mounted at /458/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1470.098012][T20222] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 1470.337307][T20222] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,nodioread_nolock,noquota,barrier,quota,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 1470.416322][T20222] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1470.759298][T20222] EXT4-fs error (device loop0): ext4_free_blocks:6231: comm syz.0.3577: Freeing blocks not in datazone - block = 0, count = 16 [ 1471.603232][T20240] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3577: bg 0: block 112: padding at end of block bitmap is not set [ 1471.981353][T20240] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 44 with error 28 [ 1472.148329][T20240] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1472.148329][T20240] [ 1472.158393][T20240] EXT4-fs (loop0): Total free blocks count 0 [ 1472.164533][T20240] EXT4-fs (loop0): Free/Dirty block details [ 1472.170878][T20240] EXT4-fs (loop0): free_blocks=0 [ 1472.176626][T20240] EXT4-fs (loop0): dirty_blocks=48 [ 1472.182026][T20240] EXT4-fs (loop0): Block reservation details [ 1472.187992][T20240] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 1472.198261][T20221] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 44 with max blocks 4 with error 28 [ 1472.221017][T20221] EXT4-fs (loop0): This should not happen!! Data will be lost [ 1472.221017][T20221] [ 1472.239739][T20260] loop7: detected capacity change from 0 to 256 [ 1472.354785][T20260] exfat: Deprecated parameter 'utf8' [ 1472.360126][T20260] exfat: Deprecated parameter 'utf8' [ 1472.430896][T20260] exFAT-fs (loop7): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 1472.546335][T20272] loop3: detected capacity change from 0 to 512 [ 1472.564302][T20260] exFAT-fs (loop7): hint_cluster is invalid (17) [ 1472.620741][T20272] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1472.669694][T20272] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1472.920156][T20272] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1473.105467][T20284] loop7: detected capacity change from 0 to 4096 [ 1473.208844][T20284] EXT4-fs (loop7): Ignoring removed bh option [ 1473.238241][T20284] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,bh,grpquota,stripe=0x0000000000000001,. Quota mode: writeback. [ 1473.500900][T20282] EXT4-fs error (device loop7): ext4_empty_dir:3154: inode #12: block 80: comm syz.7.3591: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=6, rec_len=0, size=4096 fake=0 [ 1473.947315][T20282] EXT4-fs (loop7): Remounting filesystem read-only [ 1474.152847][T20282] EXT4-fs warning (device loop7): ext4_empty_dir:3156: inode #12: comm syz.7.3591: directory missing '..' [ 1475.534113][T20312] loop6: detected capacity change from 0 to 1024 [ 1476.235560][T20321] loop7: detected capacity change from 0 to 1024 [ 1477.323457][ T5794] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1477.536221][T20348] loop0: detected capacity change from 0 to 128 [ 1477.727386][T20331] loop3: detected capacity change from 0 to 2048 [ 1477.775793][T20331] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1477.950622][ T5794] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1478.030525][ T5794] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1479.315196][ T5794] usb 4-1: can't read configurations, error -71 [ 1479.546268][T20387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3610'. [ 1480.068504][ T4277] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1480.140466][ T4277] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.228161][ T4277] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1480.406459][ T4277] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.231011][ T4277] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1481.435781][ T4277] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1482.308987][T20431] loop7: detected capacity change from 0 to 1024 [ 1482.547927][T20433] loop3: detected capacity change from 0 to 164 [ 1483.316237][ T4277] bond0: (slave netdevsim0): Releasing backup interface [ 1483.340752][ T5794] Bluetooth: hci3: command 0x0409 tx timeout [ 1483.416219][ T4277] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1483.458255][ T4277] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.388282][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.394650][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.648806][T20418] chnl_net:caif_netlink_parms(): no params data found [ 1485.456704][T18279] Bluetooth: hci3: command 0x041b tx timeout [ 1485.522226][T20418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1485.568347][T20418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1485.584733][T20418] device bridge_slave_0 entered promiscuous mode [ 1485.663184][T20473] loop3: detected capacity change from 0 to 1024 [ 1485.758864][T20418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1486.820873][T20418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1486.877031][T20418] device bridge_slave_1 entered promiscuous mode [ 1486.918589][T20483] loop3: detected capacity change from 0 to 1024 [ 1487.064250][T20483] attempt to access beyond end of device [ 1487.064250][T20483] loop3: rw=0, want=5780, limit=1024 [ 1487.081299][T20418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1487.113101][T20418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1487.188253][T20418] team0: Port device team_slave_0 added [ 1487.270606][ T21] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1487.298523][T20418] team0: Port device team_slave_1 added [ 1487.376518][T20418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1487.389170][T20418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1487.448108][T20418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1487.481642][T18279] Bluetooth: hci3: command 0x040f tx timeout [ 1487.504406][T20418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1487.521637][T20418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1487.548155][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 1487.554786][T20418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1487.645195][T20418] device hsr_slave_0 entered promiscuous mode [ 1487.652520][T20418] device hsr_slave_1 entered promiscuous mode [ 1487.659415][T20418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1487.674944][T20418] Cannot create hsr debugfs directory [ 1487.872567][ T21] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1487.930727][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1488.014775][ T21] usb 1-1: Product: syz [ 1488.053415][ T21] usb 1-1: Manufacturer: syz [ 1488.077354][ T21] usb 1-1: SerialNumber: syz [ 1488.580818][ T21] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 1488.600617][ T21] usb 1-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 1488.660572][ T21] usb 1-1: 2:1: cannot get freq (v2/v3): err -71 [ 1488.681334][T20530] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1488.706914][ T21] usb 1-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 1488.827339][ T21] usb 1-1: USB disconnect, device number 9 [ 1489.456053][T20540] binder_alloc: 20539: binder_alloc_buf, no vma [ 1489.502854][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1489.634297][T16785] Bluetooth: hci3: command 0x0419 tx timeout [ 1489.669069][ T4277] device hsr_slave_0 left promiscuous mode [ 1489.770096][ T4277] device hsr_slave_1 left promiscuous mode [ 1489.809139][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1489.824869][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1490.000878][ T4277] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1490.015334][ T4277] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1490.113118][ T4277] device bridge_slave_1 left promiscuous mode [ 1490.209375][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.380912][ T4277] device bridge_slave_0 left promiscuous mode [ 1490.504983][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.679525][ T4277] device veth1_macvtap left promiscuous mode [ 1490.689118][T20566] loop7: detected capacity change from 0 to 1024 [ 1490.700523][ T4277] device veth0_macvtap left promiscuous mode [ 1490.716822][ T4277] device veth1_vlan left promiscuous mode [ 1490.722740][ T4277] device veth0_vlan left promiscuous mode [ 1490.847763][T20566] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 1490.872139][T20566] EXT4-fs error (device loop7): ext4_readdir:263: inode #2: block 16: comm syz.7.3650: path /51/file1: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1490.951653][T20566] EXT4-fs (loop7): Remounting filesystem read-only [ 1491.038315][T20566] EXT4-fs error (device loop7): ext4_generic_delete_entry:2729: inode #2: block 16: comm syz.7.3650: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1491.345215][ T4277] bond2 (unregistering): Released all slaves [ 1491.351128][T20566] EXT4-fs (loop7): Remounting filesystem read-only [ 1491.370074][ T4277] bond1 (unregistering): Released all slaves [ 1491.471397][T20566] EXT4-fs error (device loop7) in ext4_delete_entry:2800: Corrupt filesystem [ 1491.735822][T20566] EXT4-fs (loop7): Remounting filesystem read-only [ 1491.896365][T20566] EXT4-fs warning (device loop7): ext4_rename_delete:3792: inode #2: comm syz.7.3650: Deleting old file: nlink 1, error=-117 [ 1492.401352][T20587] loop3: detected capacity change from 0 to 1024 [ 1493.163469][ T4277] team0 (unregistering): Port device team_slave_1 removed [ 1493.179581][ T4277] team0 (unregistering): Port device team_slave_0 removed [ 1493.231600][ T4277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1493.447118][ T4277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1493.978840][ T4277] bond0 (unregistering): Released all slaves [ 1495.726285][T20643] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3671'. [ 1495.805064][T20643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.814506][T20643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1496.071510][T20418] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1496.075446][T20660] binder_alloc: 20659: binder_alloc_buf, no vma [ 1496.102842][T20418] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1496.188469][T20418] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1496.191544][T20663] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1496.330909][T20418] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1496.473325][T20670] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1496.935498][T20670] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1498.478657][T20418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1498.487972][T20687] device syzkaller0 entered promiscuous mode [ 1498.617478][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1498.631105][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1498.655409][T20418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1498.722035][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1498.749220][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1498.777108][T20693] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input27 [ 1498.800828][T10035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.807947][T10035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1498.842117][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1498.881832][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1498.902784][T10035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1498.909870][T10035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1498.939214][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1498.960190][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1499.010579][T20698] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1499.057059][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1499.120355][T20706] netlink: 'syz.0.3689': attribute type 5 has an invalid length. [ 1499.134693][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1499.164743][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1499.241463][T20711] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3690'. [ 1499.721322][T20713] loop0: detected capacity change from 0 to 128 [ 1499.922765][T20713] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1501.839331][ T5046] Bluetooth: hci0: command 0x0406 tx timeout [ 1502.336174][T20710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.344050][T20710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.715005][T20710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1502.742648][T20710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1503.003020][T20710] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.013735][T20710] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.022658][T20710] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.031581][T20710] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.107910][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1503.126485][T20710] syz.3.3688 (20710) used greatest stack depth: 19696 bytes left [ 1503.138968][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1503.166312][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1503.208679][T20737] device bridge0 entered promiscuous mode [ 1503.226401][T20738] device syzkaller0 entered promiscuous mode [ 1503.263644][T20418] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1503.307178][T20418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1504.060454][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1504.069017][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1504.077660][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1504.089604][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1504.107192][T20760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3704'. [ 1504.146542][T10035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1505.292867][T20777] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3709'. [ 1506.010460][T20418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1506.024501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1506.063656][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1506.215643][T20797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3714'. [ 1506.320750][T20803] ------------[ cut here ]------------ [ 1506.326252][T20803] trace type BPF program uses run-time allocation [ 1506.400606][T20803] WARNING: CPU: 0 PID: 20803 at kernel/bpf/verifier.c:11756 check_map_prog_compatibility+0x6cf/0x870 [ 1506.415443][T20809] loop3: detected capacity change from 0 to 512 [ 1506.458403][T20803] Modules linked in: [ 1506.486548][T20803] CPU: 0 PID: 20803 Comm: syz.7.3715 Not tainted syzkaller #0 [ 1506.500981][T20803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1506.529440][T20809] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1506.571222][T20803] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 1506.578110][T20803] Code: ff e8 d5 b6 ef ff 48 c7 c6 00 4c 31 8a e9 0d fd ff ff e8 c4 b6 ef ff c6 05 04 d0 ec 0b 01 48 c7 c7 60 48 31 8a e8 01 5a 28 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 1506.600767][T20803] RSP: 0018:ffffc9000327f450 EFLAGS: 00010246 [ 1506.606995][T20803] RAX: 96dd6bcc88214700 RBX: 0000000000000001 RCX: 0000000000080000 [ 1506.615488][T20803] RDX: ffffc90012df8000 RSI: 000000000000432e RDI: 000000000000432f [ 1506.623645][T20803] RBP: ffff88803dc98000 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 1506.631834][T20803] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffffc90001178038 [ 1506.639939][T20803] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff9200022f007 [ 1506.648152][T20803] FS: 00007fb6697586c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 1506.659046][T20803] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1506.675598][T20803] CR2: 00007f1fc0978286 CR3: 0000000055ce1000 CR4: 00000000003506e0 [ 1506.693391][T20803] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1506.697973][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1506.718968][T20803] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1506.739859][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1506.745547][T20803] Call Trace: [ 1506.767770][T20803] [ 1506.776331][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1506.781185][T20803] resolve_pseudo_ldimm64+0x681/0x1040 [ 1506.802080][T20803] ? check_attach_btf_id+0xe70/0xe70 [ 1506.833795][T20803] ? __mark_reg_known+0x1a0/0x1a0 [ 1506.837265][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1506.850247][T20803] bpf_check+0x4e00/0xf270 [ 1506.872230][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1506.884068][T20803] ? mark_lock+0x94/0x320 [ 1506.888982][ T8320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1506.907239][T20418] device veth0_vlan entered promiscuous mode [ 1506.919558][T20803] ? __lock_acquire+0x13bc/0x7d10 [ 1506.940575][T20803] ? bpf_get_btf_vmlinux+0x10/0x10 [ 1506.945812][T20803] ? mark_lock+0x94/0x320 [ 1506.957399][T20803] ? verify_lock_unused+0x140/0x140 [ 1506.962024][T20418] device veth1_vlan entered promiscuous mode [ 1506.972907][T20803] ? __mutex_trylock_common+0x155/0x260 [ 1506.985337][T20803] ? verify_lock_unused+0x140/0x140 [ 1506.998757][T20803] ? rcu_lock_release+0x5/0x20 [ 1507.004195][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1507.007296][T20803] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1507.018828][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1507.047657][T20803] ? lock_chain_count+0x20/0x20 [ 1507.062367][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1507.064726][T20803] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1507.080889][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1507.097282][T20803] ? lockdep_hardirqs_on+0x94/0x140 [ 1507.105329][T20418] device veth0_macvtap entered promiscuous mode [ 1507.124388][T20418] device veth1_macvtap entered promiscuous mode [ 1507.149628][T20803] ? ktime_get_with_offset+0xff/0x320 [ 1507.164174][T20418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.185608][T20803] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1507.200548][T20418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.201826][T20803] ? ktime_get_real_ts64+0x440/0x440 [ 1507.222515][T20803] ? pcpu_alloc+0x1121/0x1770 [ 1507.227398][T20803] ? __might_fault+0xb3/0x110 [ 1507.236629][T20803] ? memset+0x1e/0x40 [ 1507.244530][T20803] ? bpf_obj_name_cpy+0x190/0x1d0 [ 1507.249712][T20418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.266805][T20803] bpf_prog_load+0xfec/0x1510 [ 1507.272219][T20803] ? map_freeze+0x350/0x350 [ 1507.276936][T20418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.298049][T20803] ? __might_fault+0xb7/0x110 [ 1507.303570][T20803] ? __might_fault+0xb3/0x110 [ 1507.308463][T20418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.325647][T20803] ? bpf_lsm_bpf+0x5/0x10 [ 1507.330640][T20803] ? security_bpf+0x7a/0xa0 [ 1507.335348][T20418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.351963][T20803] __sys_bpf+0x532/0x6f0 [ 1507.356501][T20803] ? bpf_link_show_fdinfo+0x380/0x380 [ 1507.366446][T20418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1507.379624][T20803] ? vtime_user_exit+0x2c8/0x3e0 [ 1507.389231][T20803] __x64_sys_bpf+0x78/0x90 [ 1507.396238][T20418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.414119][T20803] do_syscall_64+0x4c/0xa0 [ 1507.422206][T20803] ? clear_bhb_loop+0x30/0x80 [ 1507.428635][T20418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1507.443248][T20803] ? clear_bhb_loop+0x30/0x80 [ 1507.448123][T20803] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1507.459597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1507.475111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1507.486250][T20803] RIP: 0033:0x7fb66b4fee59 [ 1507.494628][T20803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1507.519899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1507.535644][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1507.548806][T20418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.566682][T20803] RSP: 002b:00007fb669758028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1507.576221][T20418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.593240][T20803] RAX: ffffffffffffffda RBX: 00007fb66b777fa0 RCX: 00007fb66b4fee59 [ 1507.604786][T20418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.619398][T20803] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 1507.635771][T20803] RBP: 00007fb66b594d6f R08: 0000000000000000 R09: 0000000000000000 [ 1507.646557][T20418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.662852][T20803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1507.674377][T20418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.690501][T20803] R13: 00007fb66b778038 R14: 00007fb66b777fa0 R15: 00007ffde6d8d598 [ 1507.700600][T20418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.720971][T20803] [ 1507.724047][T20803] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1507.731338][T20803] CPU: 0 PID: 20803 Comm: syz.7.3715 Not tainted syzkaller #0 [ 1507.738801][T20803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1507.748876][T20803] Call Trace: [ 1507.752161][T20803] [ 1507.755089][T20803] dump_stack_lvl+0x188/0x250 [ 1507.759815][T20803] ? show_regs_print_info+0x20/0x20 [ 1507.765020][T20803] ? load_image+0x400/0x400 [ 1507.769535][T20803] panic+0x2e5/0x810 [ 1507.773535][T20803] ? bpf_jit_dump+0xd0/0xd0 [ 1507.778055][T20803] ? check_map_prog_compatibility+0x6cf/0x870 [ 1507.784128][T20803] __warn+0x248/0x2b0 [ 1507.787913][T20418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.788121][T20803] ? check_map_prog_compatibility+0x6cf/0x870 [ 1507.804567][T20803] report_bug+0x1b7/0x2e0 [ 1507.809020][T20803] handle_bug+0x3a/0x70 [ 1507.809681][T20418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.813183][T20803] exc_invalid_op+0x16/0x40 [ 1507.813205][T20803] asm_exc_invalid_op+0x16/0x20 [ 1507.813226][T20803] RIP: 0010:check_map_prog_compatibility+0x6cf/0x870 [ 1507.838984][T20803] Code: ff e8 d5 b6 ef ff 48 c7 c6 00 4c 31 8a e9 0d fd ff ff e8 c4 b6 ef ff c6 05 04 d0 ec 0b 01 48 c7 c7 60 48 31 8a e8 01 5a 28 08 <0f> 0b e9 9f fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c a5 f9 [ 1507.856825][T20418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1507.858592][T20803] RSP: 0018:ffffc9000327f450 EFLAGS: 00010246 [ 1507.858616][T20803] RAX: 96dd6bcc88214700 RBX: 0000000000000001 RCX: 0000000000080000 [ 1507.879811][T20803] RDX: ffffc90012df8000 RSI: 000000000000432e RDI: 000000000000432f [ 1507.887890][T20803] RBP: ffff88803dc98000 R08: ffff8880b9033d7f R09: 1ffff110172067af [ 1507.895871][T20803] R10: dffffc0000000000 R11: ffffed10172067b0 R12: ffffc90001178038 [ 1507.903857][T20803] R13: 0000000000000011 R14: dffffc0000000000 R15: 1ffff9200022f007 [ 1507.911937][T20803] resolve_pseudo_ldimm64+0x681/0x1040 [ 1507.917434][T20803] ? check_attach_btf_id+0xe70/0xe70 [ 1507.922742][T20803] ? __mark_reg_known+0x1a0/0x1a0 [ 1507.927770][T20803] bpf_check+0x4e00/0xf270 [ 1507.932193][T20803] ? mark_lock+0x94/0x320 [ 1507.936531][T20803] ? __lock_acquire+0x13bc/0x7d10 [ 1507.941573][T20803] ? bpf_get_btf_vmlinux+0x10/0x10 [ 1507.946699][T20803] ? mark_lock+0x94/0x320 [ 1507.951056][T20803] ? verify_lock_unused+0x140/0x140 [ 1507.956270][T20803] ? __mutex_trylock_common+0x155/0x260 [ 1507.961835][T20803] ? verify_lock_unused+0x140/0x140 [ 1507.967056][T20803] ? rcu_lock_release+0x5/0x20 [ 1507.971851][T20803] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1507.977859][T20803] ? lock_chain_count+0x20/0x20 [ 1507.982733][T20803] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 1507.988985][T20803] ? lockdep_hardirqs_on+0x94/0x140 [ 1507.994197][T20803] ? ktime_get_with_offset+0xff/0x320 [ 1507.999571][T20803] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 1508.005795][T20803] ? ktime_get_real_ts64+0x440/0x440 [ 1508.011063][T20803] ? pcpu_alloc+0x1121/0x1770 [ 1508.015816][T20803] ? __might_fault+0xb3/0x110 [ 1508.020481][T20803] ? memset+0x1e/0x40 [ 1508.024441][T20803] ? bpf_obj_name_cpy+0x190/0x1d0 [ 1508.029450][T20803] bpf_prog_load+0xfec/0x1510 [ 1508.034127][T20803] ? map_freeze+0x350/0x350 [ 1508.038646][T20803] ? __might_fault+0xb7/0x110 [ 1508.043345][T20803] ? __might_fault+0xb3/0x110 [ 1508.048046][T20803] ? bpf_lsm_bpf+0x5/0x10 [ 1508.052394][T20803] ? security_bpf+0x7a/0xa0 [ 1508.056920][T20803] __sys_bpf+0x532/0x6f0 [ 1508.061211][T20803] ? bpf_link_show_fdinfo+0x380/0x380 [ 1508.066607][T20803] ? vtime_user_exit+0x2c8/0x3e0 [ 1508.071564][T20803] __x64_sys_bpf+0x78/0x90 [ 1508.075996][T20803] do_syscall_64+0x4c/0xa0 [ 1508.080423][T20803] ? clear_bhb_loop+0x30/0x80 [ 1508.085110][T20803] ? clear_bhb_loop+0x30/0x80 [ 1508.089800][T20803] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1508.095705][T20803] RIP: 0033:0x7fb66b4fee59 [ 1508.100128][T20803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1508.119744][T20803] RSP: 002b:00007fb669758028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1508.128177][T20803] RAX: ffffffffffffffda RBX: 00007fb66b777fa0 RCX: 00007fb66b4fee59 [ 1508.136162][T20803] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 1508.144147][T20803] RBP: 00007fb66b594d6f R08: 0000000000000000 R09: 0000000000000000 [ 1508.152132][T20803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1508.160115][T20803] R13: 00007fb66b778038 R14: 00007fb66b777fa0 R15: 00007ffde6d8d598 [ 1508.168112][T20803] [ 1508.171349][T20803] Kernel Offset: disabled [ 1508.175678][T20803] Rebooting in 86400 seconds..